$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: r5DALcBThakYDrD+viIpvcu7P0/JwI8bvbBZT5XfVM0= Subject key identifier: 6C:1E:EB:09:6D:F4:2F:7C:73:31:71:1E:57:0D:DC:ED:BD:CA:23:71 Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 065A Signing time: Fri 22 Aug 2025 22:46:29 +0000 Manifest this update: Fri 22 Aug 2025 22:46:28 +0000 Manifest next update: Fri 29 Aug 2025 22:46:28 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: S94W5hLZhsBGCHdc/uda788OPGg7HdVuIr6geoHLS5M=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Aug 22 22:46:28 2025 GMT Not After : Aug 29 22:46:28 2025 GMT Subject: CN=68a8f345-5a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:17:31:8d:73:c6:9d:8c:92:74:87:13:70: c2:7a:57:94:6b:52:c4:4b:33:77:37:98:ea:2c:7d: e5:39:8f:fe:0f:44:d3:3b:91:ff:cf:db:24:c9:87: e9:6b:5e:8d:6f:97:a2:43:43:04:b6:e9:9b:54:37: b1:a4:79:2b:96:5f:34:01:01:26:3f:d9:39:f8:65: 83:6c:f5:7c:de:f9:ad:7f:76:4c:4f:a5:9f:59:b7: 16:8d:75:a0:1c:2b:f5:6e:24:43:ea:ff:49:86:68: 2c:6c:a7:e4:0f:cc:0e:c6:38:cb:f8:dc:59:ff:2d: ff:14:c7:cb:b2:0b:55:3c:16:73:86:a7:24:c3:23: e7:ab:dd:76:cd:9d:5f:f8:1e:98:61:c3:1a:b3:ad: 6f:07:62:eb:77:a7:86:6e:c7:6b:86:16:13:d8:65: 93:a8:90:98:59:8f:92:ff:31:dd:dc:54:18:86:8f: 7f:97:56:c0:5c:dc:90:18:56:9a:8f:e5:6b:b8:8a: 2c:b5:f0:ff:bd:a7:e4:71:a9:d9:d5:3e:a3:2d:a5: 80:01:c1:b0:4e:10:8f:55:ca:16:60:5e:65:9e:4c: d3:ef:41:83:6e:1e:7a:bb:7f:1c:1d:15:88:5e:a5: 6a:84:92:66:00:1d:a1:f2:d3:53:0f:9a:b0:6a:16: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1E:EB:09:6D:F4:2F:7C:73:31:71:1E:57:0D:DC:ED:BD:CA:23:71 X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:60:e6:ab:d7:57:15:7e:a3:bb:15:7e:3d:ff:a4:03:15:52: 6d:a2:93:1b:48:76:3c:6e:b7:7f:5b:e8:93:aa:2a:f1:58:f5: ea:67:e0:dd:4d:77:53:a8:c0:b9:0f:63:e6:38:39:6c:b5:00: ab:09:54:b2:0f:f7:44:6e:96:98:00:a7:9b:1b:8c:ee:99:58: 42:8d:a3:d2:ff:2a:49:82:61:00:fd:19:5e:8a:47:a4:36:a0: b1:a6:20:95:f5:68:b9:35:de:0f:1a:06:1c:63:44:60:d5:21: d4:b5:4e:39:6d:73:8d:58:a2:93:bc:9c:24:95:b4:1b:00:b4: d6:7b:8e:b3:ac:40:5d:3e:e1:36:5c:61:5f:13:dd:e4:f4:00: b1:80:24:f6:c9:ba:e4:e8:36:d3:c1:c1:eb:cf:9b:f6:24:44: c9:36:d9:1a:98:6a:b6:8b:9a:a8:0d:a6:52:71:61:12:64:13: 2d:22:30:82:10:f9:88:b5:ed:f1:fc:48:f4:32:2e:17:50:22: a4:48:7a:44:bf:52:f6:e8:2a:64:ae:e7:06:e7:24:34:08:47: 21:c6:f8:bf:10:71:01:81:da:5a:d7:88:9e:3d:f0:ad:30:49: cd:c8:5a:32:f9:45:9b:ed:ce:f3:31:ff:60:e8:be:98:8c:2d: 4c:8b:91:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUwODIyMjI0NjI4WhcNMjUwODI5MjI0NjI4WjAYMRYwFAYD VQQDEw02OGE4ZjM0NS01YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w8XMY1zxp2MknSHE3DCeleUa1LESzN3N5jqLH3lOY/+D0TTO5H/z9skyYfp a16Nb5eiQ0MEtumbVDexpHkrll80AQEmP9k5+GWDbPV83vmtf3ZMT6WfWbcWjXWg HCv1biRD6v9JhmgsbKfkD8wOxjjL+NxZ/y3/FMfLsgtVPBZzhqckwyPnq912zZ1f +B6YYcMas61vB2Lrd6eGbsdrhhYT2GWTqJCYWY+S/zHd3FQYho9/l1bAXNyQGFaa j+VruIostfD/vafkcanZ1T6jLaWAAcGwThCPVcoWYF5lnkzT70GDbh56u38cHRWI XqVqhJJmAB2h8tNTD5qwahbBbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwe6wlt 9C98czFxHlcN3O29yiNxMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmYOar11cVfqO7FX49/6QDFVJtopMbSHY8brd/W+iTqirxWPXqZ+Dd TXdTqMC5D2PmODlstQCrCVSyD/dEbpaYAKebG4zumVhCjaPS/ypJgmEA/Rleikek NqCxpiCV9Wi5Nd4PGgYcY0Rg1SHUtU45bXONWKKTvJwklbQbALTWe46zrEBdPuE2 XGFfE93k9ACxgCT2ybrk6DbTwcHrz5v2JETJNtkamGq2i5qoDaZScWESZBMtIjCC EPmIte3x/Ej0Mi4XUCKkSHpEv1L26CpkrucG5yQ0CEchxvi/EHEBgdpa14iePfCt MEnNyFoy+UWb7c7zMf9g6L6YjC1Mi5H2 -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:07 2025 by rpki-client