$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: EInVhQEPbyRG/qJJHkdk3td8Ni5sy7BtCiCrOx0WvBc= Subject key identifier: 36:18:2A:A6:AD:99:92:5B:72:2F:AD:28:B6:B2:8B:54:79:3B:89:D6 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 0186 Signing time: Thu 03 Jul 2025 04:05:04 +0000 Manifest this update: Thu 03 Jul 2025 04:05:03 +0000 Manifest next update: Thu 10 Jul 2025 04:05:03 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: UmvsEYt2pNjd5UWv98jeUGyiYcH4O1Pu/3ESdOy70fc=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Jul 3 04:05:03 2025 GMT Not After : Jul 10 04:05:03 2025 GMT Subject: CN=6866016f-3256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:96:bc:aa:76:8f:d3:a5:e1:db:6c:d8:74: ad:97:0b:50:ee:28:ae:95:e2:4c:9b:ef:58:bf:3f: 62:d0:bd:fd:45:c1:20:49:8f:35:87:e1:39:a9:9e: 7b:30:c8:91:e7:b6:4a:e8:57:8f:64:60:f8:c9:aa: 2c:f0:04:bc:35:6a:be:66:f0:a8:bf:78:d6:34:6b: d9:e4:f9:5d:f9:54:23:9e:73:51:41:cf:03:b3:1c: 98:e0:f5:cc:2d:3c:05:0c:b7:85:ae:c9:8e:bf:20: ea:09:a0:89:5c:c0:f0:b0:29:ed:eb:c1:8a:f5:90: 10:61:47:97:68:dd:4f:93:08:f0:eb:62:5e:e8:0b: 66:ab:5b:b7:ed:3c:cb:ad:64:5e:f3:dd:ec:59:a1: ef:06:42:f7:e3:e1:c2:27:4e:95:5f:c5:f3:5f:65: 94:2b:13:3e:38:31:df:90:c8:55:03:c5:b2:9e:ea: 83:41:92:28:13:38:e4:18:e9:93:b4:1c:b9:4d:62: d2:11:7b:ad:7a:e0:79:8f:66:45:bb:26:86:02:83: b4:d5:1d:9a:81:e1:61:e9:f3:23:5e:50:5a:d9:34: 5b:a1:37:7d:fe:f7:a7:9e:14:a4:f8:e8:30:b9:01: 44:7f:78:5e:ce:a9:3c:be:ee:30:b7:71:33:b3:7b: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:18:2A:A6:AD:99:92:5B:72:2F:AD:28:B6:B2:8B:54:79:3B:89:D6 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4b:5b:18:5a:b3:3b:d7:52:8a:d1:bc:3b:a6:ac:82:68:25: 98:36:eb:8d:b1:31:82:73:83:bb:6c:d5:c2:30:6b:bc:fe:63: 3f:fd:32:79:09:3e:67:af:0f:6c:8d:bd:32:cc:0f:00:10:74: d9:e6:7f:bb:0f:74:cb:71:29:e8:d0:e7:a7:94:61:7e:a1:da: fa:d2:be:27:d4:4e:28:6c:d3:b6:84:ed:c6:91:d9:e1:4f:78: f2:dd:f2:2a:45:4c:66:14:ea:92:ca:dd:09:68:71:29:be:a6: 4f:b4:ec:e5:93:27:7a:29:94:2f:cb:74:42:85:f8:77:76:af: 9b:d6:c7:fa:e5:3c:d2:bd:b0:5a:fa:9f:29:87:93:53:88:08: 9c:cd:fe:f4:57:42:ad:21:d0:2a:52:00:ad:28:91:f5:77:a5: 2a:5c:3d:6b:21:09:5d:fe:83:e8:e7:66:4e:97:30:63:db:18: 88:32:8f:54:fa:f8:9f:49:75:dc:f5:b6:ba:a5:f9:fd:71:2d: 67:c8:53:87:9e:66:82:6a:15:e9:de:57:a6:a7:56:a3:55:20: 67:45:c8:36:ed:b5:94:64:ef:e1:dc:c0:4b:d9:e6:34:ca:78: a3:e3:8d:87:8c:20:bb:8b:84:17:bc:36:74:67:16:dc:9a:19: 42:80:8e:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwNzAzMDQwNTAzWhcNMjUwNzEwMDQwNTAzWjAYMRYwFAYD VQQDEw02ODY2MDE2Zi0zMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNqWvKp2j9Ol4dts2HStlwtQ7iiuleJMm+9Yvz9i0L39RcEgSY81h+E5qZ57 MMiR57ZK6FePZGD4yaos8AS8NWq+ZvCov3jWNGvZ5Pld+VQjnnNRQc8DsxyY4PXM LTwFDLeFrsmOvyDqCaCJXMDwsCnt68GK9ZAQYUeXaN1Pkwjw62Je6Atmq1u37TzL rWRe893sWaHvBkL34+HCJ06VX8XzX2WUKxM+ODHfkMhVA8WynuqDQZIoEzjkGOmT tBy5TWLSEXuteuB5j2ZFuyaGAoO01R2ageFh6fMjXlBa2TRboTd9/vennhSk+Ogw uQFEf3hezqk8vu4wt3Ezs3t1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYYKqat mZJbci+tKLayi1R5O4nWMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfS1sYWrM711KK0bw7pqyCaCWYNuuNsTGCc4O7bNXCMGu8/mM//TJ5 CT5nrw9sjb0yzA8AEHTZ5n+7D3TLcSno0OenlGF+odr60r4n1E4obNO2hO3Gkdnh T3jy3fIqRUxmFOqSyt0JaHEpvqZPtOzlkyd6KZQvy3RChfh3dq+b1sf65TzSvbBa +p8ph5NTiAiczf70V0KtIdAqUgCtKJH1d6UqXD1rIQld/oPo52ZOlzBj2xiIMo9U +vifSXXc9ba6pfn9cS1nyFOHnmaCahXp3lemp1ajVSBnRcg27bWUZO/h3MBL2eY0 ynij442HjCC7i4QXvDZ0ZxbcmhlCgI6S -----END CERTIFICATE-----Generated at Fri Jul 4 11:21:58 2025 by rpki-client