$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: f2JACvq8oGoar3dBvKTPtpnCUQHql0fBm1Pqk3KGR/w= Subject key identifier: 36:97:37:C6:7A:05:0F:68:9E:67:C5:74:97:4A:3E:B8:15:70:45:67 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 01A0 Signing time: Sat 23 Aug 2025 03:49:31 +0000 Manifest this update: Sat 23 Aug 2025 03:49:31 +0000 Manifest next update: Sat 30 Aug 2025 03:49:31 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: ZB2yfY7gP/NrviSgFqgvSEbrW+CBd64WgpG2UcFW8Cc=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Aug 23 03:49:31 2025 GMT Not After : Aug 30 03:49:31 2025 GMT Subject: CN=68a93a4b-82c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:36:de:57:5d:e9:13:8f:7b:88:c7:46:9a: f5:75:20:82:90:ad:6f:2d:a0:78:f1:3f:d8:4a:5c: 4a:4e:d9:f5:77:66:34:4e:d0:ba:c8:98:ff:f6:a0: ba:93:65:13:6c:56:40:a5:ac:17:ee:80:0e:85:27: 89:50:7d:18:b6:12:7e:9e:81:d6:4c:ed:97:ec:ce: 60:ad:34:0c:2f:6b:4e:71:33:92:b9:7d:7f:85:11: 9d:5b:51:bf:4d:c4:59:3d:f9:38:9d:4f:8b:38:d2: ce:2d:8d:40:4d:3e:ff:c5:d4:c4:58:a6:47:ea:b0: 85:8c:56:e5:5e:22:32:4a:52:de:1a:c6:a0:92:fa: 4d:b9:d1:a1:8d:93:50:8f:93:be:6c:5f:58:3a:a8: cf:6e:46:a7:17:f9:01:99:ae:82:39:8f:9f:9f:59: d0:0f:75:3a:89:8d:07:5f:e0:2e:c5:51:2c:93:a0: 5d:e3:93:0d:07:d7:43:6e:e5:3f:83:2c:b0:a5:95: 27:91:40:28:af:d9:7e:06:34:b4:47:ec:0d:78:64: a5:5f:c5:74:06:a0:93:44:67:2b:4e:cb:af:62:5a: 39:d0:19:38:84:df:67:0e:e9:56:fb:c0:c4:a0:28: 64:b3:a3:67:3d:bb:e3:9f:28:70:cc:81:49:ea:6d: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:37:C6:7A:05:0F:68:9E:67:C5:74:97:4A:3E:B8:15:70:45:67 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6f:a2:3a:07:a4:a6:dc:03:ce:dd:35:19:a2:e3:f9:e3:f7: 34:b1:92:fd:a3:3f:75:57:67:1b:39:45:a4:4d:3c:70:4d:8d: 34:8a:69:1b:74:c7:ab:83:18:4d:53:7a:61:e7:c5:ca:3c:38: 06:b2:55:28:23:36:9d:08:11:2a:68:48:e4:ec:e6:58:e6:f7: 05:1f:c4:f1:8b:bb:cf:3f:09:75:80:fc:d1:d9:9f:eb:7c:d5: d5:bc:14:00:b6:94:d0:a7:46:bb:0f:dd:01:c5:38:1d:00:12: fa:30:32:71:a9:3f:24:4d:49:56:eb:14:1a:cb:63:6d:4a:3f: 2c:2b:27:05:6d:63:d8:1f:2e:27:19:ff:5d:27:fb:e6:07:ed: 8e:f3:43:b6:fe:0f:1f:55:aa:af:2b:41:1f:20:ac:0f:de:7d: 0b:4a:45:68:b1:b4:67:ff:65:29:aa:84:d4:c3:47:ed:e3:4e: 5f:91:57:3c:51:31:c9:56:10:91:7b:ea:b0:26:26:c7:b8:a1: 27:cc:d1:92:90:11:93:d8:d3:91:ce:66:89:2b:e7:b6:21:98: 61:2b:14:92:b5:b7:f8:54:cb:5c:56:c0:b1:47:70:eb:06:aa: 7f:6a:ec:4a:e6:f1:88:6c:61:03:c1:57:46:41:51:06:61:f3: c5:2a:0e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwODIzMDM0OTMxWhcNMjUwODMwMDM0OTMxWjAYMRYwFAYD VQQDEw02OGE5M2E0Yi04MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfQ23ldd6ROPe4jHRpr1dSCCkK1vLaB48T/YSlxKTtn1d2Y0TtC6yJj/9qC6 k2UTbFZApawX7oAOhSeJUH0YthJ+noHWTO2X7M5grTQML2tOcTOSuX1/hRGdW1G/ TcRZPfk4nU+LONLOLY1ATT7/xdTEWKZH6rCFjFblXiIySlLeGsagkvpNudGhjZNQ j5O+bF9YOqjPbkanF/kBma6COY+fn1nQD3U6iY0HX+AuxVEsk6Bd45MNB9dDbuU/ gyywpZUnkUAor9l+BjS0R+wNeGSlX8V0BqCTRGcrTsuvYlo50Bk4hN9nDulW+8DE oChks6NnPbvjnyhwzIFJ6m1RRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaXN8Z6 BQ9onmfFdJdKPrgVcEVnMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwb6I6B6Sm3APO3TUZouP54/c0sZL9oz91V2cbOUWkTTxwTY00imkb dMergxhNU3ph58XKPDgGslUoIzadCBEqaEjk7OZY5vcFH8Txi7vPPwl1gPzR2Z/r fNXVvBQAtpTQp0a7D90BxTgdABL6MDJxqT8kTUlW6xQay2NtSj8sKycFbWPYHy4n Gf9dJ/vmB+2O80O2/g8fVaqvK0EfIKwP3n0LSkVosbRn/2UpqoTUw0ft405fkVc8 UTHJVhCRe+qwJibHuKEnzNGSkBGT2NORzmaJK+e2IZhhKxSStbf4VMtcVsCxR3Dr Bqp/auxK5vGIbGEDwVdGQVEGYfPFKg43 -----END CERTIFICATE-----Generated at Sun Aug 24 01:03:13 2025 by rpki-client