$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: vGBKWCE/2yQglKIOC8g5SMsBFHalR2bshJOU7ynHTEI= Subject key identifier: 9E:88:61:58:67:66:D4:2A:1E:5C:5B:4E:87:E9:E4:81:1A:4A:B7:84 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 362E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3581 Signing time: Fri 22 Aug 2025 14:24:22 +0000 Manifest this update: Fri 22 Aug 2025 14:24:22 +0000 Manifest next update: Fri 29 Aug 2025 14:24:22 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: UlG5xf5najcVVPCoCTOA/e4mWaI6xM7xVgx1okRKYJA=) 2: 608B0526308511F0AD5E7760C4F9AE02.roa (hash: IQxavqzp1vN1iLPUK4ueYnBGYYrnno6RG5YnYTMnydE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13870 (0x362e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Aug 22 14:24:22 2025 GMT Not After : Aug 29 14:24:22 2025 GMT Subject: CN=68a87d96-7045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:79:ca:bc:ad:b9:b5:80:eb:b3:2c:8c:f9: 1d:6e:db:80:0e:24:62:22:fd:04:e0:04:f2:5b:13: 99:9f:6d:a2:63:a2:f1:bc:2a:8a:5a:cc:fc:e1:95: 25:81:72:03:14:44:93:86:c9:41:7d:31:90:ab:ff: a4:9e:a5:1a:03:f5:92:54:cc:85:c2:e2:d7:95:f5: 68:f8:c8:70:40:fd:f0:d5:4d:41:16:47:16:8a:f8: ff:fa:09:32:42:81:cc:90:69:2f:02:e4:5e:77:05: 7e:e9:fc:db:a8:8a:ed:9a:13:3f:6b:83:e3:b4:2f: ef:53:89:24:f9:fb:70:ff:9b:78:74:82:56:15:e4: 00:3d:17:f0:80:72:36:53:54:00:15:c4:fb:8f:6d: 9c:17:4e:8a:2b:b7:fd:f5:38:02:20:49:28:60:9f: 62:60:09:d8:10:a2:ae:72:95:72:1c:4d:21:05:90: bb:85:94:87:2c:4b:d9:89:46:82:80:73:40:44:bb: 31:80:70:14:df:fb:a8:19:37:0e:73:e7:4d:20:b9: 60:30:b9:23:ac:b0:f0:a7:a8:3e:d7:69:a9:bf:02: 14:4d:15:cc:b7:31:41:06:25:0a:76:2d:bd:c2:22: 55:65:45:49:f5:d0:83:db:c9:9d:c6:e7:55:c8:02: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:61:58:67:66:D4:2A:1E:5C:5B:4E:87:E9:E4:81:1A:4A:B7:84 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2d:48:e7:d5:35:6e:5b:14:6c:56:63:14:1a:12:f2:33:c0: ea:2b:f7:1a:2d:5d:5d:e7:65:63:0e:d3:5e:6e:e7:14:0a:74: 0d:c9:85:d9:d9:70:9d:56:e6:eb:da:d4:bd:c2:ed:f1:64:03: a5:42:ff:16:3f:34:43:ba:7b:34:e9:69:b4:43:ea:76:ca:3a: ea:15:63:1b:58:bf:81:38:6b:f0:33:88:59:f7:9f:3e:e9:b3: 9d:0b:11:e4:63:ad:91:f2:8f:87:31:2a:0b:7f:4e:86:0b:30: 4e:7e:93:35:52:81:bc:a6:c1:7d:3e:9d:c2:57:67:54:42:ba: c7:e5:71:90:da:9c:73:1b:3a:da:0f:81:4e:eb:43:ca:2e:db: 64:06:93:3d:52:00:58:67:18:85:52:2e:e3:fd:0a:b7:df:24: ad:6f:48:da:18:11:3c:68:84:60:21:d7:71:30:da:a9:9e:fa: ea:b3:cc:6d:7f:f4:48:f1:c9:96:5f:40:9a:4b:34:4b:89:de: 5b:07:04:6b:5f:17:81:f0:28:d9:ac:2f:44:b4:c8:49:e3:2c: b5:28:1f:20:23:9e:5c:cd:4e:b4:12:05:2b:a1:a7:76:76:74: 6a:ab:72:f7:26:c1:67:15:5f:4a:ea:f3:8a:93:55:b8:ba:4c: 7d:4d:62:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwODIyMTQyNDIyWhcNMjUwODI5MTQyNDIyWjAYMRYwFAYD VQQDEw02OGE4N2Q5Ni03MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFJ5yrytubWA67MsjPkdbtuADiRiIv0E4ATyWxOZn22iY6LxvCqKWsz84ZUl gXIDFESThslBfTGQq/+knqUaA/WSVMyFwuLXlfVo+MhwQP3w1U1BFkcWivj/+gky QoHMkGkvAuRedwV+6fzbqIrtmhM/a4PjtC/vU4kk+ftw/5t4dIJWFeQAPRfwgHI2 U1QAFcT7j22cF06KK7f99TgCIEkoYJ9iYAnYEKKucpVyHE0hBZC7hZSHLEvZiUaC gHNARLsxgHAU3/uoGTcOc+dNILlgMLkjrLDwp6g+12mpvwIUTRXMtzFBBiUKdi29 wiJVZUVJ9dCD28mdxudVyAKN4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6IYVhn ZtQqHlxbTofp5IEaSreEMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLUjn1TVuWxRsVmMUGhLyM8DqK/caLV1d52VjDtNebucUCnQNyYXZ 2XCdVubr2tS9wu3xZAOlQv8WPzRDuns06Wm0Q+p2yjrqFWMbWL+BOGvwM4hZ958+ 6bOdCxHkY62R8o+HMSoLf06GCzBOfpM1UoG8psF9Pp3CV2dUQrrH5XGQ2pxzGzra D4FO60PKLttkBpM9UgBYZxiFUi7j/Qq33yStb0jaGBE8aIRgIddxMNqpnvrqs8xt f/RI8cmWX0CaSzRLid5bBwRrXxeB8CjZrC9EtMhJ4yy1KB8gI55czU60EgUroad2 dnRqq3L3JsFnFV9K6vOKk1W4ukx9TWIQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:33 2025 by rpki-client