$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: E9R81btEr6CpRtO/usOpIliZcxzspquJfOCTFgboi2A= Subject key identifier: 3D:81:65:F2:FD:F4:14:0E:42:C3:BF:56:33:69:D5:07:AC:F7:0E:99 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 9E Signing time: Sat 23 Aug 2025 06:32:32 +0000 Manifest this update: Sat 23 Aug 2025 06:32:32 +0000 Manifest next update: Sat 30 Aug 2025 06:32:32 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: opJ6kbeLnQSGXC4mCTQmOWCaS/XkYQ7dBUjmQk57ZrI=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Aug 23 06:32:32 2025 GMT Not After : Aug 30 06:32:32 2025 GMT Subject: CN=68a96080-6b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:47:10:cc:57:43:5d:93:18:eb:eb:cb:84: 1d:71:73:ca:0b:8d:d8:08:31:5d:be:d2:23:b1:c9: ff:f4:5e:5b:2c:cf:85:4c:05:c9:80:b2:47:54:76: fa:43:8d:77:61:c0:fb:27:03:7e:0b:bf:b5:c6:ae: 32:1a:3f:c8:fb:e1:52:19:b2:9a:03:10:7e:f8:3a: d2:dd:2d:70:46:d0:33:3e:26:2b:76:28:ea:87:70: d4:75:80:21:3e:75:45:dc:57:0b:d6:fc:9e:06:59: 2d:80:2d:33:93:22:49:41:9e:66:cb:d9:58:03:99: a7:73:19:50:cf:1c:76:b1:ce:33:a4:68:92:8e:8c: bf:16:fd:f0:0b:b5:fb:68:11:5a:c1:2d:1d:08:cc: f1:9a:31:0c:98:96:40:f2:a5:da:59:b7:28:63:e6: 5f:90:85:06:09:9c:5f:75:e5:95:6e:7a:a0:54:26: c0:7d:8c:61:53:db:d9:a9:71:5e:89:89:b1:c7:7b: 85:e4:1b:d5:8f:97:d5:30:b8:52:96:af:ce:41:9f: f0:f1:02:3d:86:9e:95:40:33:12:62:47:6e:cd:aa: 89:02:68:b8:de:f7:98:b8:bb:ca:1a:85:3a:8f:be: b0:97:da:b0:47:2c:73:71:d5:1e:a1:a0:6b:73:35: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:65:F2:FD:F4:14:0E:42:C3:BF:56:33:69:D5:07:AC:F7:0E:99 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:48:8c:85:a3:a7:2c:2f:2c:de:8a:26:a1:79:fe:55:95:0f: 3b:12:33:09:8c:1d:17:87:5e:a6:e3:6e:f9:cf:5c:f3:ee:19: c9:b3:c9:4c:d9:20:fb:39:dc:ea:06:3f:fd:7a:60:f4:e6:18: 20:78:5f:b1:cb:3d:47:a4:eb:93:fd:c3:5f:9a:1a:6f:8e:b9: 59:45:ed:2d:23:ba:ef:f8:03:01:16:7f:09:89:bc:db:53:48: 51:02:10:87:4b:1e:fd:c2:86:78:56:66:49:c5:e8:1f:99:75: 0b:d1:76:e0:bd:22:7d:c9:f6:e3:c5:aa:84:77:b9:d4:ff:49: ed:86:56:75:41:e9:a5:ca:dc:d9:c8:db:b1:95:9f:72:d8:6b: d0:2a:57:15:18:b6:39:f1:96:ee:0c:7e:13:fc:8f:60:1c:9c: 4d:f5:fc:a4:99:1b:c6:ef:93:e6:0e:f2:e4:e6:2a:d4:18:43: 0e:7e:94:23:ed:db:19:e6:f1:f3:b9:df:df:a7:12:b0:e0:c8: ea:3f:4e:55:d5:91:e9:34:4b:7d:74:92:13:0e:4c:84:3f:81: 30:e9:95:39:3c:e3:ca:41:9b:92:4d:82:06:c1:c2:d2:9d:f0: b9:ae:37:a0:d4:7e:e8:ed:eb:5f:ab:01:38:41:01:e8:b1:f3: 63:42:68:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUwODIzMDYzMjMyWhcNMjUwODMwMDYzMjMyWjAYMRYwFAYD VQQDEw02OGE5NjA4MC02YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jhHEMxXQ12TGOvry4QdcXPKC43YCDFdvtIjscn/9F5bLM+FTAXJgLJHVHb6 Q413YcD7JwN+C7+1xq4yGj/I++FSGbKaAxB++DrS3S1wRtAzPiYrdijqh3DUdYAh PnVF3FcL1vyeBlktgC0zkyJJQZ5my9lYA5mncxlQzxx2sc4zpGiSjoy/Fv3wC7X7 aBFawS0dCMzxmjEMmJZA8qXaWbcoY+ZfkIUGCZxfdeWVbnqgVCbAfYxhU9vZqXFe iYmxx3uF5BvVj5fVMLhSlq/OQZ/w8QI9hp6VQDMSYkduzaqJAmi43veYuLvKGoU6 j76wl9qwRyxzcdUeoaBrczUrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2BZfL9 9BQOQsO/VjNp1Qes9w6ZMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWSIyFo6csLyzeiiahef5VlQ87EjMJjB0Xh16m4275z1zz7hnJs8lM 2SD7OdzqBj/9emD05hggeF+xyz1HpOuT/cNfmhpvjrlZRe0tI7rv+AMBFn8Jibzb U0hRAhCHSx79woZ4VmZJxegfmXUL0XbgvSJ9yfbjxaqEd7nU/0nthlZ1QemlytzZ yNuxlZ9y2GvQKlcVGLY58ZbuDH4T/I9gHJxN9fykmRvG75PmDvLk5irUGEMOfpQj 7dsZ5vHzud/fpxKw4MjqP05V1ZHpNEt9dJITDkyEP4Ew6ZU5POPKQZuSTYIGwcLS nfC5rjeg1H7o7etfqwE4QQHosfNjQmjT -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:32 2025 by rpki-client