$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: KIJ0XwLTkvsJmzPni57LSc76ItyfcTP1lYY0Dpgg1rI= Subject key identifier: BD:7D:84:DE:B5:03:50:82:7E:A1:CA:B1:AB:EF:B9:AB:26:46:99:89 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 2414 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 6052 Signing time: Fri 22 Aug 2025 14:15:21 +0000 Manifest this update: Fri 22 Aug 2025 14:15:21 +0000 Manifest next update: Fri 29 Aug 2025 14:15:21 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: 8rT0lql/4B/Lbd6RDE4UfqgzX3iVIbCBKEsFSuh5rEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9236 (0x2414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Aug 22 14:15:21 2025 GMT Not After : Aug 29 14:15:21 2025 GMT Subject: CN=68a87b79-eabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:78:ae:78:55:91:24:5e:f4:73:51:11:fb: 5b:ed:a8:a0:f1:da:ad:dc:50:7e:f2:e4:fb:66:a4: 29:55:ec:07:c5:71:62:b2:f2:34:4b:c5:21:a7:50: 5c:d1:21:aa:a7:98:24:6c:9a:8d:68:56:48:3c:e9: 8a:39:d4:ef:45:a3:a0:96:1a:60:e7:56:69:ad:fe: 22:f5:aa:95:13:d4:26:fb:45:f9:72:2f:f2:b0:dc: 84:26:56:0e:cd:70:01:23:6d:5c:6c:87:2a:ea:95: 68:8d:07:59:7e:33:6a:9e:7d:09:67:88:45:ee:39: f7:28:c4:ee:40:4b:96:75:e9:9d:6f:fd:da:29:6a: da:45:e6:a1:8c:98:be:3d:35:c6:10:6c:88:a3:4e: 49:43:6e:87:3d:c9:53:24:75:4a:f5:19:65:3f:3d: b3:95:92:5a:66:65:7e:e3:0a:e0:c1:0a:f0:48:23: 88:d0:31:42:75:1c:56:1a:96:36:e5:85:df:4c:34: 4b:8d:32:50:16:c3:03:83:87:44:c5:06:1a:2f:eb: 43:cf:ad:f9:3f:9e:39:7e:09:c2:20:f1:f8:3c:a3: 7d:11:ae:1c:fc:e0:8c:c7:bc:9e:a2:c9:bd:c7:4e: bf:1f:15:88:15:96:f6:c3:84:58:45:e7:f4:d1:ef: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:84:DE:B5:03:50:82:7E:A1:CA:B1:AB:EF:B9:AB:26:46:99:89 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:22:b1:d1:4d:e4:5a:57:bf:84:1c:b9:9f:e6:48:0d:cd:c5: 63:e5:ff:7b:0d:9b:b2:ed:30:24:93:ad:b9:30:32:6b:c1:61: a5:46:86:13:d6:fe:d8:12:5d:fa:70:a3:4a:6e:5a:cd:8f:12: 30:de:74:5e:28:8f:61:92:71:5a:a0:63:b3:8e:a8:ad:a2:cc: c1:8b:f5:f2:7d:c7:67:2b:81:38:97:73:87:01:81:6f:22:b0: f7:9a:e5:e4:26:b6:41:36:c4:17:e0:80:e3:74:53:ac:74:15: f9:96:11:ac:83:60:1a:57:f1:85:36:29:a4:1f:8a:86:f8:d7: f5:e0:bc:71:6e:c0:64:2e:14:89:d7:76:34:90:96:4f:93:0a: ed:e6:d0:b8:4a:e6:ed:a3:e0:89:fb:dd:a5:72:29:4b:3c:54: 8f:43:67:99:19:3e:04:e4:7f:f2:10:f5:d7:a9:f7:3c:06:18: 4d:49:a8:47:80:98:dd:31:5f:7c:c0:b6:85:cd:36:13:06:86: c8:c7:2f:66:63:d5:48:e3:10:54:d6:5b:5d:6a:04:8a:ba:89: ee:a1:6a:30:ad:50:d3:00:ae:ca:af:8d:88:6e:6b:35:da:51: 15:7b:46:c6:4d:fc:e4:7f:74:4c:95:bf:69:6d:fc:13:80:2d: 2e:38:51:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwODIyMTQxNTIxWhcNMjUwODI5MTQxNTIxWjAYMRYwFAYD VQQDEw02OGE4N2I3OS1lYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z14rnhVkSRe9HNREftb7aig8dqt3FB+8uT7ZqQpVewHxXFisvI0S8Uhp1Bc 0SGqp5gkbJqNaFZIPOmKOdTvRaOglhpg51Zprf4i9aqVE9Qm+0X5ci/ysNyEJlYO zXABI21cbIcq6pVojQdZfjNqnn0JZ4hF7jn3KMTuQEuWdemdb/3aKWraReahjJi+ PTXGEGyIo05JQ26HPclTJHVK9RllPz2zlZJaZmV+4wrgwQrwSCOI0DFCdRxWGpY2 5YXfTDRLjTJQFsMDg4dExQYaL+tDz635P545fgnCIPH4PKN9Ea4c/OCMx7yeosm9 x06/HxWIFZb2w4RYRef00e+8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL19hN61 A1CCfqHKsavvuasmRpmJMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAIrHRTeRaV7+EHLmf5kgNzcVj5f97DZuy7TAkk625MDJrwWGlRoYT 1v7YEl36cKNKblrNjxIw3nReKI9hknFaoGOzjqitoszBi/XyfcdnK4E4l3OHAYFv IrD3muXkJrZBNsQX4IDjdFOsdBX5lhGsg2AaV/GFNimkH4qG+Nf14LxxbsBkLhSJ 13Y0kJZPkwrt5tC4Subto+CJ+92lcilLPFSPQ2eZGT4E5H/yEPXXqfc8BhhNSahH gJjdMV98wLaFzTYTBobIxy9mY9VI4xBU1ltdagSKuonuoWowrVDTAK7Kr42Ibms1 2lEVe0bGTfzkf3RMlb9pbfwTgC0uOFHV -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:01 2025 by rpki-client