$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: bsNZ9B1bDcxF2/dpBypizG3Car4717KaGRwnFxDG18U= Subject key identifier: 32:AB:49:15:D1:A2:B3:61:D4:17:37:6E:6A:CA:E5:C2:BC:96:7A:94 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C3C Signing time: Fri 22 Aug 2025 18:42:35 +0000 Manifest this update: Fri 22 Aug 2025 18:42:35 +0000 Manifest next update: Fri 29 Aug 2025 18:42:35 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: hTuVoOv3O66LqVANEC8Y2mUFT/fQSKyKzZ0gBSULizk=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Aug 22 18:42:35 2025 GMT Not After : Aug 29 18:42:35 2025 GMT Subject: CN=68a8ba1b-6786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:d7:8c:29:d7:d9:60:2a:1e:8b:18:fe:62: 44:d0:0f:04:47:52:a6:9c:df:3c:86:29:11:f1:6c: c0:c6:26:63:5e:ae:96:3a:23:7e:06:a7:cd:11:03: a2:99:fc:d8:dc:f7:7f:c7:f8:eb:69:3b:aa:bb:0c: 47:b3:db:de:3e:04:ab:df:dc:bb:41:ae:ec:1a:3c: 57:08:67:4f:aa:5a:dc:2e:d3:36:1c:a7:91:ec:e5: 22:2c:94:1c:d7:4d:01:33:2d:26:b8:a1:c0:30:aa: b9:fc:b2:85:64:81:9b:81:0d:07:f2:df:2d:eb:56: 20:37:75:63:97:7b:6e:1e:86:06:6d:bc:9e:2d:f1: 43:f2:9f:47:17:59:cb:31:ed:bc:b7:d6:da:e3:79: b0:41:98:f0:af:e3:53:5e:3f:77:84:87:37:37:40: 53:60:28:92:63:db:1d:84:81:88:d9:33:76:5b:61: 4b:ed:bc:85:9a:bd:a8:bc:77:33:e7:05:76:b5:e5: 40:af:e5:53:c3:26:2c:d9:aa:e5:16:d7:35:f6:03: b0:66:d3:ce:83:f9:ea:ec:cf:f7:1c:3e:30:6c:a7: 0c:f2:cb:28:06:23:09:1e:8a:7c:f5:5b:9c:c7:5a: d5:c9:83:83:1f:26:cb:a5:30:4f:dd:25:f3:04:3d: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:49:15:D1:A2:B3:61:D4:17:37:6E:6A:CA:E5:C2:BC:96:7A:94 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:42:af:6d:ea:2f:89:b8:ce:f3:44:21:69:42:39:87:95:64: ac:8c:3f:58:62:65:39:4b:6a:d5:26:2d:ae:68:4b:fb:05:94: 25:70:b2:87:41:d7:5c:55:06:da:a3:e1:ba:b8:72:10:1b:96: 60:cf:98:fe:7c:41:c4:0a:5a:c1:75:83:12:dd:00:72:68:e8: 6e:9c:23:83:e1:87:a2:65:aa:d9:87:3b:6e:12:2d:56:93:3f: 3b:6b:8d:27:25:83:6e:b5:89:f2:a2:ce:84:9c:41:bf:a6:5d: 00:e5:6c:86:6b:53:9d:5d:79:9d:09:ff:35:00:e6:45:34:10: 97:37:23:fa:d7:0e:98:47:4c:38:28:7d:27:7f:b2:66:74:ee: fa:2a:d3:51:31:d5:ef:19:6f:13:e1:d8:14:da:77:73:d0:66: fb:10:3f:71:1c:6c:4d:a9:db:8c:e1:a1:b5:78:be:08:3f:c3: 69:13:b9:a2:8b:53:b2:a7:59:84:34:95:48:2f:31:9c:fa:ed: a5:4f:0b:10:39:48:32:c5:c0:8a:97:03:2f:96:21:cc:96:df: f4:b3:9c:3f:a3:28:69:80:b0:dc:9f:f0:68:ad:42:66:50:71: fa:76:0e:f3:5c:07:fc:51:d0:b7:d2:24:61:c5:76:9f:e4:a4: 27:39:3e:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUwODIyMTg0MjM1WhcNMjUwODI5MTg0MjM1WjAYMRYwFAYD VQQDEw02OGE4YmExYi02Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv/XjCnX2WAqHosY/mJE0A8ER1KmnN88hikR8WzAxiZjXq6WOiN+BqfNEQOi mfzY3Pd/x/jraTuquwxHs9vePgSr39y7Qa7sGjxXCGdPqlrcLtM2HKeR7OUiLJQc 100BMy0muKHAMKq5/LKFZIGbgQ0H8t8t61YgN3Vjl3tuHoYGbbyeLfFD8p9HF1nL Me28t9ba43mwQZjwr+NTXj93hIc3N0BTYCiSY9sdhIGI2TN2W2FL7byFmr2ovHcz 5wV2teVAr+VTwyYs2arlFtc19gOwZtPOg/nq7M/3HD4wbKcM8ssoBiMJHop89Vuc x1rVyYODHybLpTBP3SXzBD1/xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKrSRXR orNh1Bc3bmrK5cK8lnqUMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtQq9t6i+JuM7zRCFpQjmHlWSsjD9YYmU5S2rVJi2uaEv7BZQlcLKH QddcVQbao+G6uHIQG5Zgz5j+fEHEClrBdYMS3QByaOhunCOD4YeiZarZhztuEi1W kz87a40nJYNutYnyos6EnEG/pl0A5WyGa1OdXXmdCf81AOZFNBCXNyP61w6YR0w4 KH0nf7JmdO76KtNRMdXvGW8T4dgU2ndz0Gb7ED9xHGxNqduM4aG1eL4IP8NpE7mi i1Oyp1mENJVILzGc+u2lTwsQOUgyxcCKlwMvliHMlt/0s5w/oyhpgLDcn/BorUJm UHH6dg7zXAf8UdC30iRhxXaf5KQnOT7l -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:28 2025 by rpki-client