$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: N5xC058IgWJ9FzoP1zbngyouLvR2FG2CK3YxZqroJhU= Subject key identifier: 79:A0:C6:70:39:DA:B4:59:D4:0D:B9:5E:87:EF:5E:A2:6F:B2:39:39 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 011E Signing time: Sat 09 Aug 2025 05:10:54 +0000 Manifest this update: Sat 09 Aug 2025 05:10:54 +0000 Manifest next update: Sat 16 Aug 2025 05:10:54 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: QYWWesOIQoLQKItTadsLX0U2LLaK+kquIb2SqdFDjQM=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Aug 9 05:10:54 2025 GMT Not After : Aug 16 05:10:54 2025 GMT Subject: CN=6896d85e-e2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:0f:8a:c0:fe:0e:2d:48:06:17:b2:6f:48: 4b:df:7b:fd:ce:e6:97:80:ab:38:6a:88:bf:40:67: c8:72:87:61:66:08:40:14:f5:3a:32:68:d6:92:9e: e7:59:c9:08:fd:2e:d6:44:f4:f0:79:34:63:6a:16: 29:bd:c1:53:b1:a3:3d:f8:eb:7b:2e:eb:2f:2c:90: 62:d0:54:16:7e:ab:92:36:8c:2e:f9:45:a1:d1:d6: b4:a4:58:cd:a5:cc:8c:c6:c7:61:45:c1:5b:de:f6: 58:72:4b:b5:14:c0:ab:a3:db:f3:35:45:d4:ac:a3: 54:ea:f8:6d:b2:e0:a6:49:6f:8f:3c:db:b4:f8:e6: dc:28:7b:30:4c:fa:53:7e:3f:d7:a5:1a:34:63:ff: 07:cd:3a:45:57:f5:67:40:e1:42:41:d0:26:3a:eb: 01:64:54:83:52:ad:86:be:41:0f:a5:f4:95:36:4b: 5a:bd:00:0d:e4:49:71:d4:b6:70:8a:9a:f4:e3:d8: 2f:27:62:e9:04:3b:33:5d:d3:ea:b9:79:28:3a:fa: c1:62:ba:c2:2b:cc:bf:5c:8b:8e:36:39:d6:91:e0: 97:33:33:74:62:6c:42:c6:7e:94:c8:02:cb:8c:75: 2b:8b:ce:c6:ed:20:db:ce:e6:0e:5c:7d:e4:4d:72: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A0:C6:70:39:DA:B4:59:D4:0D:B9:5E:87:EF:5E:A2:6F:B2:39:39 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b8:86:d5:e8:fa:a4:87:9a:9f:7b:22:88:84:dc:e0:f8:2d: e6:6c:b5:f9:ab:09:3e:9f:45:7e:23:9a:2e:7e:67:8c:e4:c7: 6a:95:46:da:00:53:f7:bd:ac:6e:cd:c4:f3:cb:8c:93:7d:0c: cc:c3:bc:93:28:64:fc:3e:bb:c3:9b:63:30:9a:b3:51:18:b8: f1:c5:81:b4:7b:7e:9b:c1:34:0c:b7:9f:dc:c5:38:1b:a9:db: bf:a9:2a:66:64:ff:3d:f1:d8:a2:12:15:a7:ff:4d:50:2f:e1: a9:15:36:6d:3a:90:72:e9:a0:b7:3d:7d:50:99:19:a2:b7:34: 49:2a:3f:ea:f9:b0:24:d2:72:00:26:11:15:2d:aa:ef:45:b7: a1:26:05:34:e1:04:13:96:de:d1:ac:99:50:02:74:6c:8f:9c: 5f:4a:7a:a9:f2:72:5a:7e:8f:f7:06:81:80:bb:6c:c9:87:1b: 13:2a:5f:48:ea:be:f9:d3:cb:50:e0:74:72:22:2e:5c:fa:30: 18:7a:04:34:b0:40:16:20:ea:b6:bc:ef:06:83:cd:7b:67:14: ac:e7:2d:5f:dd:16:a8:33:45:41:44:cc:5c:0e:3e:d0:2f:11: d6:04:3f:2e:c3:38:f4:0b:d3:4d:48:11:20:83:e1:0d:cb:fa: b0:92:9b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjUwODA5MDUxMDU0WhcNMjUwODE2MDUxMDU0WjAYMRYwFAYD VQQDEw02ODk2ZDg1ZS1lMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQEPisD+Di1IBheyb0hL33v9zuaXgKs4aoi/QGfIcodhZghAFPU6MmjWkp7n WckI/S7WRPTweTRjahYpvcFTsaM9+Ot7LusvLJBi0FQWfquSNowu+UWh0da0pFjN pcyMxsdhRcFb3vZYcku1FMCro9vzNUXUrKNU6vhtsuCmSW+PPNu0+ObcKHswTPpT fj/XpRo0Y/8HzTpFV/VnQOFCQdAmOusBZFSDUq2GvkEPpfSVNktavQAN5Elx1LZw ipr049gvJ2LpBDszXdPquXkoOvrBYrrCK8y/XIuONjnWkeCXMzN0YmxCxn6UyALL jHUri87G7SDbzuYOXH3kTXKcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmgxnA5 2rRZ1A25XofvXqJvsjk5MB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVuIbV6Pqkh5qfeyKIhNzg+C3mbLX5qwk+n0V+I5oufmeM5MdqlUba AFP3vaxuzcTzy4yTfQzMw7yTKGT8PrvDm2MwmrNRGLjxxYG0e36bwTQMt5/cxTgb qdu/qSpmZP898diiEhWn/01QL+GpFTZtOpBy6aC3PX1QmRmitzRJKj/q+bAk0nIA JhEVLarvRbehJgU04QQTlt7RrJlQAnRsj5xfSnqp8nJafo/3BoGAu2zJhxsTKl9I 6r7508tQ4HRyIi5c+jAYegQ0sEAWIOq2vO8Gg817ZxSs5y1f3RaoM0VBRMxcDj7Q LxHWBD8uwzj0C9NNSBEgg+ENy/qwkptP -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:40 2025 by rpki-client