$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: tXNJFyXYgp13fxGjmazvpuk3eGZsSEgUyrkk8aGsDvQ= Subject key identifier: F9:EF:43:85:43:20:47:9B:89:36:0A:C2:6B:21:17:68:35:29:73:3C Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C8B Signing time: Tue 12 Aug 2025 18:25:41 +0000 Manifest this update: Tue 12 Aug 2025 18:25:40 +0000 Manifest next update: Tue 19 Aug 2025 18:25:40 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: s0PzV8WySlH2Ta4A/wamlLmNrj9lhg8uPuMThjsZtPU=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Aug 12 18:25:40 2025 GMT Not After : Aug 19 18:25:40 2025 GMT Subject: CN=689b8724-88d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:93:15:7d:a5:8d:69:ea:f1:73:62:49:74: 18:35:0e:85:06:e8:75:34:30:e2:13:fa:57:63:20: ab:f6:98:0f:13:fb:48:de:5b:f1:3a:87:b8:3a:9c: 25:b4:42:9d:19:61:f4:57:98:8f:a9:0c:98:ef:cd: 81:7a:bc:d9:12:f9:09:06:57:18:07:b7:3c:28:e4: eb:1e:3d:96:1e:dc:7f:0a:2e:4a:e5:57:af:47:fd: 33:e8:ec:76:7b:8c:06:28:a0:ab:c7:11:75:eb:a8: 51:c9:f7:90:34:4d:30:e9:a4:9d:29:05:96:ea:a5: 35:32:74:4d:63:67:ad:01:24:6b:f8:1a:ef:f0:ba: a3:97:62:ad:e9:c0:1f:c6:92:03:b2:c2:c5:88:81: 25:9d:57:1c:49:79:6f:37:4a:18:b7:47:d4:8a:1f: 55:73:1a:d9:e1:37:e8:3c:10:4e:a7:19:73:9f:e7: 5d:c2:36:1e:3a:82:22:99:c9:88:1c:39:e7:fa:84: b2:d1:61:39:ed:c7:94:eb:35:32:83:ac:9f:b4:8d: 85:f2:08:d1:0a:82:54:06:8c:d0:a9:ef:43:48:b7: eb:49:24:53:e3:33:bd:e0:18:42:1d:6e:9e:27:d3: df:e1:d7:e5:38:34:9a:0e:01:a9:be:d0:e1:af:d5: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:43:85:43:20:47:9B:89:36:0A:C2:6B:21:17:68:35:29:73:3C X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:36:c7:00:52:90:b9:e2:fc:a1:49:27:8a:06:d5:27:c8:a3: b0:aa:f2:36:f1:28:47:d2:58:6f:51:a0:df:e4:ae:a5:ff:d9: cf:44:84:f6:39:f1:39:11:19:29:7f:19:de:79:79:3a:b1:c1: c1:59:0a:29:ec:19:cb:aa:92:da:4b:fc:94:b1:6b:60:a8:c4: 60:a1:58:84:cc:5c:e2:38:c1:69:e7:9f:a9:11:1f:14:1e:86: 7b:0b:6e:20:b1:4a:ef:ec:50:65:56:6c:cd:69:06:5b:a0:27: 72:03:6b:10:02:0d:a4:46:19:03:1e:63:20:be:1c:04:2c:87: 82:27:07:d7:11:44:82:8a:fa:0c:b0:f5:98:04:fb:80:cf:35: 1b:0d:ff:7e:90:cc:30:bb:30:ef:48:d0:a8:b4:1a:fe:d6:41: 26:3f:98:93:55:02:4a:ff:b9:c5:64:f6:b4:60:0b:f7:dd:19: 0f:12:d6:07:a5:b7:f6:96:01:80:68:25:ac:ae:04:3a:fb:ec: be:0c:77:85:af:0e:b2:ca:ac:53:09:23:ca:5b:1e:fd:af:b4: e0:fe:c5:f2:1a:2f:41:6f:43:90:dd:fb:73:55:49:ef:c8:81: a6:0c:9f:e3:5d:3b:26:00:68:f0:1e:a7:ea:2f:c3:e4:bd:bb: 84:65:88:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwODEyMTgyNTQwWhcNMjUwODE5MTgyNTQwWjAYMRYwFAYD VQQDEw02ODliODcyNC04OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sCTFX2ljWnq8XNiSXQYNQ6FBuh1NDDiE/pXYyCr9pgPE/tI3lvxOoe4Opwl tEKdGWH0V5iPqQyY782BerzZEvkJBlcYB7c8KOTrHj2WHtx/Ci5K5VevR/0z6Ox2 e4wGKKCrxxF166hRyfeQNE0w6aSdKQWW6qU1MnRNY2etASRr+Brv8Lqjl2Kt6cAf xpIDssLFiIElnVccSXlvN0oYt0fUih9VcxrZ4TfoPBBOpxlzn+ddwjYeOoIimcmI HDnn+oSy0WE57ceU6zUyg6yftI2F8gjRCoJUBozQqe9DSLfrSSRT4zO94BhCHW6e J9Pf4dflODSaDgGpvtDhr9V9fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnvQ4VD IEebiTYKwmshF2g1KXM8MB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVNscAUpC54vyhSSeKBtUnyKOwqvI28ShH0lhvUaDf5K6l/9nPRIT2 OfE5ERkpfxneeXk6scHBWQop7BnLqpLaS/yUsWtgqMRgoViEzFziOMFp55+pER8U HoZ7C24gsUrv7FBlVmzNaQZboCdyA2sQAg2kRhkDHmMgvhwELIeCJwfXEUSCivoM sPWYBPuAzzUbDf9+kMwwuzDvSNCotBr+1kEmP5iTVQJK/7nFZPa0YAv33RkPEtYH pbf2lgGAaCWsrgQ6++y+DHeFrw6yyqxTCSPKWx79r7Tg/sXyGi9Bb0OQ3ftzVUnv yIGmDJ/jXTsmAGjwHqfqL8PkvbuEZYgD -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:20 2025 by rpki-client