$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: Hcp2kylrzTGzzBdMfhpyPBa58LC9Cqh+OKAwUrOAP/A= Subject key identifier: A8:FE:2A:72:A1:65:B7:3B:5B:34:83:62:7C:87:F1:C2:A2:2C:EC:5E Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 05F4 Signing time: Fri 08 Aug 2025 23:21:38 +0000 Manifest this update: Fri 08 Aug 2025 23:21:37 +0000 Manifest next update: Fri 15 Aug 2025 23:21:37 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: vhVCbGzKrtWTcwBPlWYN7NWGwNqxu6nRNrVZ49kHrwA=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Aug 8 23:21:37 2025 GMT Not After : Aug 15 23:21:37 2025 GMT Subject: CN=68968681-7707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:6a:ad:36:2b:cc:f4:a6:e2:af:40:2b:fc: e7:64:f1:fd:67:64:71:33:72:7f:16:99:31:b3:a8: 83:84:b2:91:d9:b9:e5:1d:c8:a3:9d:b2:55:c5:da: 89:98:20:68:28:79:ff:bf:03:e6:77:05:88:b9:8a: dc:df:1d:0c:8a:34:ac:4f:5c:23:34:6b:7e:50:30: 53:58:55:d9:74:62:a5:09:8e:2f:4f:44:60:7a:38: 69:8c:9f:7d:89:30:ef:1b:b8:41:6d:db:39:9e:d9: 6b:eb:d3:28:42:9d:7c:4d:48:e6:71:c0:0f:f6:b9: 94:c2:52:dd:c9:cc:14:5e:48:09:d5:96:a5:f7:67: c0:17:77:96:9a:3c:73:93:cc:de:e5:0c:12:da:c0: e9:b0:66:86:00:f5:82:b7:be:a2:91:32:16:62:38: 77:de:2f:94:b6:91:92:5f:d0:28:dc:4b:a7:63:0a: c6:80:4e:59:e2:96:84:72:09:22:10:91:5a:20:04: da:f2:86:ce:8a:30:33:12:84:99:94:69:ab:bb:05: 53:85:03:9b:77:d5:eb:85:88:c8:27:c0:f0:3a:de: ad:29:65:2f:4d:1a:de:92:41:ee:53:b4:33:95:19: 27:63:2f:11:92:65:c7:e2:79:7e:16:d4:26:45:b5: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:2A:72:A1:65:B7:3B:5B:34:83:62:7C:87:F1:C2:A2:2C:EC:5E X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:10:1c:82:78:af:d6:81:46:02:5d:67:2c:ee:5c:3f:2b:86: 7e:1a:17:9a:bb:7c:fc:97:3d:de:89:d9:66:9e:7c:e2:0f:69: b3:c5:8d:f0:de:cd:b4:c5:06:c2:73:49:7e:04:bc:97:8c:1a: d6:d7:c5:31:cd:e3:a9:42:09:65:7b:97:9c:a9:13:2c:64:cc: a6:e1:1e:e3:6b:bb:fc:ab:d1:ab:2e:90:0b:26:d0:29:13:93: e9:26:e8:64:0e:49:d7:c1:88:06:1f:d5:a6:b7:73:a6:f6:69: c7:bf:62:d3:55:47:66:da:92:21:f5:16:29:6e:b6:49:e2:73: 20:79:14:8b:00:dd:e9:8a:fc:5b:c0:18:df:45:c1:a4:ec:5e: dc:3b:35:87:e1:e8:b0:69:75:a6:ad:a4:dc:d9:16:bb:ef:b0: df:bb:28:66:d4:76:2f:a3:83:84:a2:46:62:29:0e:b0:a9:84: 1a:43:d9:3e:46:3f:3e:2f:40:a8:76:40:53:3e:b9:8c:09:e0: ab:8f:56:a3:d4:42:3c:70:b9:09:de:08:c9:95:6b:a7:2f:2e: 51:7f:dc:7a:4c:99:bd:2b:75:a8:35:6d:7f:cc:3d:8b:23:87: a2:a6:c6:a2:81:7f:44:60:5a:c3:40:3b:60:7b:10:5a:ec:ec: db:57:bc:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUwODA4MjMyMTM3WhcNMjUwODE1MjMyMTM3WjAYMRYwFAYD VQQDEw02ODk2ODY4MS03NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NdqrTYrzPSm4q9AK/znZPH9Z2RxM3J/Fpkxs6iDhLKR2bnlHcijnbJVxdqJ mCBoKHn/vwPmdwWIuYrc3x0MijSsT1wjNGt+UDBTWFXZdGKlCY4vT0RgejhpjJ99 iTDvG7hBbds5ntlr69MoQp18TUjmccAP9rmUwlLdycwUXkgJ1Zal92fAF3eWmjxz k8ze5QwS2sDpsGaGAPWCt76ikTIWYjh33i+UtpGSX9Ao3EunYwrGgE5Z4paEcgki EJFaIATa8obOijAzEoSZlGmruwVThQObd9XrhYjIJ8DwOt6tKWUvTRrekkHuU7Qz lRknYy8RkmXH4nl+FtQmRbUfCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj+KnKh Zbc7WzSDYnyH8cKiLOxeMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEByCeK/WgUYCXWcs7lw/K4Z+Gheau3z8lz3eidlmnnziD2mzxY3w 3s20xQbCc0l+BLyXjBrW18UxzeOpQglle5ecqRMsZMym4R7ja7v8q9GrLpALJtAp E5PpJuhkDknXwYgGH9Wmt3Om9mnHv2LTVUdm2pIh9RYpbrZJ4nMgeRSLAN3pivxb wBjfRcGk7F7cOzWH4eiwaXWmraTc2Ra777Dfuyhm1HYvo4OEokZiKQ6wqYQaQ9k+ Rj8+L0CodkBTPrmMCeCrj1aj1EI8cLkJ3gjJlWunLy5Rf9x6TJm9K3WoNW1/zD2L I4eipsaigX9EYFrDQDtgexBa7OzbV7wM -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:27 2025 by rpki-client