$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: T4TmqxxJiyIgqHAMIs+NUw4uqtJlRfnxHUmD0bz/Dps= Subject key identifier: 5D:E4:2F:7F:AD:27:62:53:02:6F:E4:94:83:4B:18:5F:26:46:74:F7 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 07B7 Signing time: Fri 08 Aug 2025 21:43:14 +0000 Manifest this update: Fri 08 Aug 2025 21:43:14 +0000 Manifest next update: Fri 15 Aug 2025 21:43:14 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: eBeqWvWEryZn37n122vss3UaDjg7umVF4PEC6/48atA=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: Ld5X+hhHes8uxmazOqPYTCeJp0q6EYoIhogSp+9j3P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Aug 8 21:43:14 2025 GMT Not After : Aug 15 21:43:14 2025 GMT Subject: CN=68966f72-327d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:e4:91:29:03:96:21:5e:58:a1:40:3c:01: 0e:dc:f9:8d:97:66:21:30:6b:3e:f1:78:c6:1a:20: 23:96:92:fa:08:2e:ff:40:5e:05:e0:c8:ec:0e:5e: b6:61:e5:9e:5f:12:7f:08:67:58:10:f5:e2:6a:a4: 71:d7:91:5f:46:bd:5a:47:d7:f5:06:9c:71:b2:64: e3:17:91:f8:92:c9:c7:c4:1e:c6:ef:5f:eb:97:86: fc:98:32:b8:25:b1:ee:42:2b:55:d2:e8:2e:a7:70: 51:bb:fd:84:65:f7:e2:17:87:f4:61:78:a5:70:33: fe:71:58:bf:1e:22:13:5d:3b:76:d8:bb:c2:d5:91: 3d:47:9d:a7:ed:54:53:f0:c4:22:c9:ea:40:bf:5a: cc:b3:d0:01:1e:ab:b8:04:5a:c0:06:79:f3:dd:9b: 5d:9a:f4:bc:27:04:69:27:9e:e9:69:ef:dc:23:92: 38:3e:14:4e:46:cc:5c:71:81:f8:8a:d4:82:a8:2b: 5b:53:56:c1:3d:6a:e4:8e:43:42:e4:7b:69:d9:18: 0a:c3:69:41:63:ad:e2:15:8b:37:18:96:49:53:1c: 67:87:d3:52:d1:14:57:11:a8:7a:ba:f9:34:87:b5: ae:80:c5:57:9a:ee:7d:06:26:44:74:a1:a8:3a:3f: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:2F:7F:AD:27:62:53:02:6F:E4:94:83:4B:18:5F:26:46:74:F7 X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:42:df:c4:fb:fc:90:43:b7:c7:6e:8b:9c:09:bd:ee:55:a6: 9d:b2:a4:99:ea:0c:83:53:37:48:7c:f9:37:10:15:8b:ff:ae: 2e:04:f8:fc:58:b4:f3:fe:71:25:7c:69:4f:05:ae:e9:df:61: fc:3e:93:3c:8d:3d:28:3a:6f:f7:c5:11:8e:ac:2b:13:16:64: c0:50:47:f2:d1:38:13:69:74:d9:6b:b5:78:ac:fd:d9:43:00: 47:d5:81:df:4d:d7:10:05:d5:63:1f:2a:b0:ad:0b:e3:0b:3a: 39:8c:21:46:3b:f2:ce:b8:aa:8f:21:c6:04:83:6a:23:db:22: 37:42:5e:e5:27:01:18:9a:fd:45:80:42:ce:fe:48:10:8c:4c: 72:15:6e:e7:07:03:31:e1:80:c4:49:e5:7f:4d:98:e9:20:4b: bd:9f:9a:4d:a3:16:f6:21:4b:10:e1:d0:4a:7a:e8:f0:a2:6f: 54:10:0b:71:9a:5f:6c:4c:eb:dd:c5:dc:06:00:c6:47:bc:af: bf:95:57:9f:f3:61:c6:46:ce:a8:6e:a8:a0:6c:85:68:bc:0e: 6d:bd:a0:72:a9:f2:3e:4c:fd:d7:8c:b8:2c:72:c2:d1:e6:b4: 43:c2:a8:00:4f:de:67:3c:22:36:12:95:da:16:23:01:33:9e: c5:19:0a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUwODA4MjE0MzE0WhcNMjUwODE1MjE0MzE0WjAYMRYwFAYD VQQDEw02ODk2NmY3Mi0zMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tTkkSkDliFeWKFAPAEO3PmNl2YhMGs+8XjGGiAjlpL6CC7/QF4F4MjsDl62 YeWeXxJ/CGdYEPXiaqRx15FfRr1aR9f1BpxxsmTjF5H4ksnHxB7G71/rl4b8mDK4 JbHuQitV0ugup3BRu/2EZffiF4f0YXilcDP+cVi/HiITXTt22LvC1ZE9R52n7VRT 8MQiyepAv1rMs9ABHqu4BFrABnnz3ZtdmvS8JwRpJ57pae/cI5I4PhRORsxccYH4 itSCqCtbU1bBPWrkjkNC5Htp2RgKw2lBY63iFYs3GJZJUxxnh9NS0RRXEah6uvk0 h7WugMVXmu59BiZEdKGoOj8zUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3kL3+t J2JTAm/klINLGF8mRnT3MB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQt/E+/yQQ7fHboucCb3uVaadsqSZ6gyDUzdIfPk3EBWL/64uBPj8 WLTz/nElfGlPBa7p32H8PpM8jT0oOm/3xRGOrCsTFmTAUEfy0TgTaXTZa7V4rP3Z QwBH1YHfTdcQBdVjHyqwrQvjCzo5jCFGO/LOuKqPIcYEg2oj2yI3Ql7lJwEYmv1F gELO/kgQjExyFW7nBwMx4YDESeV/TZjpIEu9n5pNoxb2IUsQ4dBKeujwom9UEAtx ml9sTOvdxdwGAMZHvK+/lVef82HGRs6obqigbIVovA5tvaByqfI+TP3XjLgscsLR 5rRDwqgAT95nPCI2EpXaFiMBM57FGQrh -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:04 2025 by rpki-client