$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: npiQMUAGo0CMwRgY+sjDJsi/2/PXJnRnFCCjuKAxhw4= Subject key identifier: 02:67:77:F2:D4:C0:C3:9A:31:C4:4A:A2:23:17:7D:70:89:70:48:A3 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01BE Signing time: Sat 09 Aug 2025 03:25:02 +0000 Manifest this update: Sat 09 Aug 2025 03:25:01 +0000 Manifest next update: Sat 16 Aug 2025 03:25:01 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: l33K9HRyQln1IzlBpOWSm6iX37/aLNYV70NKVz42rt8=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Aug 9 03:25:01 2025 GMT Not After : Aug 16 03:25:01 2025 GMT Subject: CN=6896bf8e-1bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:6f:07:0e:3a:5f:35:dd:3b:d1:d4:c7:ab: 99:4f:fb:dd:49:87:d4:32:2a:3c:94:70:4a:8e:b8: e3:71:59:93:f0:bf:7a:c6:95:47:28:44:ea:90:7a: a5:81:a5:91:ff:32:de:1c:8a:66:80:71:cb:6a:39: 31:9b:be:2c:bc:52:5a:66:e8:3e:cf:d4:08:df:db: 33:9a:69:6e:9e:35:ec:fc:01:2e:ed:2a:47:e6:cf: 41:f7:10:e9:4c:a4:a9:d9:4f:ca:3f:d4:08:c1:d3: bb:44:a3:7e:92:ab:60:6f:7d:f2:82:07:4a:f0:e7: 71:70:bc:70:9e:52:5c:cd:82:46:42:28:82:ab:0f: 05:c5:19:ac:9b:85:37:87:c3:02:20:d0:85:90:68: b8:f1:b9:ef:9d:e2:50:1b:4c:99:a4:85:bc:66:83: 64:b5:49:66:d3:3b:e1:f8:a8:59:0f:89:33:55:4d: 4a:3b:34:b6:c3:fc:b7:8f:1b:8b:29:6a:5c:1b:28: f8:2f:30:ac:e9:8e:89:29:2e:ce:e8:36:eb:88:4b: 7a:6b:dc:8d:f1:94:ff:76:66:7c:a2:aa:35:50:a5: c5:f8:73:f4:e8:65:16:ba:cc:20:97:f5:14:d1:c4: 04:da:f6:51:49:2c:9f:ec:bf:41:ae:9e:32:0a:8b: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:67:77:F2:D4:C0:C3:9A:31:C4:4A:A2:23:17:7D:70:89:70:48:A3 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:b6:fd:fe:81:c3:c0:70:cf:19:09:7b:f2:9c:eb:ed:86: 02:86:b0:cf:68:f0:1e:9b:38:3b:bf:6f:8c:79:a3:35:c9:c1: 60:43:9a:5f:5f:9d:b9:84:98:a8:30:82:35:fb:9a:ad:8c:77: 54:de:93:2a:b9:57:d2:e0:5e:79:91:6e:be:83:78:40:83:8d: e3:d8:09:ec:90:9f:d2:39:71:42:32:73:a6:01:cf:3d:db:c8: 95:b1:82:95:8f:34:77:95:68:70:14:80:32:48:ff:bd:ad:6f: e3:e1:42:a7:a3:da:64:2e:68:d9:b4:4c:99:71:50:d9:e8:2c: 18:01:82:65:a5:80:a7:fb:26:15:a5:40:d0:a6:88:d5:eb:cc: 7e:02:97:34:bc:16:0c:af:ce:ec:83:eb:bf:af:14:e7:4f:37: ce:34:f2:1e:3f:e3:de:31:5b:06:96:5e:34:b3:49:57:95:1b: cc:33:41:99:58:d0:81:82:a0:81:c0:e0:58:3e:26:f0:15:fb: 77:ba:f2:d7:b4:9d:5a:36:f6:f5:4f:df:95:c1:c0:e7:e4:77: 0d:e4:52:4f:1c:dd:e5:e1:ab:81:ac:bb:43:b4:05:ea:fa:58: 94:14:d8:7e:34:c0:ff:38:95:95:f9:5b:c2:45:4a:9d:6b:a6: 18:e1:6d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwODA5MDMyNTAxWhcNMjUwODE2MDMyNTAxWjAYMRYwFAYD VQQDEw02ODk2YmY4ZS0xYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ghvBw46XzXdO9HUx6uZT/vdSYfUMio8lHBKjrjjcVmT8L96xpVHKETqkHql gaWR/zLeHIpmgHHLajkxm74svFJaZug+z9QI39szmmlunjXs/AEu7SpH5s9B9xDp TKSp2U/KP9QIwdO7RKN+kqtgb33yggdK8OdxcLxwnlJczYJGQiiCqw8FxRmsm4U3 h8MCINCFkGi48bnvneJQG0yZpIW8ZoNktUlm0zvh+KhZD4kzVU1KOzS2w/y3jxuL KWpcGyj4LzCs6Y6JKS7O6DbriEt6a9yN8ZT/dmZ8oqo1UKXF+HP06GUWuswgl/UU 0cQE2vZRSSyf7L9Brp4yCosChwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJnd/LU wMOaMcRKoiMXfXCJcEijMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGpbb9/oHDwHDPGQl78pzr7YYChrDPaPAemzg7v2+MeaM1ycFgQ5pf X525hJioMII1+5qtjHdU3pMquVfS4F55kW6+g3hAg43j2AnskJ/SOXFCMnOmAc89 28iVsYKVjzR3lWhwFIAySP+9rW/j4UKno9pkLmjZtEyZcVDZ6CwYAYJlpYCn+yYV pUDQpojV68x+Apc0vBYMr87sg+u/rxTnTzfONPIeP+PeMVsGll40s0lXlRvMM0GZ WNCBgqCBwOBYPibwFft3uvLXtJ1aNvb1T9+VwcDn5HcN5FJPHN3l4auBrLtDtAXq +liUFNh+NMD/OJWV+VvCRUqda6YY4W2x -----END CERTIFICATE-----Generated at Mon Aug 11 01:49:22 2025 by rpki-client