$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: olqJPQqNjA/ndMGorTJOB34J3Kfjd8m5ZoUvIR2WpyM= Subject key identifier: FE:13:DD:F4:A1:6E:94:A0:EC:B4:AE:34:E6:2A:DA:8D:2A:82:2F:A0 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01BD Signing time: Mon 11 Aug 2025 03:10:27 +0000 Manifest this update: Mon 11 Aug 2025 03:10:27 +0000 Manifest next update: Mon 18 Aug 2025 03:10:27 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: v8XR1+XVvhGWdRX9VQbbp1u3E6vlWgIES1MH45UA/ho=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Aug 11 03:10:27 2025 GMT Not After : Aug 18 03:10:27 2025 GMT Subject: CN=68995f23-4d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:b5:0d:a6:2a:b8:f8:92:74:27:04:22:e2: b9:21:18:6e:8f:69:59:76:4a:ab:9d:f1:6e:a6:d3: 13:09:63:5d:27:13:2f:1a:22:5c:c2:6b:8f:42:89: 77:58:ee:2e:1d:63:12:6f:2f:9a:59:02:a7:89:58: 9d:c5:84:8b:84:3b:0f:e5:19:ad:3f:9f:48:d4:45: 35:e3:f1:ec:cf:08:3b:2e:f6:02:94:f9:9b:41:1d: e6:8c:d2:5c:01:74:54:c2:be:e6:76:99:80:f5:15: d5:75:bb:84:52:56:e6:c4:9f:68:c5:d6:10:81:34: d5:44:fb:c4:ea:bc:88:fc:e2:7c:0e:f2:13:78:f4: 82:3a:bd:7e:8c:6d:24:e2:88:82:77:af:93:f8:d0: 86:cb:2b:44:8b:fb:57:09:3d:61:c9:63:db:38:4e: 05:ca:05:31:8c:68:ea:5b:9a:7d:40:d1:50:dd:aa: 67:54:a5:8e:c8:04:67:5f:f4:a1:9e:ef:fe:19:9a: 9d:05:e1:5f:4a:2b:9c:f1:b0:e5:39:06:c0:d7:35: 76:3f:0e:04:f1:e9:51:01:36:96:86:17:41:3c:f9: a7:e4:f5:0c:87:4e:fe:d2:95:db:03:43:95:01:80: 71:bb:3d:2b:4b:84:f9:57:99:8f:46:32:7e:cf:01: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:DD:F4:A1:6E:94:A0:EC:B4:AE:34:E6:2A:DA:8D:2A:82:2F:A0 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:64:d3:eb:7a:ae:9f:28:cc:8c:f9:5c:38:6c:32:5e:94:9a: de:62:b0:4a:1a:01:e2:2f:7b:d7:66:21:95:b4:63:d4:8a:91: d9:65:37:73:17:e3:4d:51:5e:99:a3:2a:5d:e7:51:ac:1b:da: 19:21:8c:a6:95:4e:99:bf:84:55:43:5f:14:cb:bf:d8:71:85: 99:5d:5e:f9:e8:48:aa:41:70:18:06:19:3a:b4:8a:f0:46:e8: c0:6d:b2:3c:56:21:22:20:23:e4:22:ea:ad:fd:4e:a4:2d:70: b5:fe:7f:25:92:26:35:77:47:19:2e:10:6d:c4:da:6b:32:55: d2:27:5c:4d:b5:2d:21:e1:6b:5e:8a:3a:2d:8f:cc:5a:61:5f: d5:73:6b:d0:94:81:d1:8e:2f:6a:c9:12:59:78:5b:cb:b1:70: 51:d9:7e:9e:1c:84:eb:f1:a5:d1:0f:e6:c9:73:8e:8b:4c:75: e8:a5:2f:1e:54:4f:5a:87:dc:07:cc:aa:c2:89:b5:5f:e9:71: 09:05:92:24:ae:5e:63:57:fd:73:a6:76:cb:2e:74:4b:39:bd: da:79:a6:b5:82:06:08:c4:c6:fb:0e:4d:6a:4f:85:39:9d:a0: d6:fb:cf:15:51:2c:ba:18:3d:91:58:32:2e:a6:03:63:d3:cd: 82:6a:19:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwODExMDMxMDI3WhcNMjUwODE4MDMxMDI3WjAYMRYwFAYD VQQDEw02ODk5NWYyMy00ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Cy1DaYquPiSdCcEIuK5IRhuj2lZdkqrnfFuptMTCWNdJxMvGiJcwmuPQol3 WO4uHWMSby+aWQKniVidxYSLhDsP5RmtP59I1EU14/Hszwg7LvYClPmbQR3mjNJc AXRUwr7mdpmA9RXVdbuEUlbmxJ9oxdYQgTTVRPvE6ryI/OJ8DvITePSCOr1+jG0k 4oiCd6+T+NCGyytEi/tXCT1hyWPbOE4FygUxjGjqW5p9QNFQ3apnVKWOyARnX/Sh nu/+GZqdBeFfSiuc8bDlOQbA1zV2Pw4E8elRATaWhhdBPPmn5PUMh07+0pXbA0OV AYBxuz0rS4T5V5mPRjJ+zwESmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4T3fSh bpSg7LSuNOYq2o0qgi+gMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ZNPreq6fKMyM+Vw4bDJelJreYrBKGgHiL3vXZiGVtGPUipHZZTdz F+NNUV6Zoypd51GsG9oZIYymlU6Zv4RVQ18Uy7/YcYWZXV756EiqQXAYBhk6tIrw RujAbbI8ViEiICPkIuqt/U6kLXC1/n8lkiY1d0cZLhBtxNprMlXSJ1xNtS0h4Wte ijotj8xaYV/Vc2vQlIHRji9qyRJZeFvLsXBR2X6eHITr8aXRD+bJc46LTHXopS8e VE9ah9wHzKrCibVf6XEJBZIkrl5jV/1zpnbLLnRLOb3aeaa1ggYIxMb7Dk1qT4U5 naDW+88VUSy6GD2RWDIupgNj082Cahmd -----END CERTIFICATE-----Generated at Tue Aug 12 19:09:20 2025 by rpki-client