$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: vFnv+bzGFfr3KKrA3lt/s2r0deNax8kr5G/P1X+AN28= Subject key identifier: 0A:0D:6D:0C:1C:F4:45:A9:67:31:EB:3C:7D:73:C1:A3:3E:F6:0B:75 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 011B Signing time: Thu 07 Aug 2025 05:17:46 +0000 Manifest this update: Thu 07 Aug 2025 05:17:45 +0000 Manifest next update: Thu 14 Aug 2025 05:17:45 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: LCqP8ngN8SwE/RUru4xvnkLNcAwfb4s0TFxP/Lre638=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Aug 7 05:17:45 2025 GMT Not After : Aug 14 05:17:45 2025 GMT Subject: CN=689436f9-c6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:ac:76:1d:05:73:38:ce:90:96:d6:8d:e5: f0:51:5a:04:85:74:ff:48:30:ca:83:a9:73:d5:23: 9b:f0:4e:46:a2:e1:6b:25:1e:c0:42:03:74:2d:2b: 05:38:94:a0:0c:3a:a7:8c:39:3c:db:13:ab:f4:24: 2a:4f:3e:e2:c0:71:eb:61:7b:0b:7e:de:65:c4:fe: 79:0e:05:65:ef:6d:11:2b:56:72:be:57:26:66:c1: b2:3d:3b:ac:d4:70:1d:3d:aa:6f:05:e8:38:b3:3a: 0d:4c:95:b1:1a:9c:6f:24:b8:60:8b:90:bb:31:a0: 20:7a:4c:d9:1f:f8:7d:2f:8b:d0:e3:8f:d9:bb:de: d8:40:67:6f:20:37:67:30:fd:06:40:71:6c:d1:01: 2e:f9:e6:3f:f3:c3:14:d4:ae:0e:6e:e3:a1:22:11: eb:16:48:a1:83:cd:04:74:bf:44:93:97:e4:a7:da: 4f:94:86:be:0f:02:5f:3f:a5:79:55:12:36:0d:13: 58:0e:0e:45:b9:fd:80:19:90:0d:ea:b9:a0:0a:fc: 62:5f:15:93:e5:e8:93:8f:01:53:c3:56:34:4c:f4: b4:21:1f:48:95:90:e8:ab:07:a7:5f:a6:03:40:84: 6c:4e:19:7b:c4:c4:f3:e6:fd:50:6f:b7:2c:e0:2b: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:6D:0C:1C:F4:45:A9:67:31:EB:3C:7D:73:C1:A3:3E:F6:0B:75 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:cb:52:cc:9f:ae:dd:0b:5f:15:ca:c0:a2:48:8f:61:99:de: dd:d8:48:58:4f:0b:d7:f1:09:45:ad:48:bd:7f:03:78:7d:9b: e5:84:eb:6e:1a:6e:91:74:29:f6:82:30:a8:3f:fe:9e:3b:fe: 88:7a:db:12:eb:d4:e4:e3:43:36:fb:af:d4:29:bd:2d:84:d2: 28:81:83:9c:7f:6a:ac:34:7e:2f:37:59:a3:60:6f:c3:0a:b8: d0:f0:8e:89:3a:9a:8b:55:bc:c0:f6:52:b6:36:26:88:1e:1b: a8:ca:7e:78:c4:f4:e0:b0:1b:f0:f3:b8:64:83:32:5f:67:0a: 06:b1:80:03:3a:98:e0:5a:c7:48:4b:3a:8e:4e:0d:e1:55:aa: ae:90:5c:e5:a8:51:91:c0:36:b0:38:e7:e7:6b:b8:ee:16:b1: 3f:2c:47:55:44:1d:12:eb:d4:ff:d5:cf:80:45:9c:f0:37:96: 69:09:ea:37:7b:b9:e7:b0:41:52:b3:21:1a:ad:3f:51:07:24: 59:f2:91:03:b8:72:38:9a:ef:f9:d4:c4:e0:ea:97:25:bc:d9: 6e:23:52:02:45:80:b9:51:e3:84:f2:3a:50:12:19:42:5d:30: 41:35:f7:22:11:11:39:26:e4:0f:ef:24:9e:92:02:15:c0:23: da:1d:0f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwODA3MDUxNzQ1WhcNMjUwODE0MDUxNzQ1WjAYMRYwFAYD VQQDEw02ODk0MzZmOS1jNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSWsdh0FczjOkJbWjeXwUVoEhXT/SDDKg6lz1SOb8E5GouFrJR7AQgN0LSsF OJSgDDqnjDk82xOr9CQqTz7iwHHrYXsLft5lxP55DgVl720RK1ZyvlcmZsGyPTus 1HAdPapvBeg4szoNTJWxGpxvJLhgi5C7MaAgekzZH/h9L4vQ44/Zu97YQGdvIDdn MP0GQHFs0QEu+eY/88MU1K4ObuOhIhHrFkihg80EdL9Ek5fkp9pPlIa+DwJfP6V5 VRI2DRNYDg5Fuf2AGZAN6rmgCvxiXxWT5eiTjwFTw1Y0TPS0IR9IlZDoqwenX6YD QIRsThl7xMTz5v1Qb7cs4CtgWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoNbQwc 9EWpZzHrPH1zwaM+9gt1MB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBy1LMn67dC18VysCiSI9hmd7d2EhYTwvX8QlFrUi9fwN4fZvlhOtu Gm6RdCn2gjCoP/6eO/6IetsS69Tk40M2+6/UKb0thNIogYOcf2qsNH4vN1mjYG/D CrjQ8I6JOpqLVbzA9lK2NiaIHhuoyn54xPTgsBvw87hkgzJfZwoGsYADOpjgWsdI SzqOTg3hVaqukFzlqFGRwDawOOfna7juFrE/LEdVRB0S69T/1c+ARZzwN5ZpCeo3 e7nnsEFSsyEarT9RByRZ8pEDuHI4mu/51MTg6pclvNluI1ICRYC5UeOE8jpQEhlC XTBBNfciERE5JuQP7ySekgIVwCPaHQ93 -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:49 2025 by rpki-client