$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: H/mRk3FddKkFACxoJ4tglQiFKxt8kCt0oEvbVo6AMBQ= Subject key identifier: D9:68:D2:97:55:E2:06:BB:94:FB:A4:C4:50:67:A9:64:3F:53:55:85 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 0323 Signing time: Sat 09 Aug 2025 01:21:29 +0000 Manifest this update: Sat 09 Aug 2025 01:21:29 +0000 Manifest next update: Sat 16 Aug 2025 01:21:29 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: VYzwAQ9L53weEkI0F33NyHutP50YXh/NyszJAeAd/BQ=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: Aug 9 01:21:29 2025 GMT Not After : Aug 16 01:21:29 2025 GMT Subject: CN=6896a299-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:fa:c1:cd:b6:28:18:18:d1:58:1e:e9:5f: 87:f0:59:4d:c5:be:29:c1:1d:4f:95:95:f9:56:74: a3:8a:80:10:c8:c8:70:49:ed:e4:2f:01:a5:16:ec: 01:5b:02:ce:3f:96:86:c6:c7:41:bc:b1:d6:7b:67: da:bf:99:b2:b9:cf:30:99:c3:67:3f:cc:c3:53:4e: 09:ab:56:af:95:e4:83:43:72:c4:f4:52:ad:d5:8c: 8b:f6:6e:56:aa:13:d9:bc:ac:23:35:a4:c0:55:ed: bf:f3:70:18:7a:54:15:bd:ea:ce:60:a1:98:07:39: 5d:e8:25:de:92:e5:1d:14:a0:88:8b:e3:d1:a0:88: ef:f5:41:99:27:a9:fc:7e:4e:81:3e:8e:1d:73:a3: 5a:75:5f:d8:39:2b:9f:2b:ea:3a:59:0a:80:99:70: 8d:b0:4f:92:7a:35:12:46:8d:f8:26:9d:c9:90:3e: a0:1e:77:b9:1c:2a:6a:be:ed:8b:00:da:e2:11:01: 36:7d:59:e5:21:a1:b8:39:46:ef:0a:a8:d3:0b:f3: c6:56:e9:76:1d:ba:f6:3c:0f:ec:0e:07:a3:8c:8b: 18:1c:d8:91:f5:66:88:7f:77:7a:54:1f:a1:17:a0: 56:cf:14:32:7a:4c:ff:f2:4c:26:07:7a:e0:24:c5: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:D2:97:55:E2:06:BB:94:FB:A4:C4:50:67:A9:64:3F:53:55:85 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:8a:85:d2:98:24:98:a9:72:72:09:c8:2a:dd:9a:97:c0:a0: 93:7f:41:d2:6a:0c:bc:fe:6f:87:f2:7f:4a:83:c7:3d:cf:ef: b6:89:73:d4:ea:7b:17:a8:45:d2:03:fe:66:d6:c4:6c:08:94: 54:aa:b8:aa:59:86:4e:4d:6d:fc:b9:5a:af:ad:80:3e:6c:3c: ed:c9:2b:5b:bb:53:d7:e4:54:ff:87:3b:93:b1:7f:f8:d9:23: f5:9a:85:00:c3:b5:a4:1f:8f:8d:b2:89:c4:b1:51:ef:28:82: b8:0b:28:ab:d2:81:97:26:87:ac:b0:50:61:42:cb:95:99:0c: 13:39:79:06:6f:e6:b7:64:e0:71:72:35:19:19:44:48:43:0b: 2c:94:34:3e:39:d7:90:d3:fa:a0:f4:58:0c:eb:ad:10:fc:c2: 71:97:13:71:91:56:2b:5c:68:fd:ca:31:ea:6c:80:f8:ef:36: 67:a1:e5:4f:ca:ce:64:e4:41:7e:4d:3f:b7:00:ae:0b:7b:74: 80:68:81:ba:dd:b4:96:c3:58:16:a6:84:a8:6e:6d:d7:77:05: a6:54:e5:8c:8a:8f:dc:26:6d:45:07:46:06:81:41:b9:77:f3: 28:7b:d3:07:83:aa:69:bf:76:e4:57:80:14:f7:80:b1:0a:44: 26:16:27:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjUwODA5MDEyMTI5WhcNMjUwODE2MDEyMTI5WjAYMRYwFAYD VQQDEw02ODk2YTI5OS1mOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXT6wc22KBgY0Vge6V+H8FlNxb4pwR1PlZX5VnSjioAQyMhwSe3kLwGlFuwB WwLOP5aGxsdBvLHWe2fav5myuc8wmcNnP8zDU04Jq1avleSDQ3LE9FKt1YyL9m5W qhPZvKwjNaTAVe2/83AYelQVverOYKGYBzld6CXekuUdFKCIi+PRoIjv9UGZJ6n8 fk6BPo4dc6NadV/YOSufK+o6WQqAmXCNsE+SejUSRo34Jp3JkD6gHne5HCpqvu2L ANriEQE2fVnlIaG4OUbvCqjTC/PGVul2Hbr2PA/sDgejjIsYHNiR9WaIf3d6VB+h F6BWzxQyekz/8kwmB3rgJMXXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlo0pdV 4ga7lPukxFBnqWQ/U1WFMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTioXSmCSYqXJyCcgq3ZqXwKCTf0HSagy8/m+H8n9Kg8c9z++2iXPU 6nsXqEXSA/5m1sRsCJRUqriqWYZOTW38uVqvrYA+bDztyStbu1PX5FT/hzuTsX/4 2SP1moUAw7WkH4+NsonEsVHvKIK4Cyir0oGXJoessFBhQsuVmQwTOXkGb+a3ZOBx cjUZGURIQwsslDQ+OdeQ0/qg9FgM660Q/MJxlxNxkVYrXGj9yjHqbID47zZnoeVP ys5k5EF+TT+3AK4Le3SAaIG63bSWw1gWpoSobm3XdwWmVOWMio/cJm1FB0YGgUG5 d/Moe9MHg6ppv3bkV4AU94CxCkQmFicJ -----END CERTIFICATE-----Generated at Mon Aug 11 02:04:50 2025 by rpki-client