$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: D02HsutNyox5jTMbELuXjuS5tsLgR9uEXBReHqupSRM= Subject key identifier: 7D:45:5B:11:A3:87:7A:CF:C3:57:A2:CA:54:A3:B1:72:95:50:D8:40 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D96 Signing time: Sun 10 Aug 2025 17:55:58 +0000 Manifest this update: Sun 10 Aug 2025 17:55:57 +0000 Manifest next update: Sun 17 Aug 2025 17:55:57 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: HyaMBwbrcKsicb4gucO26iX6M39wtfuqo+QSDSD/FX0=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Aug 10 17:55:57 2025 GMT Not After : Aug 17 17:55:57 2025 GMT Subject: CN=6898dd2d-569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:f4:29:32:d9:d5:3e:78:89:e4:9b:e8:75: 4e:34:12:05:9d:0f:97:46:bb:81:d6:5a:59:9b:50: 21:25:55:34:c9:45:79:d9:6e:84:e0:60:1f:b8:89: 65:04:23:03:4a:aa:fe:c1:96:5b:94:0d:a9:85:87: d6:e1:6a:3a:ed:0d:fd:ed:63:42:82:6e:8e:28:84: 02:4b:a8:da:e8:c7:42:18:10:37:05:f0:3d:83:e4: 9e:8f:a6:4a:5f:67:03:ea:7e:38:98:d3:90:33:92: 54:d4:bb:2d:35:08:a0:a7:4b:66:f8:ad:5c:57:8f: 12:a6:15:81:3b:48:b8:c3:9f:2e:fc:dc:4d:a4:a5: 25:88:a5:67:19:4e:af:b1:74:b3:98:24:18:e8:39: 94:5d:2c:c2:e1:04:8c:80:ab:65:e9:b8:39:9b:83: 52:5b:cb:27:3f:61:ea:8a:98:fe:c3:5d:f3:d9:55: 49:17:a8:f8:1c:0d:a7:e8:2b:4f:7a:0d:08:f4:9f: 97:3e:01:60:e6:bc:13:b5:5e:11:8d:be:c1:e7:d0: 78:e9:77:9e:10:16:af:8a:f7:dc:7e:93:6f:ef:cc: c9:d6:5f:19:12:f3:87:a5:8f:b9:5e:0d:09:45:f7: ab:e8:29:3c:1a:0d:74:bb:e0:a1:db:93:1a:63:5c: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:5B:11:A3:87:7A:CF:C3:57:A2:CA:54:A3:B1:72:95:50:D8:40 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:37:03:cd:db:3b:bc:53:55:5a:40:33:c8:f5:cb:49:7d:68: 21:a7:9e:65:95:f7:f4:98:1c:97:24:ee:c3:4a:5c:90:75:b8: 9f:c2:3b:92:d8:46:ba:f1:9a:eb:ab:c1:18:bd:f3:e9:28:f5: e7:cc:11:96:bc:37:e0:0d:f6:21:71:7c:54:08:d7:bd:67:54: 87:41:71:08:8d:07:8b:38:f4:07:32:4d:91:2b:8e:92:f0:50: 6a:48:29:7e:8d:f1:cd:9b:be:f1:ce:18:04:a6:d6:e0:0e:79: 56:41:24:fb:ad:7f:b4:40:10:7b:39:ca:7a:3b:65:0c:27:4c: 42:dd:7d:fa:b9:d8:73:5b:96:48:ea:51:e6:46:c0:32:45:cd: 84:f8:6c:8a:b3:03:97:94:17:7d:16:f0:db:48:a2:8d:76:f7: 3f:22:f5:7f:d1:41:31:11:19:19:98:4d:d9:17:70:64:90:4c: de:d6:0b:8b:46:10:d8:8d:a9:95:31:17:58:37:0a:b8:8c:a0: 3d:41:0f:27:b5:4f:9f:df:92:3c:03:c3:f2:7e:dc:7d:d3:0f: 5c:ab:b8:7a:e3:93:39:33:a8:a6:b3:b8:36:f6:08:00:64:e9: f8:36:ff:24:21:9e:be:65:89:3f:86:f2:11:53:3c:9c:9a:61: a7:80:c0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwODEwMTc1NTU3WhcNMjUwODE3MTc1NTU3WjAYMRYwFAYD VQQDEw02ODk4ZGQyZC01NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutP0KTLZ1T54ieSb6HVONBIFnQ+XRruB1lpZm1AhJVU0yUV52W6E4GAfuIll BCMDSqr+wZZblA2phYfW4Wo67Q397WNCgm6OKIQCS6ja6MdCGBA3BfA9g+Sej6ZK X2cD6n44mNOQM5JU1LstNQigp0tm+K1cV48SphWBO0i4w58u/NxNpKUliKVnGU6v sXSzmCQY6DmUXSzC4QSMgKtl6bg5m4NSW8snP2Hqipj+w13z2VVJF6j4HA2n6CtP eg0I9J+XPgFg5rwTtV4Rjb7B59B46XeeEBavivfcfpNv78zJ1l8ZEvOHpY+5Xg0J Rfer6Ck8Gg10u+Ch25MaY1zPGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1FWxGj h3rPw1eiylSjsXKVUNhAMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsNwPN2zu8U1VaQDPI9ctJfWghp55llff0mByXJO7DSlyQdbifwjuS 2Ea68Zrrq8EYvfPpKPXnzBGWvDfgDfYhcXxUCNe9Z1SHQXEIjQeLOPQHMk2RK46S 8FBqSCl+jfHNm77xzhgEptbgDnlWQST7rX+0QBB7Ocp6O2UMJ0xC3X36udhzW5ZI 6lHmRsAyRc2E+GyKswOXlBd9FvDbSKKNdvc/IvV/0UExERkZmE3ZF3BkkEze1guL RhDYjamVMRdYNwq4jKA9QQ8ntU+f35I8A8Pyftx90w9cq7h645M5M6ims7g29ggA ZOn4Nv8kIZ6+ZYk/hvIRUzycmmGngMDc -----END CERTIFICATE-----Generated at Mon Aug 11 07:37:00 2025 by rpki-client