$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft File: OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json) Hash identifier: tkm0zHbuNeXPTLqDxov+gHG/FfIp873UVPtOKIhfPTs= Subject key identifier: F0:46:BB:6F:B5:0B:60:10:7D:1C:B7:23:BF:F9:1F:84:F2:16:1D:D5 Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF Certificate issuer: /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF Certificate serial: 0904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft Manifest number: 08F9 Signing time: Tue 12 Aug 2025 20:39:14 +0000 Manifest this update: Tue 12 Aug 2025 20:39:13 +0000 Manifest next update: Tue 19 Aug 2025 20:39:13 +0000 Files and hashes: 1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: jkTQdn6BUptlyH/zUF3z/0Vrruc6icjSmEig++7rF14=) 2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: dVnV0yH7vHgJph4GIsitDhFnvlBBTZGa61SDpLL66Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF Validity Not Before: Aug 12 20:39:13 2025 GMT Not After : Aug 19 20:39:13 2025 GMT Subject: CN=689ba672-e929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:54:ed:e4:11:8f:74:d2:7b:ca:6c:ac:2a: e1:a9:96:b2:bb:12:bc:c6:6f:01:70:a2:6e:0b:4a: f9:b7:59:98:21:33:02:b2:90:45:33:a3:3d:9e:a4: fd:27:07:c5:8e:0a:8e:0e:7a:b1:e5:0d:db:74:66: 0f:a1:20:5f:78:27:d0:2b:ae:a8:71:78:c7:de:c5: 42:dc:72:31:2d:b6:ef:d5:e6:6d:e5:0d:ff:f5:f2: 9a:69:8d:75:81:9d:42:89:98:17:b9:3f:f9:43:f5: b3:5b:4b:f2:22:2d:e8:fa:0f:77:6a:69:6e:ed:e3: bd:73:f8:b9:a3:ae:6c:62:e8:c6:7e:75:69:41:15: 7d:aa:b1:c7:d6:99:ae:c3:c3:2a:59:6f:15:64:23: a1:e1:37:95:34:b8:a7:90:c7:0d:7c:15:7b:9e:a5: 3e:a4:90:79:eb:92:5f:7a:c4:bb:83:4a:af:7f:9b: e5:b5:49:07:40:35:12:2f:00:a1:40:60:64:06:5f: 55:38:22:a7:4b:77:cc:49:80:5d:65:c5:16:13:8e: bc:7f:f1:5f:1d:2e:55:d8:7d:b7:b9:55:96:ef:1b: 5a:c0:4b:0c:a2:6d:ad:8f:be:21:a3:a8:e5:21:2d: 9b:b0:48:73:4e:f1:e8:17:14:28:8f:11:c3:ee:b4: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:BB:6F:B5:0B:60:10:7D:1C:B7:23:BF:F9:1F:84:F2:16:1D:D5 X509v3 Authority Key Identifier: keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:9c:5b:a6:f1:6a:03:8e:39:0b:3c:40:a7:ba:6f:58:c6: 8c:bd:1c:9d:d5:b6:d7:7f:31:d7:14:7d:59:6a:d9:d2:29:7f: 9a:67:62:17:f9:6c:0d:9a:50:93:bb:e4:9d:f6:06:e9:fc:e5: 78:bc:2e:7c:e9:ab:30:68:9d:e5:ae:2d:27:e9:2e:07:dc:b1: f6:0d:6b:a3:6d:a6:88:0f:a7:a0:0c:17:5a:94:49:12:13:af: 59:d1:7e:93:0d:0f:2f:4a:33:30:53:22:e9:2d:30:16:e9:55: 40:53:b5:78:a2:51:a8:88:01:ee:4f:0b:c9:a6:67:f4:7f:1f: 48:3f:5a:18:3a:23:f8:50:8c:ae:de:a6:06:5d:a1:19:5a:cf: 33:40:fc:11:60:98:54:ba:42:40:4c:8c:e6:4a:13:34:74:2a: cd:b5:e8:18:e3:2b:9c:c5:f4:37:2b:f4:3a:73:13:1a:09:17: 78:7b:a8:b8:92:82:d2:43:e1:87:58:9f:cc:8e:3e:d4:70:d8: b8:77:dd:ae:27:4d:41:c9:18:7c:aa:f6:f0:b6:e4:4c:b1:10: a3:15:54:e4:e0:79:3c:09:b9:84:91:3f:c1:7c:f8:a3:50:f8: c0:4b:fa:e6:9d:36:0f:43:7e:76:9b:ce:75:fc:77:27:7e:03: 2f:74:8d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2NEUxMTAvBgNVBAUTKDM5NkE1RDlFNjdBNjc5MENBOTdGQjkzMTMwNEI0NEU3 QjBBODIxQ0YwHhcNMjUwODEyMjAzOTEzWhcNMjUwODE5MjAzOTEzWjAYMRYwFAYD VQQDEw02ODliYTY3Mi1lOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0JU7eQRj3TSe8psrCrhqZayuxK8xm8BcKJuC0r5t1mYITMCspBFM6M9nqT9 JwfFjgqODnqx5Q3bdGYPoSBfeCfQK66ocXjH3sVC3HIxLbbv1eZt5Q3/9fKaaY11 gZ1CiZgXuT/5Q/WzW0vyIi3o+g93amlu7eO9c/i5o65sYujGfnVpQRV9qrHH1pmu w8MqWW8VZCOh4TeVNLinkMcNfBV7nqU+pJB565JfesS7g0qvf5vltUkHQDUSLwCh QGBkBl9VOCKnS3fMSYBdZcUWE468f/FfHS5V2H23uVWW7xtawEsMom2tj74ho6jl IS2bsEhzTvHoFxQojxHD7rRQWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBGu2+1 C2AQfRy3I7/5H4TyFh3VMB8GA1UdIwQYMBaAFDlqXZ5npnkMqX+5MTBLROewqCHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjY0RS9CNDZBOUMxRUIx M0QxMUVBQjEyRDEyMUNDNEY5QUUwMi9PV3Bkbm1lbWVReXBmN2t4TUV0RTU3Q29J YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09XcGRubWVtZVF5cGY3a3hNRXRFNTdDb0ljOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjY0RS9CNDZBOUMxRUIxM0QxMUVBQjEyRDEyMUNDNEY5QUUwMi9PV3Bkbm1lbWVR eXBmN2t4TUV0RTU3Q29JYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zpxbpvFqA445CzxAp7pvWMaMvRyd1bbXfzHXFH1ZatnSKX+aZ2IX +WwNmlCTu+Sd9gbp/OV4vC586aswaJ3lri0n6S4H3LH2DWujbaaID6egDBdalEkS E69Z0X6TDQ8vSjMwUyLpLTAW6VVAU7V4olGoiAHuTwvJpmf0fx9IP1oYOiP4UIyu 3qYGXaEZWs8zQPwRYJhUukJATIzmShM0dCrNtegY4yucxfQ3K/Q6cxMaCRd4e6i4 koLSQ+GHWJ/Mjj7UcNi4d92uJ01ByRh8qvbwtuRMsRCjFVTk4Hk8CbmEkT/BfPij UPjAS/rmnTYPQ352m851/HcnfgMvdI3f -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:33 2025 by rpki-client