$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json) Hash identifier: 2JQM6mzBjJRjaEhQnjyurlTKTfYrUgB1auJNwyMb2ZU= Subject key identifier: B8:C6:87:10:72:A7:14:39:CD:E8:02:AB:25:6A:2C:08:15:8A:FA:A2 Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft Manifest number: 31 Signing time: Sat 09 Aug 2025 08:10:32 +0000 Manifest this update: Sat 09 Aug 2025 08:10:32 +0000 Manifest next update: Sat 16 Aug 2025 08:10:32 +0000 Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: lVtPuGP9g+HaNw1EEllTqFzWVrDghcdRfqMNT4EDUTs=) 2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Validity Not Before: Aug 9 08:10:32 2025 GMT Not After : Aug 16 08:10:32 2025 GMT Subject: CN=68970278-e09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:b6:f2:4f:79:bb:ae:18:8d:5f:e7:0b:cf: c9:93:74:b1:0e:f4:74:bf:4f:1a:4f:6d:0d:cc:8b: fa:41:cc:d7:4d:03:1d:6f:45:51:27:06:30:f1:b7: e2:e4:db:b7:30:e5:fc:44:64:6f:f1:b1:1b:33:c1: 95:4d:e8:28:5d:59:ae:7b:bb:ed:fe:dd:72:31:fa: d0:f1:66:b6:17:fb:a3:3c:9c:77:ac:3e:4a:b0:be: c2:67:a4:21:39:ad:87:a4:45:c5:eb:c7:94:b2:20: 38:2f:d1:bf:94:27:63:38:d6:fe:34:29:6b:92:7f: c5:d9:12:99:55:4f:11:4c:7a:fc:ba:8a:b2:d3:6b: e1:c4:f1:16:cc:5f:6c:38:59:49:a8:71:8e:d7:6f: 83:e2:bc:83:a7:ee:9b:9f:8d:21:88:f3:46:2a:31: 70:f0:51:09:8f:e2:79:8c:be:3a:0d:96:38:ac:77: 0b:fd:cc:5c:35:2d:b1:a0:d7:a0:b3:03:ed:f0:c8: 9a:cb:b7:2a:9f:e6:47:72:3a:30:fa:d0:52:e5:2b: ca:f2:19:3b:7d:3c:ce:ef:0c:52:e8:3c:ea:84:3b: d2:92:1d:3b:60:13:01:6f:bf:f7:00:0d:20:0d:2b: 05:b4:dc:95:22:db:ca:2e:ce:c3:34:b6:15:9d:bf: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:87:10:72:A7:14:39:CD:E8:02:AB:25:6A:2C:08:15:8A:FA:A2 X509v3 Authority Key Identifier: keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d1:2b:0b:59:e8:39:f0:be:12:9a:d5:29:26:43:56:ed:82: 58:61:b7:4b:41:63:d3:94:76:44:a4:ca:a8:57:4d:e5:4e:f9: 5e:b7:13:bc:d3:83:7a:d4:e6:14:c4:f4:03:b5:f7:da:f3:53: 3d:b8:cb:e3:fd:d6:6a:5a:76:dd:9d:f2:36:61:3f:0d:84:d6: f2:f1:92:2a:be:ff:6b:55:41:92:ea:a3:3b:5c:1c:fb:29:59: 0d:a7:82:49:9a:37:e3:66:1b:59:b6:a6:cc:1a:ee:b1:fc:99: 4f:45:04:95:dd:fd:69:dc:a8:2a:28:7e:aa:5e:71:00:c2:f4: 30:6c:31:f7:f3:10:74:a6:b3:f9:33:a2:5a:65:6c:77:5c:87: e5:8b:c4:a2:3d:f0:b6:e4:0a:a8:ca:28:e4:5f:78:30:bf:28: ca:ec:03:ad:f6:e5:d1:08:1f:da:26:75:be:27:5b:90:34:ce: 8f:97:94:58:c3:5c:1d:19:97:c7:5a:e2:61:1a:29:55:7d:34: b7:59:f3:af:7c:db:a3:6a:3e:2d:f8:db:ca:7f:f7:1b:ad:8b: 38:51:99:97:87:21:a3:50:24:e0:b4:be:b4:09:29:14:49:92: 5e:d9:e9:15:29:9d:8c:c6:5b:6c:83:48:cf:2b:d8:8d:fe:5c: 10:f9:e3:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw Q0ExMEJGRjAeFw0yNTA4MDkwODEwMzJaFw0yNTA4MTYwODEwMzJaMBgxFjAUBgNV BAMTDTY4OTcwMjc4LWUwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcl7byT3m7rhiNX+cLz8mTdLEO9HS/TxpPbQ3Mi/pBzNdNAx1vRVEnBjDxt+Lk 27cw5fxEZG/xsRszwZVN6ChdWa57u+3+3XIx+tDxZrYX+6M8nHesPkqwvsJnpCE5 rYekRcXrx5SyIDgv0b+UJ2M41v40KWuSf8XZEplVTxFMevy6irLTa+HE8RbMX2w4 WUmocY7Xb4PivIOn7pufjSGI80YqMXDwUQmP4nmMvjoNljisdwv9zFw1LbGg16Cz A+3wyJrLtyqf5kdyOjD60FLlK8ryGTt9PM7vDFLoPOqEO9KSHTtgEwFvv/cADSAN KwW03JUi28ouzsM0thWdv6edAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuMaHEHKn FDnN6AKrJWosCBWK+qIwHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrRKwtZ6DnwvhKa1SkmQ1btglhht0tBY9OUdkSkyqhXTeVO+V63E7zT g3rU5hTE9AO199rzUz24y+P91mpadt2d8jZhPw2E1vLxkiq+/2tVQZLqoztcHPsp WQ2ngkmaN+NmG1m2pswa7rH8mU9FBJXd/WncqCoofqpecQDC9DBsMffzEHSms/kz olplbHdch+WLxKI98LbkCqjKKORfeDC/KMrsA6325dEIH9omdb4nW5A0zo+XlFjD XB0Zl8da4mEaKVV9NLdZ869826NqPi3428p/9xutizhRmZeHIaNQJOC0vrQJKRRJ kl7Z6RUpnYzGW2yDSM8r2I3+XBD54zY= -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:47 2025 by rpki-client