$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: Fw6mVZdtKWdpCwod8UPOiptH2VemVL0G2jf5+SrQLf4= Subject key identifier: 63:13:0A:EA:43:59:49:44:45:4B:C1:21:79:E8:F7:47:10:0C:57:BF Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01DE Signing time: Thu 07 Aug 2025 03:08:22 +0000 Manifest this update: Thu 07 Aug 2025 03:08:21 +0000 Manifest next update: Thu 14 Aug 2025 03:08:21 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: 8tRqIVj6Ozm9vO5OlqrzmezCgDtBBrKSKYCH+ZeZivE=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Aug 7 03:08:21 2025 GMT Not After : Aug 14 03:08:21 2025 GMT Subject: CN=689418a6-7b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:fd:70:3f:6c:36:1f:3b:60:2e:b6:38:0f: 19:88:5b:e9:dc:78:b1:5b:e2:fc:ab:c4:ed:f9:8a: 9a:58:9f:79:3a:b3:34:f1:db:1c:8f:3d:c8:71:99: f9:2a:b1:ee:0e:d2:96:43:c7:82:ef:15:13:22:45: 86:98:ea:98:c2:7b:db:67:bc:f0:b6:fd:81:5e:2c: 58:75:65:4d:6b:0e:55:83:5c:55:0c:2b:33:e3:28: a2:e2:b0:15:d0:46:54:fc:76:02:7b:33:7d:b2:5c: b7:24:f4:f3:b6:b5:cb:fd:46:6a:68:a4:42:eb:31: 37:52:78:b9:63:df:d1:22:90:94:b2:9c:b6:42:19: 2a:4e:d1:14:ed:1a:25:18:3c:5f:88:03:9a:8c:03: 41:55:98:f7:40:6f:bd:da:49:f2:6e:f0:f7:14:8d: 34:9c:71:10:8a:4e:32:2b:98:00:42:85:b0:b1:33: 32:c9:e4:2a:02:af:62:9a:ad:5f:57:6c:93:46:52: af:e6:bf:32:d1:b0:8d:9d:af:b8:48:46:7f:38:41: 86:0e:03:35:ec:5a:67:f8:18:04:73:f1:fc:21:c8: cf:63:ad:8b:bc:01:13:7a:a0:a5:6b:05:f2:65:1e: 0c:df:93:89:ab:9e:34:96:37:da:87:9d:01:5a:75: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:0A:EA:43:59:49:44:45:4B:C1:21:79:E8:F7:47:10:0C:57:BF X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3d:52:5c:35:43:b4:84:36:d5:a2:59:f7:f3:7a:7f:bd:9e: 3c:89:4b:38:dc:ac:a4:43:b4:da:71:cf:19:85:c6:df:ac:84: 64:c6:5f:a5:21:0a:19:4e:2c:69:69:e8:5e:26:27:d6:05:a4: e7:20:7a:98:45:e0:ce:03:4a:4e:ac:66:00:b9:3a:d3:2c:04: 09:98:c5:2a:bf:3d:ae:8b:ea:c0:4f:61:42:9a:7b:49:89:8e: 9f:33:6f:87:5c:3a:c0:ac:4a:0e:8a:fe:99:1d:72:53:82:7e: 9c:05:18:b7:da:ac:3f:1b:80:b7:fe:18:9c:94:a7:77:1d:2b: 2a:65:6d:59:6f:e4:c7:56:4d:69:7b:9b:99:38:9d:51:28:9c: 3d:39:96:9c:32:7e:97:04:92:c0:2a:89:fb:2c:42:14:11:66: 6f:d4:b5:6c:be:c5:64:2c:6b:b7:cf:c4:be:dc:65:cd:b4:ea: 74:25:a4:90:ca:4b:10:2b:70:f0:ae:4c:34:7e:cf:d3:a8:dd: 0d:41:d8:98:dd:ec:0e:7e:8f:c9:55:5d:81:af:c4:7d:5d:45: 9e:0b:96:f7:2c:94:27:f0:40:22:16:f2:80:c0:bc:de:5f:5d: 9a:8f:50:72:d1:8c:77:50:9a:7b:b1:5f:73:6d:87:8c:dd:7b: 31:cd:2d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwODA3MDMwODIxWhcNMjUwODE0MDMwODIxWjAYMRYwFAYD VQQDEw02ODk0MThhNi03YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19n9cD9sNh87YC62OA8ZiFvp3HixW+L8q8Tt+YqaWJ95OrM08dscjz3IcZn5 KrHuDtKWQ8eC7xUTIkWGmOqYwnvbZ7zwtv2BXixYdWVNaw5Vg1xVDCsz4yii4rAV 0EZU/HYCezN9sly3JPTztrXL/UZqaKRC6zE3Uni5Y9/RIpCUspy2QhkqTtEU7Rol GDxfiAOajANBVZj3QG+92knybvD3FI00nHEQik4yK5gAQoWwsTMyyeQqAq9imq1f V2yTRlKv5r8y0bCNna+4SEZ/OEGGDgM17Fpn+BgEc/H8IcjPY62LvAETeqClawXy ZR4M35OJq540ljfah50BWnVLqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMTCupD WUlERUvBIXno90cQDFe/MB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8PVJcNUO0hDbVoln383p/vZ48iUs43KykQ7Tacc8ZhcbfrIRkxl+l IQoZTixpaeheJifWBaTnIHqYReDOA0pOrGYAuTrTLAQJmMUqvz2ui+rAT2FCmntJ iY6fM2+HXDrArEoOiv6ZHXJTgn6cBRi32qw/G4C3/hiclKd3HSsqZW1Zb+THVk1p e5uZOJ1RKJw9OZacMn6XBJLAKon7LEIUEWZv1LVsvsVkLGu3z8S+3GXNtOp0JaSQ yksQK3Dwrkw0fs/TqN0NQdiY3ewOfo/JVV2Br8R9XUWeC5b3LJQn8EAiFvKAwLze X12aj1By0Yx3UJp7sV9zbYeM3XsxzS2n -----END CERTIFICATE-----Generated at Fri Aug 8 00:48:33 2025 by rpki-client