$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft File: OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json) Hash identifier: BZiqFeSyphPreU/Pm+VM4GjtzV5KypFHFRNMnoj72Og= Subject key identifier: E1:32:D8:0E:3B:4C:83:D7:91:E9:7D:7B:26:09:C5:0B:C7:AA:B6:12 Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 Certificate issuer: /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft Manifest number: 01CE Signing time: Sat 09 Aug 2025 03:12:13 +0000 Manifest this update: Sat 09 Aug 2025 03:12:13 +0000 Manifest next update: Sat 16 Aug 2025 03:12:13 +0000 Files and hashes: 1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: OMKj18dwRwQc4vY491VJYu/XkrlaMdZKWxAvH2nzOHs=) 2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: KiSgunw3k37SA5qIOSFD0yKCbhYgrY4Gzd+tIVRajoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Validity Not Before: Aug 9 03:12:13 2025 GMT Not After : Aug 16 03:12:13 2025 GMT Subject: CN=6896bc8d-2ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:56:b2:52:34:90:da:6f:d1:11:bf:66:a2: 00:eb:f5:e5:70:0f:ec:d5:87:8d:e5:ce:d0:60:cb: 1c:a6:0b:69:51:a4:6a:72:ab:d5:4d:48:f8:29:6c: c9:a0:40:e9:c9:66:dc:7c:c0:11:d8:73:e8:55:b9: 95:c7:b7:63:02:27:47:37:29:de:98:7e:9b:e9:43: ef:37:73:65:87:fc:de:a0:4e:cc:4e:c5:bf:7e:fb: 74:a1:c0:6c:73:5a:9f:99:e9:75:0a:dd:fc:49:f5: 77:81:f1:b4:85:75:ff:3b:dd:f6:97:00:3f:d3:c7: 99:a8:4f:58:ad:97:9a:99:de:5f:cd:54:28:02:04: 35:bd:dc:0d:2c:00:e5:86:3a:0f:6c:84:d6:59:83: a3:42:cb:43:a1:95:a8:fa:73:61:5b:be:98:de:d2: f4:db:9a:54:30:5d:d4:78:d7:73:46:bf:6c:17:d1: 4e:8c:6a:9e:e3:dc:a7:f8:f9:dc:60:49:62:e0:25: 41:3c:f5:47:37:c8:d4:86:fc:a9:73:bd:04:21:73: 8c:8b:65:de:38:74:87:2b:47:32:2b:a6:15:3e:9e: 6b:95:dd:34:00:30:b4:82:3e:b8:20:90:13:92:33: 42:c0:e0:c0:b3:8d:71:9b:d2:fa:d1:9d:06:51:be: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:D8:0E:3B:4C:83:D7:91:E9:7D:7B:26:09:C5:0B:C7:AA:B6:12 X509v3 Authority Key Identifier: keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:02:25:69:a5:03:e6:81:09:cd:6a:10:97:0b:a3:0a:a7:db: 9c:6e:21:65:43:8c:27:cb:c9:97:3e:e9:3e:57:ba:ea:fb:a3: 58:87:5b:35:35:a4:84:99:d6:31:50:56:55:00:89:db:01:68: c5:83:74:b9:dc:ac:c6:39:87:10:32:76:4f:0e:a8:25:ca:0d: ee:22:31:a1:64:37:f9:8c:43:77:01:ed:eb:44:22:a2:db:de: 31:9c:bb:39:5e:b0:a1:be:e6:56:58:93:f7:ae:38:28:49:02: 89:1c:d4:f3:71:79:fe:42:40:26:0c:ac:89:15:35:e9:90:d9: ea:dc:1b:81:04:e9:18:67:3b:08:3f:5e:79:2b:e0:e0:2b:dc: 27:04:12:31:4b:32:14:c7:fc:83:a5:b5:10:4f:c0:e3:de:cd: fd:02:b9:87:d0:1f:56:d3:a6:06:9d:50:a3:b7:6f:0d:9f:48: c9:e6:84:33:73:2e:c7:31:fd:68:1b:2b:9a:41:47:c7:dc:05: e3:1b:67:69:7e:ec:59:ce:67:ce:ac:7a:fb:c3:3f:7a:21:87: 01:e4:e1:fd:d8:94:7c:cd:d0:58:97:0f:15:34:80:32:42:dc: c8:6d:ec:c2:97:ea:c4:59:2b:d2:1e:06:fa:9c:7e:24:51:1a: a8:b4:93:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMTgxMTAvBgNVBAUTKDNBRjlFQ0JDNDVFNEUyOTdEMjlCQTZDNDExRjFBMDVD OEI5REE5RTMwHhcNMjUwODA5MDMxMjEzWhcNMjUwODE2MDMxMjEzWjAYMRYwFAYD VQQDEw02ODk2YmM4ZC0yZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpNWslI0kNpv0RG/ZqIA6/XlcA/s1YeN5c7QYMscpgtpUaRqcqvVTUj4KWzJ oEDpyWbcfMAR2HPoVbmVx7djAidHNynemH6b6UPvN3Nlh/zeoE7MTsW/fvt0ocBs c1qfmel1Ct38SfV3gfG0hXX/O932lwA/08eZqE9YrZeamd5fzVQoAgQ1vdwNLADl hjoPbITWWYOjQstDoZWo+nNhW76Y3tL025pUMF3UeNdzRr9sF9FOjGqe49yn+Pnc YEli4CVBPPVHN8jUhvypc70EIXOMi2XeOHSHK0cyK6YVPp5rld00ADC0gj64IJAT kjNCwODAs41xm9L60Z0GUb633wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEy2A47 TIPXkel9eyYJxQvHqrYSMB8GA1UdIwQYMBaAFDr57LxF5OKX0pumxBHxoFyLnanj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExOC82RDA1OUJCQ0Ix QjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRwZlNtNmJFRWZHZ1hJdWRx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL092bnN2RVhrNHBmU202YkVFZkdnWEl1ZHFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExOC82RDA1OUJCQ0IxQjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRw ZlNtNmJFRWZHZ1hJdWRxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlAiVppQPmgQnNahCXC6MKp9ucbiFlQ4wny8mXPuk+V7rq+6NYh1s1 NaSEmdYxUFZVAInbAWjFg3S53KzGOYcQMnZPDqglyg3uIjGhZDf5jEN3Ae3rRCKi 294xnLs5XrChvuZWWJP3rjgoSQKJHNTzcXn+QkAmDKyJFTXpkNnq3BuBBOkYZzsI P155K+DgK9wnBBIxSzIUx/yDpbUQT8Dj3s39ArmH0B9W06YGnVCjt28Nn0jJ5oQz cy7HMf1oGyuaQUfH3AXjG2dpfuxZzmfOrHr7wz96IYcB5OH92JR8zdBYlw8VNIAy QtzIbezCl+rEWSvSHgb6nH4kURqotJPJ -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:43 2025 by rpki-client