$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: SYXGejDjDfQqJJ+Xdl213sWelKqAoAwCGICsyQ7QI3U= Subject key identifier: 46:C8:EC:21:A7:D9:50:19:09:9E:C2:46:E6:38:B6:7C:B4:4C:8D:0C Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 97 Signing time: Sat 09 Aug 2025 06:51:06 +0000 Manifest this update: Sat 09 Aug 2025 06:51:06 +0000 Manifest next update: Sat 16 Aug 2025 06:51:06 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: QDWB6zsM9+de6CjoRJOHRDgQoIyg8TIOGn+Eg2A03Y0=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Aug 9 06:51:06 2025 GMT Not After : Aug 16 06:51:06 2025 GMT Subject: CN=6896efda-3498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:51:fd:29:85:f9:19:e4:ed:c2:95:ec:e5: 4e:11:96:74:07:c3:66:5e:61:8e:53:ed:c2:98:21: f7:b2:53:67:2e:2e:70:cc:d4:8c:e9:78:46:49:5f: 2f:b5:25:54:51:92:4b:4a:91:28:38:bc:ec:d6:d4: 9d:69:78:12:04:26:8e:9a:62:ab:b6:0a:59:d9:11: b5:6d:08:9e:9d:57:20:39:cd:eb:e0:1d:98:ba:ba: 9e:76:69:55:11:1b:91:13:83:2a:c2:08:49:8e:3d: a9:63:2b:b2:e1:db:97:91:c2:b9:ef:aa:7e:56:d5: e2:4e:a1:d8:9d:e6:64:91:6d:31:dc:b0:e6:c2:cc: 1a:03:fa:91:3d:1b:a1:66:ee:a9:00:d2:af:68:3a: 44:20:8a:a0:ff:94:da:7b:71:69:b2:87:89:75:fa: 20:dc:6f:ea:10:4e:d1:2b:45:8d:9e:e6:b3:e7:66: cc:50:d1:31:71:4a:9d:bb:57:80:79:4e:21:f1:e9: c9:ea:6f:da:f4:0d:3b:09:24:2e:de:66:16:d0:4e: 8a:6b:19:90:27:54:79:fd:be:69:bc:67:58:45:0f: 65:5d:1e:00:dc:2f:d8:13:ab:b6:ed:41:02:3a:78: ef:5b:4d:ee:17:bb:93:af:c6:86:45:d0:f7:82:b3: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C8:EC:21:A7:D9:50:19:09:9E:C2:46:E6:38:B6:7C:B4:4C:8D:0C X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:14:5e:2c:7e:66:cd:bf:39:fe:2b:e9:e0:8d:ee:48:27:11: 1b:ab:99:c3:2a:30:5b:e4:52:07:65:04:f6:f2:fa:b8:94:58: 12:25:39:56:a4:73:19:e2:d7:0b:6e:48:20:ba:33:b8:2f:88: 80:82:7f:ca:22:fc:18:ed:85:6a:8a:de:65:4c:3f:54:4c:7b: 98:2a:7e:9d:34:3c:61:f8:df:e8:a3:c3:70:ad:ad:bf:80:c8: 47:49:e0:31:a6:9a:52:68:33:fe:f8:0d:d0:13:eb:c4:48:a0: 3a:43:dd:c7:1d:74:26:d8:7e:9e:7c:75:fb:cd:d3:8d:b9:5a: aa:8d:92:27:b1:d7:1a:9f:ee:7e:c1:b8:25:35:a3:2b:bd:02: ff:df:22:b6:90:53:60:06:b1:06:2b:c8:1c:9a:4d:ea:b2:35: a7:8c:38:2a:b7:f0:dd:e8:92:e7:e9:a0:5c:24:82:9a:9f:03: 54:a1:17:9e:a6:13:4d:96:4c:b1:a6:dd:b4:71:fe:db:f0:6d: dd:2d:7b:35:46:54:b5:a8:4f:38:c7:5b:0e:1d:a0:77:74:8b: 4d:ef:b1:84:5a:48:e8:bb:e7:a0:e3:59:b4:78:e3:4e:b3:5c: 0b:a2:73:c2:ef:e6:ce:70:f9:d3:4e:14:73:d4:cb:0c:6c:ed: 65:72:9f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUwODA5MDY1MTA2WhcNMjUwODE2MDY1MTA2WjAYMRYwFAYD VQQDEw02ODk2ZWZkYS0zNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznJR/SmF+Rnk7cKV7OVOEZZ0B8NmXmGOU+3CmCH3slNnLi5wzNSM6XhGSV8v tSVUUZJLSpEoOLzs1tSdaXgSBCaOmmKrtgpZ2RG1bQienVcgOc3r4B2YurqedmlV ERuRE4MqwghJjj2pYyuy4duXkcK576p+VtXiTqHYneZkkW0x3LDmwswaA/qRPRuh Zu6pANKvaDpEIIqg/5Tae3FpsoeJdfog3G/qEE7RK0WNnuaz52bMUNExcUqdu1eA eU4h8enJ6m/a9A07CSQu3mYW0E6KaxmQJ1R5/b5pvGdYRQ9lXR4A3C/YE6u27UEC OnjvW03uF7uTr8aGRdD3grMuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbI7CGn 2VAZCZ7CRuY4tny0TI0MMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0FF4sfmbNvzn+K+ngje5IJxEbq5nDKjBb5FIHZQT28vq4lFgSJTlW pHMZ4tcLbkggujO4L4iAgn/KIvwY7YVqit5lTD9UTHuYKn6dNDxh+N/oo8Nwra2/ gMhHSeAxpppSaDP++A3QE+vESKA6Q93HHXQm2H6efHX7zdONuVqqjZInsdcan+5+ wbglNaMrvQL/3yK2kFNgBrEGK8gcmk3qsjWnjDgqt/Dd6JLn6aBcJIKanwNUoRee phNNlkyxpt20cf7b8G3dLXs1RlS1qE84x1sOHaB3dItN77GEWkjou+eg41m0eONO s1wLonPC7+bOcPnTThRz1MsMbO1lcp9l -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:07 2025 by rpki-client