$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: j2DYxF5ex0eHseFlPNidW2dR7fb9dL+FjLEHTuwgQXQ= Subject key identifier: 17:3F:6D:B3:D0:AC:42:3D:71:05:CB:60:81:9C:02:14:A4:38:0C:A2 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 0143 Signing time: Sat 09 Aug 2025 04:55:31 +0000 Manifest this update: Sat 09 Aug 2025 04:55:31 +0000 Manifest next update: Sat 16 Aug 2025 04:55:31 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: 7vMt3x0IAeNxtpxAF7mnFpaL5tf08GMhnfaa9Vax7Ns=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: NmyQHlBil47JzTSCPQYz/6ZBa9AnAtiDqsHIcZPO3dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Aug 9 04:55:31 2025 GMT Not After : Aug 16 04:55:31 2025 GMT Subject: CN=6896d4c3-1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:8f:71:e0:26:8e:b6:60:c0:18:53:33:ae: d8:ec:38:6d:0d:a2:fc:1b:77:95:9c:67:79:43:dc: 36:6b:41:0f:e3:6b:bc:aa:0f:1c:b8:01:3e:dd:68: 75:c2:dd:5e:ed:d8:49:e6:98:63:b8:f9:40:d1:22: d6:9c:8e:4b:a8:02:5d:6b:c9:d1:a7:6e:2e:c6:74: 72:ce:2e:ea:e0:77:8c:39:29:b4:b9:76:27:07:15: 6d:bd:ae:01:13:f7:77:23:6b:61:98:4b:72:7e:c7: d5:ec:e1:ac:fa:f8:1e:bb:81:ed:ad:a4:77:81:08: 07:65:51:53:84:fd:5d:d4:b3:74:43:24:ce:fd:5f: 7b:6b:d1:6b:3b:71:6f:6c:e1:ba:79:72:57:28:ec: 46:5d:14:bb:63:87:dd:42:53:4f:5b:22:52:b4:57: 26:07:8d:a3:38:c7:fc:5c:36:2b:c1:f2:5e:77:fe: 2f:df:05:9d:da:3a:58:16:7d:21:c7:22:40:72:7c: ab:2d:c3:fe:7a:20:11:ae:fd:01:a1:59:68:8e:6c: 49:40:ae:6c:11:38:2c:d4:fd:b6:60:2a:51:2d:09: 0f:cc:51:20:2c:5d:6e:e1:dd:0d:72:cd:f3:c2:47: 66:f3:c1:09:a4:e6:b2:f5:7e:aa:c9:d0:02:e3:a2: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3F:6D:B3:D0:AC:42:3D:71:05:CB:60:81:9C:02:14:A4:38:0C:A2 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ae:47:35:1d:32:4e:e0:4d:3e:52:e6:01:d3:da:12:8d:f8: 0d:5b:38:ec:6e:06:3f:14:0b:8f:58:ee:ec:63:b1:48:72:41: 51:31:59:ad:92:a4:e1:06:ae:ee:d3:66:23:bd:76:fe:d5:c1: 28:57:c8:61:ec:56:ae:46:ba:7b:82:fc:ef:29:79:9a:7d:84: 7d:71:78:83:81:fb:fa:09:87:20:b2:3f:92:c6:b1:23:fd:17: 11:d6:e5:23:29:77:92:3e:57:82:9f:b4:f4:3a:bc:1b:1f:62: 5b:cd:10:48:59:78:df:36:71:48:59:4d:f7:60:72:49:92:75: 0f:e4:af:45:e6:77:12:c9:7a:7d:97:9a:16:1f:5a:ab:9d:f5: b2:39:1d:79:c6:60:10:4b:10:3e:c3:4e:f6:48:eb:c0:a3:f0: 87:af:e7:a8:0e:43:2b:50:b8:c8:b7:bb:0a:b2:ab:c1:fa:79: 86:b2:c1:6f:43:6e:f2:9a:ad:1c:8c:48:ef:62:f0:de:a9:5c: 14:e5:90:aa:73:4f:fd:88:a4:08:0e:7a:de:78:d7:ac:7e:e4: b9:75:e7:f0:71:a0:6e:f8:45:5c:d1:89:d0:f0:14:5c:8f:75: 36:fe:ca:88:dc:20:62:b7:4f:ef:fc:b9:27:46:b4:e6:dc:6f: 6a:ed:9b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjUwODA5MDQ1NTMxWhcNMjUwODE2MDQ1NTMxWjAYMRYwFAYD VQQDEw02ODk2ZDRjMy0xYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTCPceAmjrZgwBhTM67Y7DhtDaL8G3eVnGd5Q9w2a0EP42u8qg8cuAE+3Wh1 wt1e7dhJ5phjuPlA0SLWnI5LqAJda8nRp24uxnRyzi7q4HeMOSm0uXYnBxVtva4B E/d3I2thmEtyfsfV7OGs+vgeu4HtraR3gQgHZVFThP1d1LN0QyTO/V97a9FrO3Fv bOG6eXJXKOxGXRS7Y4fdQlNPWyJStFcmB42jOMf8XDYrwfJed/4v3wWd2jpYFn0h xyJAcnyrLcP+eiARrv0BoVlojmxJQK5sETgs1P22YCpRLQkPzFEgLF1u4d0Ncs3z wkdm88EJpOay9X6qydAC46J1mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc/bbPQ rEI9cQXLYIGcAhSkOAyiMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rkc1HTJO4E0+UuYB09oSjfgNWzjsbgY/FAuPWO7sY7FIckFRMVmt kqThBq7u02YjvXb+1cEoV8hh7FauRrp7gvzvKXmafYR9cXiDgfv6CYcgsj+SxrEj /RcR1uUjKXeSPleCn7T0OrwbH2JbzRBIWXjfNnFIWU33YHJJknUP5K9F5ncSyXp9 l5oWH1qrnfWyOR15xmAQSxA+w072SOvAo/CHr+eoDkMrULjIt7sKsqvB+nmGssFv Q27ymq0cjEjvYvDeqVwU5ZCqc0/9iKQIDnreeNesfuS5defwcaBu+EVc0YnQ8BRc j3U2/sqI3CBit0/v/LknRrTm3G9q7ZuM -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:48 2025 by rpki-client