$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: eGa8bJOwJrBg+6GZry/67u47yx+1nWOUHG8pd2DobO8= Subject key identifier: 11:BE:41:63:A9:1F:90:17:D6:42:7B:EA:56:1D:8B:B5:FA:C9:3B:4A Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C7E Signing time: Fri 18 Jul 2025 18:25:50 +0000 Manifest this update: Fri 18 Jul 2025 18:25:50 +0000 Manifest next update: Fri 25 Jul 2025 18:25:50 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: Y+J2H8M/XpgEQlYYjnrpBv6+Vj26msADStlla2oY7x4=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Jul 18 18:25:50 2025 GMT Not After : Jul 25 18:25:50 2025 GMT Subject: CN=687a91ae-a00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:c5:65:2d:1a:d4:e0:ba:76:48:c5:21:fc: 5d:47:68:26:83:a3:b5:6e:32:8f:86:c0:e7:4d:21: d1:14:df:6d:d5:b0:27:e7:66:d5:45:b5:4f:3d:35: 90:52:69:b2:41:f4:02:fe:c5:78:b3:4a:d8:24:d8: 50:6e:5a:57:9c:56:e9:f9:cf:b1:de:e3:78:96:f1: 99:65:a0:55:6f:b3:1a:37:d3:40:3b:99:0c:75:ab: 91:1e:ea:5f:71:22:c2:b6:2a:dd:7a:6f:d8:44:d4: 63:28:7e:09:4f:31:4d:43:da:9e:34:f8:74:8a:8e: 6c:99:96:f1:a3:fc:a7:fa:e4:94:77:11:95:b8:96: 62:74:3b:96:a6:e3:da:25:21:d9:0e:ca:b3:a4:e0: 28:11:ca:fb:e0:27:e7:57:4f:db:7b:79:0a:75:54: cc:79:c7:b9:3a:19:de:0f:fd:67:75:69:10:93:4c: 20:cb:54:91:a0:a1:bb:35:0a:ff:84:b4:82:df:ca: 83:5d:94:16:d2:a9:04:c9:f4:34:2f:d4:c6:e7:74: f9:4e:b1:35:de:18:e6:99:bf:07:ac:06:f1:fd:78: f5:14:8e:5a:11:4b:e2:d3:f1:af:09:d9:8a:85:fa: 7e:3e:43:c5:c2:04:9a:9a:88:0c:85:df:f4:8f:e4: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BE:41:63:A9:1F:90:17:D6:42:7B:EA:56:1D:8B:B5:FA:C9:3B:4A X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:be:24:3c:55:ad:01:57:37:1f:4a:70:f1:f9:58:fe:59:7c: bf:95:1d:b3:48:10:fc:0d:c6:b7:6a:80:03:13:25:dc:40:0a: 82:e6:5d:e1:ec:67:2a:31:72:c1:b2:a5:77:e2:7c:f2:f5:29: 02:d5:06:27:21:28:eb:aa:97:8c:3f:88:0b:ca:ba:af:8f:a6: be:ff:5f:60:dc:bd:57:b5:dc:c0:08:6f:17:46:49:f9:eb:0f: 80:db:8f:ff:52:5b:d5:8e:aa:31:82:8d:cd:39:a9:5d:cc:7b: 4b:e3:c8:c5:0f:05:60:da:f7:7c:12:b1:a9:02:da:a8:fe:36: 0d:0b:a3:8b:57:c1:bb:31:a3:b1:7d:f9:29:c9:d7:0f:47:84: 09:db:fa:66:4e:1d:f2:15:04:80:c9:8b:fe:e0:ee:a3:a9:f4: 5e:63:a1:6e:28:8a:a1:be:c9:c3:a3:e9:cc:79:f2:d0:21:33: b4:f6:d4:ae:f7:5c:32:f7:76:5f:2e:89:e7:33:5b:85:23:1b: e3:5d:5f:25:46:0d:0d:ea:3c:dc:a9:7e:7b:99:26:d7:c8:ae: eb:42:6f:62:da:98:5e:f3:83:54:7a:5a:6f:cc:a3:04:3b:7b: d6:22:b0:5e:10:70:15:ae:eb:3e:fb:38:06:87:1e:bc:1b:1d: 83:f1:00:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwNzE4MTgyNTUwWhcNMjUwNzI1MTgyNTUwWjAYMRYwFAYD VQQDEw02ODdhOTFhZS1hMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzInFZS0a1OC6dkjFIfxdR2gmg6O1bjKPhsDnTSHRFN9t1bAn52bVRbVPPTWQ UmmyQfQC/sV4s0rYJNhQblpXnFbp+c+x3uN4lvGZZaBVb7MaN9NAO5kMdauRHupf cSLCtirdem/YRNRjKH4JTzFNQ9qeNPh0io5smZbxo/yn+uSUdxGVuJZidDuWpuPa JSHZDsqzpOAoEcr74CfnV0/be3kKdVTMece5OhneD/1ndWkQk0wgy1SRoKG7NQr/ hLSC38qDXZQW0qkEyfQ0L9TG53T5TrE13hjmmb8HrAbx/Xj1FI5aEUvi0/GvCdmK hfp+PkPFwgSamogMhd/0j+QZ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG+QWOp H5AX1kJ76lYdi7X6yTtKMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUviQ8Va0BVzcfSnDx+Vj+WXy/lR2zSBD8Dca3aoADEyXcQAqC5l3h 7GcqMXLBsqV34nzy9SkC1QYnISjrqpeMP4gLyrqvj6a+/19g3L1XtdzACG8XRkn5 6w+A24//UlvVjqoxgo3NOaldzHtL48jFDwVg2vd8ErGpAtqo/jYNC6OLV8G7MaOx ffkpydcPR4QJ2/pmTh3yFQSAyYv+4O6jqfReY6FuKIqhvsnDo+nMefLQITO09tSu 91wy93ZfLonnM1uFIxvjXV8lRg0N6jzcqX57mSbXyK7rQm9i2phe84NUelpvzKME O3vWIrBeEHAVrus++zgGhx68Gx2D8QAi -----END CERTIFICATE-----Generated at Sun Jul 20 06:42:07 2025 by rpki-client