$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: NQd6U7Tu90lH3gEilNtkH9jmO9UE/2QIXBwsPARXkbc= Subject key identifier: B7:89:CA:13:C5:AB:96:20:36:DE:2D:3E:12:AA:15:AE:BF:7C:E2:FB Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 34A5 Signing time: Fri 18 Jul 2025 14:33:15 +0000 Manifest this update: Fri 18 Jul 2025 14:33:15 +0000 Manifest next update: Fri 25 Jul 2025 14:33:15 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: 3aQ1eyuXG5XdLsGdwGhxl40hUSwKh30SpExf25757zU=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Jul 18 14:33:15 2025 GMT Not After : Jul 25 14:33:15 2025 GMT Subject: CN=687a5b2b-6640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:c8:55:d4:8e:77:38:62:ae:f3:81:07:05: 72:db:ed:6a:4b:f2:c2:58:59:f0:58:2c:0f:53:92: e0:cc:74:87:6d:a8:33:e0:c9:94:43:3a:33:c6:f3: 24:42:4c:21:f7:9f:fd:68:46:a7:29:3b:60:f9:29: 66:84:2f:4f:eb:0e:6f:61:64:01:5d:52:96:d2:99: 41:c0:77:4c:c4:ab:6a:48:ab:f9:57:5a:f2:3c:7f: 18:d0:b5:fd:2d:15:cd:e9:bb:7a:bf:86:04:6e:74: da:16:39:ee:d1:0f:b8:46:16:4c:47:01:9a:85:3f: 71:d9:3e:0a:67:5c:12:a6:64:bd:8c:57:90:27:6d: 41:5c:1f:aa:2d:f6:d8:75:6c:d5:11:43:fe:ec:87: dd:7e:5c:82:9c:2d:fb:37:05:0f:2f:2c:8d:29:e5: 9f:63:35:50:e0:b7:c1:d5:79:ac:95:d7:54:02:0e: 68:5a:fe:19:21:6f:12:fe:56:0c:ba:bf:02:52:04: 86:cb:31:0f:ba:e1:87:c3:bc:4c:5e:01:87:1c:01: 68:c2:50:ef:a8:c4:25:a4:04:0b:b2:a4:af:6c:54: c7:59:43:f9:ad:30:b7:a7:8b:28:da:be:dd:ef:4d: f0:39:35:f1:35:a8:a9:16:ce:37:99:83:54:c9:11: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:CA:13:C5:AB:96:20:36:DE:2D:3E:12:AA:15:AE:BF:7C:E2:FB X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ee:0d:4f:30:79:88:a8:6c:a4:25:4d:dd:cd:de:82:7c:66: fd:a1:f9:55:b6:6b:02:1b:fe:ee:35:b5:a8:3a:67:9e:5b:b9: ba:d5:85:83:b0:fa:5f:b5:15:2d:f6:fe:be:6c:5d:d7:84:56: 37:ed:7a:90:9f:90:3d:02:24:fe:61:3e:cf:a2:bc:97:eb:be: 21:1c:24:10:7b:53:87:4c:77:f1:57:f0:e0:ca:0b:46:16:39: 47:6d:3d:73:d4:37:88:4b:1e:16:d5:90:72:45:ec:90:61:9e: 8e:c5:69:2f:74:e8:27:78:0b:63:e4:45:81:2e:d0:a2:e7:84: ee:9e:db:a1:b9:cf:a4:d5:e8:71:8c:8d:be:6e:65:3f:16:31: 13:9f:fe:e8:b6:6e:53:db:ea:80:70:de:06:80:52:b9:2f:c7: 02:9a:8f:d8:dd:20:bb:03:e9:f7:8a:10:90:5d:8b:08:33:4b: 72:ff:a5:c9:d2:7e:cc:51:72:55:28:8a:0b:fb:f9:85:96:99: 60:8d:2b:f4:58:bc:41:7d:7b:ff:49:e3:08:6c:b1:24:48:7a: 29:a5:55:8f:ce:38:37:de:5d:d5:02:57:af:6c:73:cc:e8:48: 52:37:0e:7d:87:77:3a:18:33:a6:aa:a7:b3:91:c5:28:39:3a: 98:6e:aa:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUwNzE4MTQzMzE1WhcNMjUwNzI1MTQzMzE1WjAYMRYwFAYD VQQDEw02ODdhNWIyYi02NjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgzIVdSOdzhirvOBBwVy2+1qS/LCWFnwWCwPU5LgzHSHbagz4MmUQzozxvMk Qkwh95/9aEanKTtg+SlmhC9P6w5vYWQBXVKW0plBwHdMxKtqSKv5V1ryPH8Y0LX9 LRXN6bt6v4YEbnTaFjnu0Q+4RhZMRwGahT9x2T4KZ1wSpmS9jFeQJ21BXB+qLfbY dWzVEUP+7IfdflyCnC37NwUPLyyNKeWfYzVQ4LfB1XmslddUAg5oWv4ZIW8S/lYM ur8CUgSGyzEPuuGHw7xMXgGHHAFowlDvqMQlpAQLsqSvbFTHWUP5rTC3p4so2r7d 703wOTXxNaipFs43mYNUyREO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeJyhPF q5YgNt4tPhKqFa6/fOL7MB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB97g1PMHmIqGykJU3dzd6CfGb9oflVtmsCG/7uNbWoOmeeW7m61YWD sPpftRUt9v6+bF3XhFY37XqQn5A9AiT+YT7PoryX674hHCQQe1OHTHfxV/DgygtG FjlHbT1z1DeISx4W1ZByReyQYZ6OxWkvdOgneAtj5EWBLtCi54Tuntuhuc+k1ehx jI2+bmU/FjETn/7otm5T2+qAcN4GgFK5L8cCmo/Y3SC7A+n3ihCQXYsIM0ty/6XJ 0n7MUXJVKIoL+/mFlplgjSv0WLxBfXv/SeMIbLEkSHoppVWPzjg33l3VAlevbHPM 6EhSNw59h3c6GDOmqqezkcUoOTqYbqp9 -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:13 2025 by rpki-client