$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft File: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json) Hash identifier: 7oSJ7W53z9xTaoxvufLRFEMSZvDLivxZYs6PGdCVNf4= Subject key identifier: 89:C8:CF:58:6B:66:C5:F0:7A:73:8D:8D:7B:9E:E1:AF:0E:01:C6:88 Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft Manifest number: D8 Signing time: Sat 19 Jul 2025 05:45:50 +0000 Manifest this update: Sat 19 Jul 2025 05:45:50 +0000 Manifest next update: Sat 26 Jul 2025 05:45:50 +0000 Files and hashes: 1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: Es9QUpBr921+asiS4p0AFmn7NRQnaAtJWcFt8W/+cBw=) 2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=) 3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Jul 19 05:45:50 2025 GMT Not After : Jul 26 05:45:50 2025 GMT Subject: CN=687b310e-7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:f0:c4:17:f2:e6:a7:a3:ba:02:80:e0:68: 77:32:c6:9c:5f:42:ce:52:71:89:85:b4:7d:12:69: 11:46:e7:48:98:69:91:9b:a9:27:d8:a6:ce:d7:68: 75:f6:74:60:7b:7c:f3:dd:19:6b:ee:b7:47:64:20: f4:a4:8d:5d:94:78:24:5e:7b:84:a0:68:e3:d8:fb: 39:0b:78:02:e8:db:c9:d6:9d:0c:45:ca:d8:25:03: 8d:8a:9c:e2:b4:82:84:d4:c3:4e:68:57:84:fe:71: 4f:07:15:5c:41:ac:f0:6d:74:a8:cd:cb:56:96:04: 20:93:bb:42:2f:33:21:ad:7c:73:1a:b3:22:da:c1: 5a:be:6f:02:72:7d:2c:6d:e5:57:10:22:34:eb:d1: f5:eb:ca:bc:12:97:b1:44:eb:3c:aa:a9:ce:f0:c3: ee:5c:2b:6c:2f:9e:f7:8e:27:dc:50:ad:23:79:62: db:5c:b7:2a:bd:b9:a0:50:41:d9:e3:07:18:ba:4c: 69:b2:94:43:1f:2b:fb:8c:09:20:7f:da:27:b2:fe: c9:fa:97:9c:3f:b8:69:2e:51:32:f6:4a:04:f2:2a: d9:c4:23:30:70:1e:cf:7a:57:51:74:a4:d4:1e:5a: 57:be:5c:69:5a:ac:a0:19:35:af:b1:88:e0:b2:fb: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:CF:58:6B:66:C5:F0:7A:73:8D:8D:7B:9E:E1:AF:0E:01:C6:88 X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:ab:54:89:36:4a:79:44:db:bf:72:1b:63:5d:68:f2:2a: 71:32:25:3e:53:01:0f:59:ec:c7:2a:e5:53:6a:e1:71:0e:55: d7:94:d5:c7:29:c2:3e:b5:b7:ef:33:e4:9e:8a:1f:1c:2c:59: 99:bf:68:dc:f1:7d:63:fe:86:c4:e7:56:ac:bd:d1:66:d1:43: a5:4a:9b:b8:1b:c9:6e:4f:eb:10:47:eb:08:e3:3e:22:1d:90: 1f:b0:ce:01:fd:2f:03:06:f2:07:f3:61:56:bd:21:e0:44:94: a7:60:04:c3:4f:42:47:ca:f3:82:61:49:d3:8f:67:4d:4a:98: b1:16:46:e8:4c:2a:0b:9a:88:df:05:25:aa:b4:28:00:fa:90: 1c:0c:50:b8:75:11:e6:bb:a3:28:93:d9:f3:a5:ec:78:31:e1: a2:8c:92:1c:07:bd:f9:79:a4:92:73:a1:0c:57:5b:92:0e:70: 2c:c0:fa:03:42:86:6e:c3:e4:64:91:a5:92:1e:ea:95:1f:e4: 7f:c9:30:c5:ff:32:7e:f8:79:cd:0e:18:27:63:c0:32:73:36: 9b:09:9f:32:09:51:28:7c:01:a1:cc:df:0c:d0:34:f5:e0:81: cd:29:90:33:54:8a:e4:3f:09:7b:b1:34:79:52:10:a9:55:a1: fd:c7:3e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUwNzE5MDU0NTUwWhcNMjUwNzI2MDU0NTUwWjAYMRYwFAYD VQQDEw02ODdiMzEwZS03YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj/wxBfy5qejugKA4Gh3MsacX0LOUnGJhbR9EmkRRudImGmRm6kn2KbO12h1 9nRge3zz3Rlr7rdHZCD0pI1dlHgkXnuEoGjj2Ps5C3gC6NvJ1p0MRcrYJQONipzi tIKE1MNOaFeE/nFPBxVcQazwbXSozctWlgQgk7tCLzMhrXxzGrMi2sFavm8Ccn0s beVXECI069H168q8EpexROs8qqnO8MPuXCtsL573jifcUK0jeWLbXLcqvbmgUEHZ 4wcYukxpspRDHyv7jAkgf9onsv7J+pecP7hpLlEy9koE8irZxCMwcB7PeldRdKTU HlpXvlxpWqygGTWvsYjgsvv7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInIz1hr ZsXwenONjXue4a8OAcaIMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3 YkRPc013SUczTDNaTmVlSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgaqtUiTZKeUTbv3IbY11o8ipxMiU+UwEPWezHKuVTauFxDlXXlNXH KcI+tbfvM+Seih8cLFmZv2jc8X1j/obE51asvdFm0UOlSpu4G8luT+sQR+sI4z4i HZAfsM4B/S8DBvIH82FWvSHgRJSnYATDT0JHyvOCYUnTj2dNSpixFkboTCoLmojf BSWqtCgA+pAcDFC4dRHmu6Mok9nzpex4MeGijJIcB735eaSSc6EMV1uSDnAswPoD QoZuw+RkkaWSHuqVH+R/yTDF/zJ++HnNDhgnY8AyczabCZ8yCVEofAGhzN8M0DT1 4IHNKZAzVIrkPwl7sTR5UhCpVaH9xz4z -----END CERTIFICATE-----Generated at Sun Jul 20 11:24:01 2025 by rpki-client