$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: ddYbKeLOpQvcFblTz1Ny9scbqwPyVzoaIvZwQWjQ1N4= Subject key identifier: 15:08:3C:3D:DC:AC:95:4F:20:E3:24:71:C8:3E:9B:1D:F1:2B:87:F7 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 018F Signing time: Mon 21 Jul 2025 03:57:23 +0000 Manifest this update: Mon 21 Jul 2025 03:57:23 +0000 Manifest next update: Mon 28 Jul 2025 03:57:23 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: +4Z98coQA2DExurVkOpPV0XY1UHr7IexgrS50IYh+g0=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Jul 21 03:57:23 2025 GMT Not After : Jul 28 03:57:23 2025 GMT Subject: CN=687dbaa3-0c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:36:26:14:06:ab:90:99:aa:51:dd:6d:60: 96:71:80:9e:58:1e:04:07:b2:4b:74:da:8c:b0:d9: 66:8d:a5:df:19:5b:df:8f:7c:60:cf:75:60:a0:22: 5b:2f:45:ad:bb:37:fe:38:fd:26:a1:5f:03:31:a8: 07:a2:00:b0:b8:bb:78:9c:68:a1:22:1b:62:bb:94: e6:01:88:58:54:c3:40:de:d2:a0:41:08:b1:42:27: 63:ed:4a:8d:e9:1d:60:4d:0a:cb:42:39:0a:bf:75: cb:6f:d6:48:e4:90:ef:0f:eb:d3:68:7a:65:e2:8a: 3f:b3:e5:a1:6c:20:90:f2:ac:6c:bc:2d:0f:40:2e: 42:14:02:34:6c:99:a5:6d:68:22:59:6e:90:8f:7f: 00:77:dd:86:04:79:eb:53:a5:bd:d5:09:4f:47:7b: 6c:fe:dd:64:94:80:b1:19:a8:45:da:47:7c:93:ff: 6c:26:f9:dd:5f:23:6e:ae:ee:20:58:a9:b4:a6:6f: bf:b1:88:4c:d3:d8:a0:fd:b6:8f:f3:6b:6c:94:f7: bb:a9:b2:97:dc:d1:e5:9c:07:f2:25:00:ce:20:b5: cc:fc:b1:2f:5b:b4:bc:75:35:9a:d1:ee:7d:29:5f: c9:7b:0e:20:2f:a7:67:d7:ee:bc:f5:0f:a7:b8:41: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:3C:3D:DC:AC:95:4F:20:E3:24:71:C8:3E:9B:1D:F1:2B:87:F7 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:27:e6:29:41:e7:b7:0c:03:9c:a1:1e:30:30:a1:0f:69:37: 5f:01:10:f0:37:91:fa:14:e4:98:5c:23:4e:0b:ed:ed:27:d4: 52:49:1b:ae:b7:7a:c3:0e:50:cd:40:a3:9c:38:ca:f3:9a:b3: a0:08:df:5f:cb:3d:38:58:3a:ae:ed:6e:b3:4d:5a:dd:0b:3e: d2:31:a1:70:b7:48:db:81:1e:14:c5:57:75:2a:95:e5:a2:94: ba:fe:b0:46:9d:c4:5b:10:bb:bb:1a:d4:20:8b:eb:e0:aa:96: de:bc:80:95:72:40:c5:bc:5e:af:bf:6a:5e:57:b4:d6:8c:9e: b8:80:bf:a8:1a:d7:da:86:7a:f2:00:08:f2:4e:9f:95:5c:10: 96:44:ef:fd:6f:f5:23:0f:e6:93:ae:55:72:e8:61:84:67:00: c6:f2:41:5b:9b:b4:52:20:e5:f7:13:c9:77:1f:4e:53:8c:98: a0:42:f7:b1:df:c3:9c:56:27:ac:66:a1:41:04:11:db:12:a7: 60:98:f7:0e:82:85:4e:36:94:ac:0d:dc:72:52:cb:8b:f7:bf: 60:81:e6:49:ad:46:e1:21:99:24:9d:11:4e:ab:5b:6d:05:07: 51:0e:90:d6:0a:26:13:a8:97:e9:9b:ca:b0:55:14:99:8f:23: 53:77:84:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUwNzIxMDM1NzIzWhcNMjUwNzI4MDM1NzIzWjAYMRYwFAYD VQQDEw02ODdkYmFhMy0wYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lg2JhQGq5CZqlHdbWCWcYCeWB4EB7JLdNqMsNlmjaXfGVvfj3xgz3VgoCJb L0Wtuzf+OP0moV8DMagHogCwuLt4nGihIhtiu5TmAYhYVMNA3tKgQQixQidj7UqN 6R1gTQrLQjkKv3XLb9ZI5JDvD+vTaHpl4oo/s+WhbCCQ8qxsvC0PQC5CFAI0bJml bWgiWW6Qj38Ad92GBHnrU6W91QlPR3ts/t1klICxGahF2kd8k/9sJvndXyNuru4g WKm0pm+/sYhM09ig/baP82tslPe7qbKX3NHlnAfyJQDOILXM/LEvW7S8dTWa0e59 KV/Jew4gL6dn1+689Q+nuEFRJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUIPD3c rJVPIOMkccg+mx3xK4f3MB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmJ+YpQee3DAOcoR4wMKEPaTdfARDwN5H6FOSYXCNOC+3tJ9RSSRuu t3rDDlDNQKOcOMrzmrOgCN9fyz04WDqu7W6zTVrdCz7SMaFwt0jbgR4UxVd1KpXl opS6/rBGncRbELu7GtQgi+vgqpbevICVckDFvF6vv2peV7TWjJ64gL+oGtfahnry AAjyTp+VXBCWRO/9b/UjD+aTrlVy6GGEZwDG8kFbm7RSIOX3E8l3H05TjJigQvex 38OcViesZqFBBBHbEqdgmPcOgoVONpSsDdxyUsuL979ggeZJrUbhIZkknRFOq1tt BQdRDpDWCiYTqJfpm8qwVRSZjyNTd4SN -----END CERTIFICATE-----Generated at Mon Jul 21 13:20:01 2025 by rpki-client