$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: oe03+Jk65nrUBcVsfFIOs8C5Jst9ft3NCJpwGRNX3iQ= Subject key identifier: BB:CA:F6:32:ED:D6:59:AE:0F:C8:D9:99:BD:09:30:F8:21:72:AF:D3 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 26 Signing time: Thu 21 Aug 2025 08:01:03 +0000 Manifest this update: Thu 21 Aug 2025 08:01:03 +0000 Manifest next update: Thu 28 Aug 2025 08:01:03 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: 4eQVUxwUhkCNtj57xKKZM6FUSOQaz/2/O76GFrzAupw=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Aug 21 08:01:03 2025 GMT Not After : Aug 28 08:01:03 2025 GMT Subject: CN=68a6d23f-2970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:1e:14:8f:2d:44:3b:30:29:73:80:b9:91: d5:73:ca:6f:ad:13:9d:cd:79:f4:ea:ca:d1:51:32: 13:c8:68:60:4d:77:4a:de:49:89:f1:82:3c:8d:ff: 56:6d:ae:ea:ff:a6:9b:6c:61:2e:35:61:d9:13:1f: 82:bc:4a:48:3a:5f:e9:79:af:6f:18:78:84:33:6f: d7:0d:f9:26:d7:65:c3:54:8d:54:42:6f:df:2b:18: 58:4e:c7:94:4d:c3:fb:cc:a9:b5:b7:f3:92:0b:e8: df:88:8c:f8:c8:30:b2:f8:89:53:17:7a:dc:c6:fe: f0:65:66:1f:ae:1e:65:ff:8a:d3:c2:ae:a7:f6:dd: 1b:d7:7a:f9:09:b6:b1:9c:52:a2:67:a6:b3:2e:86: 8e:f1:df:1f:7b:13:70:40:a9:99:9e:c0:a1:36:7e: 1c:e6:9e:0f:ad:d2:cc:6c:e8:bd:64:6a:76:3c:3d: 07:f8:43:cb:74:11:06:72:55:22:77:89:63:0c:f1: 22:c9:29:b6:dc:91:00:09:02:e2:b3:71:8f:e7:72: ae:05:26:1c:86:f2:d7:60:5a:1d:1f:1a:37:be:cf: f4:96:6c:73:8f:60:ee:19:3a:5e:b9:c6:d4:49:49: e7:54:9f:11:53:e8:75:37:8f:3a:ce:ba:d4:37:12: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:F6:32:ED:D6:59:AE:0F:C8:D9:99:BD:09:30:F8:21:72:AF:D3 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:13:a8:17:59:67:50:48:6c:90:ef:83:90:2f:2b:e9:86:67: df:d9:49:7e:5c:52:4b:6e:40:57:a2:7d:97:0a:32:ee:da:2f: de:4b:8f:bf:76:3e:d1:ed:f6:d3:f0:3c:a7:38:d4:10:53:f8: cb:a9:d3:cc:85:d7:fc:77:56:55:47:63:7b:9b:00:2b:53:f3: 64:41:95:8b:4e:8b:76:25:7b:a8:61:da:81:e7:a7:40:df:2a: 8a:ca:36:a0:4c:8e:4b:f3:5f:20:53:0d:3e:4b:37:f9:17:6a: 8f:4f:67:bf:73:7a:3e:5c:c3:e5:54:af:40:8e:25:8e:46:76: db:35:f9:96:99:3a:ab:45:1c:32:e0:e0:79:b9:13:8d:67:42: ec:83:3f:a5:9a:43:09:dc:cf:0c:ff:45:62:d4:26:6f:37:8b: a2:66:5f:b7:50:34:4a:75:2f:43:f5:75:39:b6:70:83:4b:25: 5f:72:05:77:2c:38:4b:03:6f:dd:03:6a:f4:80:4d:18:d7:7c: 38:fd:b8:7c:48:f7:3d:d9:c2:45:92:f4:65:73:2f:31:82:37: 36:6d:55:f4:42:9a:49:1b:3c:af:07:d6:37:15:43:d2:24:5e: ea:b5:d7:64:11:ff:64:bb:86:08:92:2e:f1:0a:6a:95:e3:89: 65:f6:33:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTA4MjEwODAxMDNaFw0yNTA4MjgwODAxMDNaMBgxFjAUBgNV BAMTDTY4YTZkMjNmLTI5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Sh4Ujy1EOzApc4C5kdVzym+tE53NefTqytFRMhPIaGBNd0reSYnxgjyN/1Zt rur/pptsYS41YdkTH4K8Skg6X+l5r28YeIQzb9cN+SbXZcNUjVRCb98rGFhOx5RN w/vMqbW385IL6N+IjPjIMLL4iVMXetzG/vBlZh+uHmX/itPCrqf23RvXevkJtrGc UqJnprMuho7x3x97E3BAqZmewKE2fhzmng+t0sxs6L1kanY8PQf4Q8t0EQZyVSJ3 iWMM8SLJKbbckQAJAuKzcY/ncq4FJhyG8tdgWh0fGje+z/SWbHOPYO4ZOl65xtRJ SedUnxFT6HU3jzrOutQ3Em+FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu8r2Mu3W Wa4PyNmZvQkw+CFyr9MwHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkTqBdZZ1BIbJDvg5AvK+mGZ9/ZSX5cUktuQFeifZcKMu7aL95Lj792 PtHt9tPwPKc41BBT+Mup08yF1/x3VlVHY3ubACtT82RBlYtOi3Yle6hh2oHnp0Df KorKNqBMjkvzXyBTDT5LN/kXao9PZ79zej5cw+VUr0COJY5Gdts1+ZaZOqtFHDLg 4Hm5E41nQuyDP6WaQwnczwz/RWLUJm83i6JmX7dQNEp1L0P1dTm2cINLJV9yBXcs OEsDb90DavSATRjXfDj9uHxI9z3ZwkWS9GVzLzGCNzZtVfRCmkkbPK8H1jcVQ9Ik Xuq112QR/2S7hgiSLvEKapXjiWX2MxY= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client