$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: i1j1zEGDf9rCVmljpLUNburBugG9ZM34U6sOEfYyvTM= Subject key identifier: 4A:F4:DD:3D:30:E2:98:1C:F7:F2:CE:7B:5E:2B:15:98:59:6F:39:00 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 0841 Signing time: Thu 18 Sep 2025 21:00:54 +0000 Manifest this update: Thu 18 Sep 2025 21:00:53 +0000 Manifest next update: Thu 25 Sep 2025 21:00:53 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: swujSuqjJZU5PIBXIzTjYIkcnni6lDMivbOvrzyuz6M=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Sep 18 21:00:53 2025 GMT Not After : Sep 25 21:00:53 2025 GMT Subject: CN=68cc7306-09f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:5d:d3:3d:b1:d6:8e:00:31:a7:0b:81:ae: 23:09:a4:84:98:17:78:48:43:6a:06:40:a9:76:21: 97:4d:46:ea:ad:ea:1c:b2:94:fe:49:12:53:26:8d: 4b:b6:dd:b5:35:54:97:2a:47:f9:43:3d:e2:7b:7d: e7:b3:73:05:c6:12:96:22:4d:70:b3:8b:ba:b4:0f: 40:17:57:20:f6:d3:5b:c4:a7:ff:07:79:bc:56:8d: 09:24:47:6d:dd:f3:82:2b:31:4c:ae:7a:e2:28:7d: 0b:52:37:6d:ee:5c:44:c3:30:d6:c0:c0:ae:74:0f: db:f7:c1:41:36:4d:20:82:ea:18:55:51:d5:b1:94: 85:7b:7a:27:9f:f2:30:06:4c:88:59:b7:1e:7d:08: aa:c0:45:52:d6:51:38:40:72:f7:2b:d4:7d:a4:35: e5:5d:8a:2c:3f:c0:00:38:89:95:32:94:57:63:95: 5a:90:df:cc:5d:9b:09:f3:3f:7b:e6:4e:7c:8f:d2: d9:dd:cc:8d:29:00:0f:6c:de:08:88:f8:21:72:ed: 8d:2a:09:0b:49:61:13:0e:85:4d:56:e7:12:86:14: a2:fd:78:17:dd:bf:2a:d7:af:4c:12:d4:09:89:87: ed:43:53:f4:2f:5b:05:1e:17:a0:6a:33:b1:17:e2: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F4:DD:3D:30:E2:98:1C:F7:F2:CE:7B:5E:2B:15:98:59:6F:39:00 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:09:52:e4:c0:94:40:5d:5b:80:d8:b8:31:5c:4d:23:51:b8: 76:72:10:fa:5f:f2:73:c8:51:37:a2:4f:a6:cb:ba:b2:7a:c1: 49:25:c2:10:89:be:95:02:aa:78:85:4e:07:4c:ec:35:9d:10: e1:48:3f:5f:f0:2f:09:a5:70:1f:94:45:75:c1:c4:1b:0d:e7: 53:3d:86:92:53:9b:4e:49:a7:a7:f4:4b:01:c6:75:a1:dd:90: a1:b5:e5:e9:f7:1d:3a:92:18:30:c2:7e:46:fb:6c:ad:35:43: 8e:61:84:ae:7c:35:89:67:4b:5f:05:bc:df:dc:41:f0:3f:1a: ea:97:1c:01:c8:59:2d:53:15:c3:1e:6c:03:a4:58:02:bd:c0: 6b:30:54:39:0b:d4:15:fd:df:ec:ae:ab:ba:ed:48:6c:d5:8a: 5f:ec:19:cb:ff:dc:01:1d:8f:1a:ee:92:ee:56:c7:27:33:c0: d0:2d:45:76:a3:f1:61:cd:ce:80:41:40:ba:66:41:1c:74:a0: d1:5a:7d:e5:fc:85:3e:4c:ed:f8:3e:51:18:2d:4b:9e:00:44: 23:08:db:eb:bf:62:07:92:6d:40:29:eb:11:8f:43:51:0c:d4: 65:92:c5:07:70:3a:5a:c1:30:a5:bb:b4:81:ca:93:31:e1:e5: 38:16:75:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjUwOTE4MjEwMDUzWhcNMjUwOTI1MjEwMDUzWjAYMRYwFAYD VQQDEw02OGNjNzMwNi0wOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU1d0z2x1o4AMacLga4jCaSEmBd4SENqBkCpdiGXTUbqreocspT+SRJTJo1L tt21NVSXKkf5Qz3ie33ns3MFxhKWIk1ws4u6tA9AF1cg9tNbxKf/B3m8Vo0JJEdt 3fOCKzFMrnriKH0LUjdt7lxEwzDWwMCudA/b98FBNk0gguoYVVHVsZSFe3onn/Iw BkyIWbcefQiqwEVS1lE4QHL3K9R9pDXlXYosP8AAOImVMpRXY5VakN/MXZsJ8z97 5k58j9LZ3cyNKQAPbN4IiPghcu2NKgkLSWETDoVNVucShhSi/XgX3b8q169MEtQJ iYftQ1P0L1sFHhegajOxF+LcPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr03T0w 4pgc9/LOe14rFZhZbzkAMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVCVLkwJRAXVuA2LgxXE0jUbh2chD6X/JzyFE3ok+my7qyesFJJcIQ ib6VAqp4hU4HTOw1nRDhSD9f8C8JpXAflEV1wcQbDedTPYaSU5tOSaen9EsBxnWh 3ZChteXp9x06khgwwn5G+2ytNUOOYYSufDWJZ0tfBbzf3EHwPxrqlxwByFktUxXD HmwDpFgCvcBrMFQ5C9QV/d/srqu67Uhs1Ypf7BnL/9wBHY8a7pLuVscnM8DQLUV2 o/Fhzc6AQUC6ZkEcdKDRWn3l/IU+TO34PlEYLUueAEQjCNvrv2IHkm1AKesRj0NR DNRlksUHcDpawTClu7SBypMx4eU4FnUK -----END CERTIFICATE-----Generated at Fri Sep 19 00:49:52 2025 by rpki-client