$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: dBOXXWpSKSOG49JQpsQx7sx/jN+8ANCuyTzdZfMqeB4= Subject key identifier: 63:79:26:B0:D9:5C:E8:A3:E5:57:CE:A8:A1:DE:2D:F5:B9:B4:87:96 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0C9E Signing time: Thu 18 Sep 2025 18:24:36 +0000 Manifest this update: Thu 18 Sep 2025 18:24:35 +0000 Manifest next update: Thu 25 Sep 2025 18:24:35 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: Nq1KBfGS6htP/OK6rxedXR0JC4mXXsfgXLhPrTnc3aw=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Sep 18 18:24:35 2025 GMT Not After : Sep 25 18:24:35 2025 GMT Subject: CN=68cc4e64-a989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:a2:32:db:21:85:c1:bb:d5:9f:0d:eb:2c: ac:b9:b2:7b:68:31:dd:03:28:e8:19:9d:9d:88:95: 87:9b:a3:d7:a8:31:8b:7e:46:a3:19:e9:13:96:b5: ae:04:ad:fc:d4:4c:8e:09:b0:77:2c:a9:18:d9:d9: d3:aa:11:ba:c4:c2:b1:09:ef:2a:99:05:84:7a:10: a3:91:49:4f:d6:9c:61:61:63:03:c4:cd:df:6d:9b: dd:a4:7e:d0:74:84:7e:98:f6:bb:9f:22:19:7b:d2: 0b:da:de:3e:0f:9f:b1:c5:49:27:3d:2e:49:35:d8: 12:b1:d8:f9:13:e3:13:31:af:7e:1f:af:9a:d0:19: 6f:ea:26:57:a4:cc:82:9f:c8:ab:30:1c:bd:77:1d: e4:65:01:c0:d1:a2:ba:af:dc:38:c2:a6:06:f9:de: 7c:e9:86:57:da:bd:6f:7c:9e:af:45:ce:0a:15:64: b5:cc:0a:29:6f:b7:48:ec:60:73:21:3b:36:9d:22: 4c:42:4b:3a:d4:05:c0:10:c2:a6:59:df:10:6b:73: 5c:6a:a4:ef:83:00:98:a9:a8:b0:63:a5:28:a3:97: 44:ce:f2:a7:f6:88:13:4a:80:2f:df:31:b8:0b:ab: c4:85:6f:71:b4:51:48:e1:86:6c:06:db:cc:e2:41: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:26:B0:D9:5C:E8:A3:E5:57:CE:A8:A1:DE:2D:F5:B9:B4:87:96 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:22:69:fc:96:e3:43:ca:f0:99:d2:48:18:f5:4a:0e:8e:17: 7e:53:26:06:76:9a:50:07:a3:c6:24:7e:ae:1a:50:47:29:3c: 35:60:48:c8:be:60:c9:3e:7b:97:b2:2e:74:52:c6:3d:66:f7: 1c:f7:ac:1f:c5:e5:65:6c:ef:21:49:80:eb:fa:83:60:1e:a5: d3:7d:34:e5:8c:fd:7f:5a:6f:73:0e:d4:f1:f4:5f:a7:2c:88: cd:3d:fa:e3:3d:6a:25:ea:81:f1:7a:a1:1b:45:b5:f7:5e:b8: d1:83:9c:2f:5c:1a:ce:86:48:36:ed:ff:0e:c7:a2:eb:8e:8d: 31:af:b9:38:d4:ff:a8:44:08:77:0c:31:00:a3:ed:0b:7b:a3: e6:dc:28:4c:bb:34:70:54:b5:b6:ce:3e:82:54:61:65:5d:15: af:99:e0:34:28:22:5a:3d:ef:3b:24:14:71:e6:79:a0:88:25: 1b:5b:e5:5b:db:ea:38:93:f5:b0:a6:7a:8a:ef:e1:0d:dd:56: e0:04:6f:d4:19:e7:0d:1f:44:bf:61:81:44:a1:b5:99:a7:40: 63:32:04:4e:fe:2b:a9:41:a2:2d:57:4f:21:8a:d7:ef:69:1b: 3d:26:43:c2:2d:47:9b:1e:d0:bc:89:54:3d:66:16:91:ec:7d: b3:c4:46:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwOTE4MTgyNDM1WhcNMjUwOTI1MTgyNDM1WjAYMRYwFAYD VQQDEw02OGNjNGU2NC1hOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6KiMtshhcG71Z8N6yysubJ7aDHdAyjoGZ2diJWHm6PXqDGLfkajGekTlrWu BK381EyOCbB3LKkY2dnTqhG6xMKxCe8qmQWEehCjkUlP1pxhYWMDxM3fbZvdpH7Q dIR+mPa7nyIZe9IL2t4+D5+xxUknPS5JNdgSsdj5E+MTMa9+H6+a0Blv6iZXpMyC n8irMBy9dx3kZQHA0aK6r9w4wqYG+d586YZX2r1vfJ6vRc4KFWS1zAopb7dI7GBz ITs2nSJMQks61AXAEMKmWd8Qa3NcaqTvgwCYqaiwY6Uoo5dEzvKn9ogTSoAv3zG4 C6vEhW9xtFFI4YZsBtvM4kEKLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN5JrDZ XOij5VfOqKHeLfW5tIeWMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Imn8luNDyvCZ0kgY9UoOjhd+UyYGdppQB6PGJH6uGlBHKTw1YEjI vmDJPnuXsi50UsY9Zvcc96wfxeVlbO8hSYDr+oNgHqXTfTTljP1/Wm9zDtTx9F+n LIjNPfrjPWol6oHxeqEbRbX3XrjRg5wvXBrOhkg27f8Ox6Lrjo0xr7k41P+oRAh3 DDEAo+0Le6Pm3ChMuzRwVLW2zj6CVGFlXRWvmeA0KCJaPe87JBRx5nmgiCUbW+Vb 2+o4k/WwpnqK7+EN3VbgBG/UGecNH0S/YYFEobWZp0BjMgRO/iupQaItV08hitfv aRs9JkPCLUebHtC8iVQ9ZhaR7H2zxEak -----END CERTIFICATE-----Generated at Thu Sep 18 22:02:44 2025 by rpki-client