$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: 7utCopZc0IR2sl9FA8YcqCu7DM32ObvOrTiNxsgl49o= Subject key identifier: D4:22:DD:BC:F6:67:91:A1:61:3B:2B:02:42:F2:40:A2:EC:CA:B3:5D Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08AE Signing time: Sat 06 Sep 2025 20:43:23 +0000 Manifest this update: Sat 06 Sep 2025 20:43:23 +0000 Manifest next update: Sat 13 Sep 2025 20:43:23 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: TlGw9dgt7OMcY9N1ofq0yo57A4+hFSx43p5B2B1EnEc=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Sep 6 20:43:23 2025 GMT Not After : Sep 13 20:43:23 2025 GMT Subject: CN=68bc9ceb-2d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:4f:9c:cb:45:ef:60:ee:24:ae:11:60:10: f2:37:78:fb:03:7b:a7:5c:12:98:2b:27:1a:be:b4: 53:bd:fc:fa:ca:31:67:a8:8f:ec:34:c1:a7:2c:d3: 3f:c7:c1:00:ca:1d:6b:7a:29:a6:6f:7f:c5:46:15: c2:34:2a:e5:eb:87:b3:e0:b6:c8:c2:9d:bb:c5:fe: 55:f6:d6:04:20:9e:3b:d8:71:70:2f:93:d8:27:c9: 73:6b:f7:55:87:c8:21:0d:e7:80:33:5a:6c:63:de: 05:bd:3b:29:f8:f1:4b:ca:71:8a:f6:6b:68:2f:eb: 36:64:fa:f6:36:be:cc:d8:4b:57:4a:37:78:36:14: e9:8b:d0:b8:66:43:55:c6:0d:f0:da:e6:c3:25:7b: 8a:39:8c:e9:32:12:fa:37:56:bf:e8:fd:0a:1b:b2: 05:90:20:fc:70:26:8d:3c:6e:15:cb:2c:72:48:49: 47:cd:1f:20:29:1c:4c:ef:ae:76:e1:5a:18:d1:6f: 34:89:b8:77:af:76:bc:9b:41:37:3a:43:15:85:fd: d0:58:ce:ad:a8:ef:43:8a:f5:fd:e6:41:4b:8f:72: 85:cc:9e:cd:64:1d:3c:c8:99:98:57:b5:49:7e:91: 95:ec:da:63:e2:24:07:48:b9:46:44:92:49:04:87: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:22:DD:BC:F6:67:91:A1:61:3B:2B:02:42:F2:40:A2:EC:CA:B3:5D X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:87:ce:2c:1a:e0:c1:ee:10:69:0e:a5:8b:fe:d0:21:fd: 6b:fc:0d:c1:3a:f6:88:76:bd:1d:e2:bc:5c:8a:51:34:ff:e3: 37:d2:1c:fc:b3:6e:80:c1:54:d0:c5:04:ad:5e:62:a4:d2:cc: 7d:93:55:be:49:37:c9:69:89:86:5f:a5:cf:1f:65:d6:1a:17: f0:5b:be:aa:1a:3d:c1:ef:16:b2:5f:6b:2f:ef:18:b9:ae:56: 3f:f6:44:5f:1b:57:f5:48:07:7c:93:02:8b:8a:13:e2:5a:47: fb:c0:8d:0d:47:44:17:13:b7:23:11:28:71:a5:28:94:7a:a8: 6c:d3:62:74:22:3d:20:2b:39:d5:5c:37:58:36:f6:76:92:30: da:b7:ba:73:fe:51:2a:de:21:42:3a:1e:9b:58:79:88:9b:d1: 70:99:16:a6:55:cf:de:61:a3:e3:e4:f4:e2:10:d5:a5:9d:71: d3:22:9c:50:bd:c8:3e:29:33:cd:45:0a:ca:56:c6:7d:c3:2c: 85:e2:9d:68:37:8f:a8:a4:36:a6:6e:e0:21:bc:fd:1a:40:30: 87:75:49:af:92:b6:d5:b1:7a:71:69:39:4a:b0:95:8f:9b:9a: 05:5d:46:22:9e:c5:6d:7e:61:0d:10:ff:a8:f7:e4:c7:74:b8: 89:4e:9a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUwOTA2MjA0MzIzWhcNMjUwOTEzMjA0MzIzWjAYMRYwFAYD VQQDEw02OGJjOWNlYi0yZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8JPnMtF72DuJK4RYBDyN3j7A3unXBKYKycavrRTvfz6yjFnqI/sNMGnLNM/ x8EAyh1reimmb3/FRhXCNCrl64ez4LbIwp27xf5V9tYEIJ472HFwL5PYJ8lza/dV h8ghDeeAM1psY94FvTsp+PFLynGK9mtoL+s2ZPr2Nr7M2EtXSjd4NhTpi9C4ZkNV xg3w2ubDJXuKOYzpMhL6N1a/6P0KG7IFkCD8cCaNPG4VyyxySElHzR8gKRxM7652 4VoY0W80ibh3r3a8m0E3OkMVhf3QWM6tqO9DivX95kFLj3KFzJ7NZB08yJmYV7VJ fpGV7Npj4iQHSLlGRJJJBIcG6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQi3bz2 Z5GhYTsrAkLyQKLsyrNdMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQhIfOLBrgwe4QaQ6li/7QIf1r/A3BOvaIdr0d4rxcilE0/+M30hz8 s26AwVTQxQStXmKk0sx9k1W+STfJaYmGX6XPH2XWGhfwW76qGj3B7xayX2sv7xi5 rlY/9kRfG1f1SAd8kwKLihPiWkf7wI0NR0QXE7cjEShxpSiUeqhs02J0Ij0gKznV XDdYNvZ2kjDat7pz/lEq3iFCOh6bWHmIm9FwmRamVc/eYaPj5PTiENWlnXHTIpxQ vcg+KTPNRQrKVsZ9wyyF4p1oN4+opDambuAhvP0aQDCHdUmvkrbVsXpxaTlKsJWP m5oFXUYinsVtfmENEP+o9+THdLiJTppH -----END CERTIFICATE-----Generated at Mon Sep 8 16:55:26 2025 by rpki-client