$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json) Hash identifier: 7mrjCbODA3GLWGhSqQLTqAvWEyHwJIq/z6snUd4ZhKQ= Subject key identifier: B6:D4:EB:6E:94:5C:88:99:96:19:C5:B6:CB:96:A9:4D:1B:98:35:4C Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft Manifest number: 14B3 Signing time: Wed 20 Aug 2025 18:49:19 +0000 Manifest this update: Wed 20 Aug 2025 18:49:19 +0000 Manifest next update: Wed 27 Aug 2025 18:49:19 +0000 Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: Ox3NETBVNL/k/Y1ldXOn+nJB1IgsO73hHoBqjfhkjLU=) 2: F6EC251224E711F087B2F571C4F9AE02.roa (hash: ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=) 3: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Aug 20 18:49:19 2025 GMT Not After : Aug 27 18:49:19 2025 GMT Subject: CN=68a618af-ea84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:45:7b:44:53:6b:58:fc:c6:e4:14:5d:2f: bc:45:1c:c7:53:e6:da:82:a0:ee:ae:31:a3:4c:78: f9:d5:3f:40:61:3b:c6:62:14:e6:d0:6d:68:67:86: f5:1d:e9:21:fe:68:3a:1f:e1:ae:d7:8a:69:47:a9: b5:62:f2:dd:09:16:68:9d:e6:c3:ef:9f:c2:8b:6b: df:b5:e3:e8:a7:db:64:99:7e:a9:0b:6d:7e:f7:c0: ac:2a:7b:92:67:36:8e:28:92:a4:26:f9:e7:0e:ad: 92:40:97:f9:1d:35:6c:40:3d:02:19:c8:fc:6d:ee: d9:c1:d3:90:e6:6b:b2:ef:9a:03:a7:14:66:82:a7: c5:0a:af:a9:5f:a2:f0:1b:4e:07:1a:66:1b:9f:9b: 3b:3a:da:fb:93:63:67:5b:bc:c3:ba:c2:82:f4:dc: f3:0a:eb:c9:fb:58:37:f7:18:54:9f:69:b7:a2:18: b2:b4:84:b7:0f:31:43:72:52:03:b8:82:8c:70:19: e1:29:6c:ac:4f:74:94:77:32:d2:33:0b:67:dd:61: 54:f7:05:cc:95:a6:f5:16:3d:da:c8:2b:48:11:f5: 60:cf:86:06:0f:ce:b3:c5:b3:1d:71:8e:d3:db:68: f2:36:74:57:be:51:31:73:7f:e3:dd:c2:8f:1b:a0: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:EB:6E:94:5C:88:99:96:19:C5:B6:CB:96:A9:4D:1B:98:35:4C X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ba:b1:9e:7a:36:f5:2a:4d:77:8e:22:2a:9c:f0:7e:ff:da: 95:7c:aa:45:1f:a2:91:82:5a:72:03:fa:c8:21:b5:d7:8c:56: c1:c6:e5:77:13:8f:74:f4:cd:64:2c:fb:35:cc:15:b8:bb:3f: 9c:20:22:4c:89:1c:4e:41:52:29:28:93:06:2e:ae:c7:d1:fe: b7:1f:b0:50:40:c7:f3:3f:3b:75:81:30:30:87:7b:75:ff:c5: d7:e4:75:02:bf:2b:7c:ea:92:70:7b:de:19:b8:25:95:b0:07: 30:90:73:6d:9a:df:42:06:77:f4:6a:49:04:08:7d:f6:5d:ea: 9c:00:91:ff:2e:b4:61:50:48:dc:52:4b:50:68:a9:27:5c:32: b2:73:8c:df:28:9b:d0:c8:e2:c9:2a:8e:25:db:1a:e3:35:e8: 37:21:9e:0b:e7:cd:0d:50:c1:62:59:ed:bb:4b:0e:28:c8:3d: 57:9a:fa:a5:c6:2e:9b:01:eb:89:06:52:0e:69:74:49:39:d6: fb:1b:41:b4:fc:93:e2:1b:b1:67:b8:cf:75:c9:07:2c:37:95: cd:4b:05:87:ab:32:75:89:1c:e7:da:a5:0f:16:b2:b1:20:88: e1:0d:82:57:80:dc:ed:e3:bb:0a:8e:4f:71:7f:06:0e:da:cd: a5:87:c3:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjUwODIwMTg0OTE5WhcNMjUwODI3MTg0OTE5WjAYMRYwFAYD VQQDEw02OGE2MThhZi1lYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNRFe0RTa1j8xuQUXS+8RRzHU+bagqDurjGjTHj51T9AYTvGYhTm0G1oZ4b1 Hekh/mg6H+Gu14ppR6m1YvLdCRZonebD75/Ci2vftePop9tkmX6pC21+98CsKnuS ZzaOKJKkJvnnDq2SQJf5HTVsQD0CGcj8be7ZwdOQ5muy75oDpxRmgqfFCq+pX6Lw G04HGmYbn5s7Otr7k2NnW7zDusKC9NzzCuvJ+1g39xhUn2m3ohiytIS3DzFDclID uIKMcBnhKWysT3SUdzLSMwtn3WFU9wXMlab1Fj3ayCtIEfVgz4YGD86zxbMdcY7T 22jyNnRXvlExc3/j3cKPG6CYIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbU626U XIiZlhnFtsuWqU0bmDVMMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pK dlhUVDI0MzRpSHN5amxlSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKurGeejb1Kk13jiIqnPB+/9qVfKpFH6KRglpyA/rIIbXXjFbBxuV3 E4909M1kLPs1zBW4uz+cICJMiRxOQVIpKJMGLq7H0f63H7BQQMfzPzt1gTAwh3t1 /8XX5HUCvyt86pJwe94ZuCWVsAcwkHNtmt9CBnf0akkECH32XeqcAJH/LrRhUEjc UktQaKknXDKyc4zfKJvQyOLJKo4l2xrjNeg3IZ4L580NUMFiWe27Sw4oyD1Xmvql xi6bAeuJBlIOaXRJOdb7G0G0/JPiG7FnuM91yQcsN5XNSwWHqzJ1iRzn2qUPFrKx IIjhDYJXgNzt47sKjk9xfwYO2s2lh8PJ -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:07 2025 by rpki-client