$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: c03pdDsMXClMIpMaeqJCkumFaxZ+BloDhGIMiS3rzEs= Subject key identifier: 02:67:CC:72:8F:F7:4B:4A:AB:98:5D:38:BF:E5:5F:51:10:10:FE:5F Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0DD6 Signing time: Wed 20 Aug 2025 17:58:26 +0000 Manifest this update: Wed 20 Aug 2025 17:58:25 +0000 Manifest next update: Wed 27 Aug 2025 17:58:25 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: gMNLHfw028N/OaH5SAxxNe8Hwhi1gUP1hAvbahwTCi8=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: P63HmzuTgX6+OxmcbQTN/m0eCDcj1q5olNwP8Hf8SvI=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: jkm23RvGSquZwL1DUARD3YaIj647wpqnNA3CvWP1hl8=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Aug 20 17:58:25 2025 GMT Not After : Aug 27 17:58:25 2025 GMT Subject: CN=68a60cc1-780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:1d:7d:75:76:06:13:ef:df:2e:55:89:30: 3a:22:b4:3a:0e:3b:7e:46:c6:ba:04:a8:4b:34:b2: 38:56:be:fc:90:54:94:e5:92:99:b6:be:d7:1c:cb: 3d:4b:8b:f3:8b:3b:c4:2e:6d:b2:22:49:af:a0:4d: 48:2b:d2:59:23:36:57:46:73:ee:1d:2b:c8:b0:34: ba:bb:11:5b:31:69:75:cb:f0:0a:7e:04:4e:6e:7e: 0e:95:42:b7:92:c9:4a:d6:04:1f:d0:55:4c:64:e3: ff:05:d1:2c:31:0e:c6:ca:a2:f3:c1:9a:bd:00:d4: c1:28:7b:28:45:ce:88:dc:14:d5:f4:ee:e9:a3:6a: 9e:1b:25:c3:d6:d2:3d:da:72:25:51:c5:30:82:31: 0b:19:6e:29:23:69:17:bb:bc:82:fd:ce:54:b8:ee: c9:20:31:72:af:4f:c5:ef:fe:b4:04:81:cc:29:05: 13:4c:3c:1d:9a:b0:96:c3:8f:35:2c:6c:60:e4:c9: f7:d6:51:be:5e:a8:1e:d6:7c:7b:5c:ba:2a:91:59: 9b:4d:4d:3b:ea:4d:47:e8:e2:44:30:b1:e7:7a:bd: 1a:01:8c:b3:02:96:54:5e:e3:53:00:40:2b:75:e2: 7a:74:1b:de:5d:51:80:f8:9b:53:8e:b1:9a:6a:ba: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:67:CC:72:8F:F7:4B:4A:AB:98:5D:38:BF:E5:5F:51:10:10:FE:5F X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:96:d8:16:f0:a1:c7:6f:57:73:ca:34:0b:88:dc:82:3c: 8e:22:65:ed:7c:5c:5f:c4:85:f9:b4:34:c2:46:dd:b8:52:6a: 5d:a3:dc:aa:cc:2a:a6:64:ae:4c:c3:54:53:da:9b:b5:93:fd: a9:75:8b:3b:84:80:ca:0c:89:3d:e5:3b:7c:f2:0f:9e:a1:5a: 09:da:52:6e:0e:8f:04:ff:cc:94:0f:2c:fd:2f:a4:0d:e1:81: 69:e0:fc:ba:f5:55:73:00:0a:80:55:50:ac:d0:e5:66:d6:12: 09:30:24:c9:5f:60:c8:db:62:31:6f:d5:bc:c3:9a:54:d9:66: 38:3c:49:1e:e3:16:3b:8d:13:37:da:8b:49:24:37:ad:83:ea: 28:a0:00:a2:18:07:00:7d:9a:4e:46:17:30:5b:96:93:71:85: 59:94:dc:b3:a5:c8:25:6c:2b:04:cb:98:86:35:91:7f:9e:cd: 46:5b:d8:80:33:d5:64:0f:57:a6:15:c6:0b:5b:f3:30:d3:d4: b7:6f:20:2b:8f:0c:20:64:0a:8d:8f:f1:09:7c:39:be:9b:1e: 3d:20:56:48:c3:54:a8:a9:cf:52:2e:09:f0:69:bb:0e:60:51: 3f:37:bd:36:86:d3:b6:cf:ac:9e:a4:20:3e:b4:b7:ff:75:86: 9f:e0:12:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjUwODIwMTc1ODI1WhcNMjUwODI3MTc1ODI1WjAYMRYwFAYD VQQDEw02OGE2MGNjMS03ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfodfXV2BhPv3y5ViTA6IrQ6Djt+Rsa6BKhLNLI4Vr78kFSU5ZKZtr7XHMs9 S4vzizvELm2yIkmvoE1IK9JZIzZXRnPuHSvIsDS6uxFbMWl1y/AKfgRObn4OlUK3 kslK1gQf0FVMZOP/BdEsMQ7GyqLzwZq9ANTBKHsoRc6I3BTV9O7po2qeGyXD1tI9 2nIlUcUwgjELGW4pI2kXu7yC/c5UuO7JIDFyr0/F7/60BIHMKQUTTDwdmrCWw481 LGxg5Mn31lG+Xqge1nx7XLoqkVmbTU076k1H6OJEMLHner0aAYyzApZUXuNTAEAr deJ6dBveXVGA+JtTjrGaarqmXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJnzHKP 90tKq5hdOL/lX1EQEP5fMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKDpbYFvChx29Xc8o0C4jcgjyOImXtfFxfxIX5tDTCRt24Umpdo9yq zCqmZK5Mw1RT2pu1k/2pdYs7hIDKDIk95Tt88g+eoVoJ2lJuDo8E/8yUDyz9L6QN 4YFp4Py69VVzAAqAVVCs0OVm1hIJMCTJX2DI22Ixb9W8w5pU2WY4PEke4xY7jRM3 2otJJDetg+oooACiGAcAfZpORhcwW5aTcYVZlNyzpcglbCsEy5iGNZF/ns1GW9iA M9VkD1emFcYLW/Mw09S3byArjwwgZAqNj/EJfDm+mx49IFZIw1Soqc9SLgnwabsO YFE/N702htO2z6yepCA+tLf/dYaf4BLz -----END CERTIFICATE-----Generated at Thu Aug 21 20:43:28 2025 by rpki-client