$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: tFVE+IrgvFeGz4y5xJ/zDI7uBJ3Hj0Jc8a3IcJAMbvI= Subject key identifier: 11:25:24:BD:A9:08:C6:7F:3A:FA:78:8F:CA:83:C2:7A:DA:18:95:BA Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 30AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 3098 Signing time: Mon 18 Aug 2025 15:34:07 +0000 Manifest this update: Mon 18 Aug 2025 15:34:06 +0000 Manifest next update: Mon 25 Aug 2025 15:34:06 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: Slncm1TfNrs+WoImXOmMzktRQ7o1AfXpkzt/houkVBM=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12458 (0x30aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Aug 18 15:34:06 2025 GMT Not After : Aug 25 15:34:06 2025 GMT Subject: CN=68a347ef-7873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:36:86:7f:20:82:2d:4b:4a:3a:e4:2c:d3: 98:42:2b:4c:ea:17:1b:c1:bc:c0:9f:a3:94:63:40: f7:92:b8:b9:09:73:eb:61:d8:a9:e5:4d:e9:f8:61: 34:d9:1c:d1:02:8b:a3:68:a9:cc:29:10:22:13:c8: 72:94:8d:80:ca:22:b8:3b:ac:5d:56:84:2f:4b:92: 2e:d1:6b:78:88:43:df:39:70:d0:b8:01:0b:24:04: 5e:d7:90:ea:e4:dc:97:d7:f0:54:36:e1:46:41:38: c3:04:12:1f:fd:90:2c:5c:13:42:28:9b:0d:29:96: d3:c5:11:db:0b:b2:e1:07:fe:3c:0e:3f:03:4b:64: d2:54:aa:84:a5:58:1c:8c:88:8f:7e:48:87:97:91: 11:82:da:0a:43:4d:0c:bd:0d:94:fd:54:42:a6:bd: 92:d3:04:aa:d1:17:78:0a:45:6e:72:cf:a0:4e:3a: 11:93:54:72:1a:43:ed:1e:f0:09:31:ad:98:73:a1: 36:60:b6:6d:40:85:fb:60:7a:7b:5f:f6:41:a2:70: 9a:10:b0:f0:c5:14:80:07:8f:37:77:b9:d2:f7:a1: ac:22:7e:4b:0c:b0:da:58:0e:cf:22:f2:6b:9c:5a: 25:a8:71:f5:2c:f5:bc:9a:42:14:8f:64:a2:60:24: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:25:24:BD:A9:08:C6:7F:3A:FA:78:8F:CA:83:C2:7A:DA:18:95:BA X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fa:df:6c:22:ae:29:66:6b:3a:e1:89:2b:e2:88:38:5b:32: 67:17:19:f7:eb:d7:50:07:05:74:c2:52:71:21:06:eb:a3:e1: ef:3f:4c:43:5a:d6:aa:f5:b9:98:68:e4:42:fb:59:5a:29:d0: ae:c1:57:54:08:e8:f1:a7:95:8f:27:a9:d0:79:e4:09:0d:42: 15:f2:04:ab:b8:04:45:25:cb:9a:f2:70:fd:60:75:c3:24:fe: 3b:6d:c2:91:dc:82:a0:83:b4:4b:84:cf:e4:31:8c:8f:c1:8a: 91:62:49:8c:7a:5c:85:59:32:3b:7e:4e:22:d5:32:b0:4e:31: 19:24:9c:24:af:be:8d:ba:3b:1b:ef:36:a9:2b:26:7c:b6:36: 61:2b:a6:7e:82:5f:a9:e3:b6:1e:27:c8:1d:a8:0f:03:23:97: 40:3f:ab:1d:1a:58:e1:78:93:5e:d2:33:69:4d:3f:bb:50:6e: cb:b2:8b:cc:5a:10:e0:05:64:41:8e:0e:cb:7a:01:3a:cf:c2: 1a:47:1a:43:69:b3:3b:a1:b1:a7:5c:eb:ad:20:30:db:76:e5: 6d:57:b2:62:ac:92:3a:4f:bf:46:1b:74:e5:11:d9:c3:2c:ac: 2e:64:61:9e:c7:4a:71:39:fe:43:09:95:20:ae:0e:c8:8b:86: 11:11:a3:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwODE4MTUzNDA2WhcNMjUwODI1MTUzNDA2WjAYMRYwFAYD VQQDEw02OGEzNDdlZi03ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOU2hn8ggi1LSjrkLNOYQitM6hcbwbzAn6OUY0D3kri5CXPrYdip5U3p+GE0 2RzRAoujaKnMKRAiE8hylI2AyiK4O6xdVoQvS5Iu0Wt4iEPfOXDQuAELJARe15Dq 5NyX1/BUNuFGQTjDBBIf/ZAsXBNCKJsNKZbTxRHbC7LhB/48Dj8DS2TSVKqEpVgc jIiPfkiHl5ERgtoKQ00MvQ2U/VRCpr2S0wSq0Rd4CkVucs+gTjoRk1RyGkPtHvAJ Ma2Yc6E2YLZtQIX7YHp7X/ZBonCaELDwxRSAB483d7nS96GsIn5LDLDaWA7PIvJr nFolqHH1LPW8mkIUj2SiYCQlmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBElJL2p CMZ/Ovp4j8qDwnraGJW6MB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6+t9sIq4pZms64Ykr4og4WzJnFxn369dQBwV0wlJxIQbro+HvP0xD Wtaq9bmYaORC+1laKdCuwVdUCOjxp5WPJ6nQeeQJDUIV8gSruARFJcua8nD9YHXD JP47bcKR3IKgg7RLhM/kMYyPwYqRYkmMelyFWTI7fk4i1TKwTjEZJJwkr76Nujsb 7zapKyZ8tjZhK6Z+gl+p47YeJ8gdqA8DI5dAP6sdGljheJNe0jNpTT+7UG7LsovM WhDgBWRBjg7LegE6z8IaRxpDabM7obGnXOutIDDbduVtV7JirJI6T79GG3TlEdnD LKwuZGGex0pxOf5DCZUgrg7Ii4YREaO5 -----END CERTIFICATE-----Generated at Wed Aug 20 15:39:00 2025 by rpki-client