$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: DMMy36uYpU4KXzB7CITDwI13DPFvnAG5B85UyoY6vjs= Subject key identifier: CE:B4:AB:2A:29:5B:27:97:6C:34:AD:23:1E:8E:E0:17:59:AC:7C:44 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01C4 Signing time: Thu 21 Aug 2025 03:05:04 +0000 Manifest this update: Thu 21 Aug 2025 03:05:04 +0000 Manifest next update: Thu 28 Aug 2025 03:05:04 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: THMQrsfx8sCn6SGnBt7Xy7qZfzbY+RXQaYrF9sOu6Lo=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Aug 21 03:05:04 2025 GMT Not After : Aug 28 03:05:04 2025 GMT Subject: CN=68a68ce0-1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:72:44:48:34:f5:a5:9f:ce:be:81:03:a8: 99:dd:06:e8:23:57:82:c3:19:b5:f2:ab:c2:18:3a: 8c:f7:66:f9:6f:f0:b8:26:3a:b6:16:3b:9d:54:8a: 10:19:6f:03:f6:04:7e:2c:7a:38:6b:b2:b6:d9:4f: cd:f1:5e:9f:c1:a1:d3:50:b6:1e:cc:f8:6b:98:32: dc:ed:ba:ef:a6:e9:c4:ba:b1:15:d0:5e:6a:7c:9f: 82:18:d3:43:f0:fe:8a:64:b2:df:26:10:c3:05:4d: 45:de:8d:4f:3a:4c:85:dc:e7:59:b3:e0:c2:7f:30: 67:2a:68:7f:ae:8f:0a:7b:32:e5:34:85:ce:86:7d: 14:a0:ef:b3:20:d4:8e:19:0b:16:97:72:6c:d3:30: 50:c5:ea:d8:d1:16:6b:bb:e8:0c:57:90:c0:4d:84: a7:bf:4e:00:3c:c4:1b:12:83:84:18:a6:36:01:71: 9e:6a:6d:7b:51:38:cf:ba:f2:db:84:69:40:21:b7: 05:1d:05:f4:ca:ce:97:a2:ce:92:a1:7a:48:51:ab: 14:e5:46:38:45:f2:1e:a6:c8:2e:72:a8:ed:cf:38: f9:68:ea:2b:4b:22:5c:46:ba:82:1c:4f:7f:4d:5f: 87:86:1a:17:c9:65:cd:db:f0:56:20:9a:35:29:20: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B4:AB:2A:29:5B:27:97:6C:34:AD:23:1E:8E:E0:17:59:AC:7C:44 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:9c:62:70:e0:9c:a0:1b:09:c7:72:17:bf:80:28:6f:5a:40: 4b:0e:48:91:65:92:b0:6b:7b:8e:94:14:f2:df:1c:b9:8c:6f: a2:31:74:1e:03:be:7d:aa:a5:8f:30:6f:6a:d2:3e:fa:af:b6: da:1a:36:cb:1c:dc:6e:ec:ef:40:e7:81:25:4d:3d:d6:93:bd: 8c:87:32:8d:42:cb:d8:f2:27:af:24:d8:1a:06:17:1b:c7:7e: ee:01:27:5d:8d:10:19:a4:66:d4:dc:8e:04:f1:76:08:64:1d: 30:fb:2a:94:e0:d8:06:80:f6:fc:86:13:08:d6:2e:a7:ec:dc: e9:40:bf:62:f4:cd:7b:36:db:c6:78:02:d9:f6:a2:41:8e:2c: f4:9f:b2:29:51:19:a9:2c:8f:c8:03:97:81:ee:46:d0:fc:e0: e2:25:04:72:83:90:e3:82:2d:cb:4f:30:8c:3b:59:03:40:21: 93:26:9e:38:5a:75:e1:6b:93:13:81:d2:76:4c:81:20:bb:f1: 52:a3:72:20:4a:31:34:aa:48:75:fc:7e:c6:68:63:8d:98:57: bb:db:8e:71:4b:ad:16:ea:52:dd:f1:f2:8f:c0:91:72:be:b2: 65:19:19:2a:28:f9:53:32:f6:23:95:16:94:99:0e:42:1c:15: 85:77:42:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwODIxMDMwNTA0WhcNMjUwODI4MDMwNTA0WjAYMRYwFAYD VQQDEw02OGE2OGNlMC0xMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXNyREg09aWfzr6BA6iZ3QboI1eCwxm18qvCGDqM92b5b/C4Jjq2FjudVIoQ GW8D9gR+LHo4a7K22U/N8V6fwaHTULYezPhrmDLc7brvpunEurEV0F5qfJ+CGNND 8P6KZLLfJhDDBU1F3o1POkyF3OdZs+DCfzBnKmh/ro8KezLlNIXOhn0UoO+zINSO GQsWl3Js0zBQxerY0RZru+gMV5DATYSnv04APMQbEoOEGKY2AXGeam17UTjPuvLb hGlAIbcFHQX0ys6Xos6SoXpIUasU5UY4RfIepsgucqjtzzj5aOorSyJcRrqCHE9/ TV+HhhoXyWXN2/BWIJo1KSCCqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM60qyop WyeXbDStIx6O4BdZrHxEMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3nGJw4JygGwnHche/gChvWkBLDkiRZZKwa3uOlBTy3xy5jG+iMXQe A759qqWPMG9q0j76r7baGjbLHNxu7O9A54ElTT3Wk72MhzKNQsvY8ievJNgaBhcb x37uASddjRAZpGbU3I4E8XYIZB0w+yqU4NgGgPb8hhMI1i6n7NzpQL9i9M17NtvG eALZ9qJBjiz0n7IpURmpLI/IA5eB7kbQ/ODiJQRyg5Djgi3LTzCMO1kDQCGTJp44 WnXha5MTgdJ2TIEgu/FSo3IgSjE0qkh1/H7GaGONmFe7245xS60W6lLd8fKPwJFy vrJlGRkqKPlTMvYjlRaUmQ5CHBWFd0Kx -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:15 2025 by rpki-client