$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: IH3VlT33AGohjwIo5p/S6l/mepmX64UXafrOqqAo+RQ= Subject key identifier: A7:7F:07:8D:A8:D9:63:A6:60:8B:7E:CD:12:FA:C8:4D:0E:2D:C7:88 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 079C Signing time: Thu 18 Sep 2025 21:42:33 +0000 Manifest this update: Thu 18 Sep 2025 21:42:33 +0000 Manifest next update: Thu 25 Sep 2025 21:42:33 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: zRcapcB+cpR7w9PKgTnpE+I0PbCQjnCX3Sbae+wRz9M=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: whqCRWJqk83hft05CoOaP7VOGabxQLkV76nu+y1ufPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Sep 18 21:42:33 2025 GMT Not After : Sep 25 21:42:33 2025 GMT Subject: CN=68cc7cc9-9a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:cb:aa:bc:22:5b:99:b1:78:fa:74:9f:3e: 53:a9:ba:8b:05:69:e4:91:15:99:3f:85:00:dc:90: 68:a3:68:d7:4b:db:66:45:51:f2:a5:8a:2d:54:56: 88:97:d0:17:fb:5f:5f:db:d3:ab:01:f7:b4:5a:8e: 5a:c1:cc:b9:06:ca:46:7b:25:22:13:08:65:50:0b: 0c:7c:98:db:19:98:a8:ac:8c:2e:f5:20:bb:78:0b: f2:58:de:f3:a7:e4:96:b3:de:d4:5e:8c:ff:61:2e: 68:4d:f3:88:eb:17:a3:55:cf:62:85:2e:8c:8d:1f: 5f:c0:34:d8:f7:a7:b2:6b:2e:fe:6d:01:dd:ed:a1: c2:0a:74:44:b1:f9:a1:80:20:c6:09:09:94:ed:52: 2c:a1:52:36:cc:6d:2d:02:d5:54:f4:3c:14:0f:06: 55:96:a2:ce:1b:58:a1:2f:ed:21:fd:d6:48:d2:b9: 9a:48:30:09:fa:b4:61:85:06:31:d5:af:1e:90:dd: e1:18:d4:36:fc:44:84:80:00:84:30:3d:6b:e2:3d: 99:8d:d9:fa:8e:0e:2b:46:87:34:24:d7:96:1a:3e: 48:d1:02:62:1d:bd:8d:a9:e8:17:e5:df:cd:f7:71: 19:05:19:6a:99:8a:60:45:f1:71:ee:90:1f:97:02: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7F:07:8D:A8:D9:63:A6:60:8B:7E:CD:12:FA:C8:4D:0E:2D:C7:88 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ec:0e:82:9b:93:5b:9b:83:c4:ab:08:73:59:f0:c9:ce:e3: 36:eb:c4:66:54:3d:f9:51:b9:8a:53:ff:13:7d:45:4e:58:ed: 8e:ff:7f:99:cb:ff:fd:8e:52:b4:34:ed:a9:e9:67:c9:c8:48: cc:d0:1f:86:10:d8:35:07:5a:98:4a:e8:d3:4d:7b:22:68:90: e6:e7:66:4f:cd:7b:9a:b8:54:e5:29:e5:59:34:ed:54:72:8f: a7:8e:b9:ad:99:fc:e2:3b:2d:e3:d0:86:9e:ec:17:bd:b3:33: 3c:35:34:ae:24:5f:51:52:b6:04:68:8d:b0:d9:23:fe:d0:d9: a3:4d:ba:ee:52:f1:b6:27:2d:ce:6c:1d:92:f8:4f:be:ca:6b: 08:bc:c8:9e:2d:5e:14:97:ee:f8:f4:09:e6:54:cb:91:b2:c8: 54:0b:26:89:ba:75:fc:04:bb:a7:e1:5f:ec:8b:85:c9:65:46: 4e:77:fd:76:46:80:73:c8:5f:a1:5c:6f:55:ce:c3:15:62:ab: 65:8d:57:83:96:17:45:c7:c0:91:1b:eb:51:83:0e:d4:fc:93: 74:b1:ca:38:ee:6b:d4:b9:54:e7:7b:11:71:8c:28:16:f4:60: 42:36:c2:5e:8e:f6:b2:db:1a:96:4b:61:bf:a8:4a:52:09:67: cd:7c:95:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjUwOTE4MjE0MjMzWhcNMjUwOTI1MjE0MjMzWjAYMRYwFAYD VQQDEw02OGNjN2NjOS05YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAownLqrwiW5mxePp0nz5TqbqLBWnkkRWZP4UA3JBoo2jXS9tmRVHypYotVFaI l9AX+19f29OrAfe0Wo5awcy5BspGeyUiEwhlUAsMfJjbGZiorIwu9SC7eAvyWN7z p+SWs97UXoz/YS5oTfOI6xejVc9ihS6MjR9fwDTY96eyay7+bQHd7aHCCnREsfmh gCDGCQmU7VIsoVI2zG0tAtVU9DwUDwZVlqLOG1ihL+0h/dZI0rmaSDAJ+rRhhQYx 1a8ekN3hGNQ2/ESEgACEMD1r4j2Zjdn6jg4rRoc0JNeWGj5I0QJiHb2NqegX5d/N 93EZBRlqmYpgRfFx7pAflwLynwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd/B42o 2WOmYIt+zRL6yE0OLceIMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr7A6Cm5Nbm4PEqwhzWfDJzuM268RmVD35UbmKU/8TfUVOWO2O/3+Z y//9jlK0NO2p6WfJyEjM0B+GENg1B1qYSujTTXsiaJDm52ZPzXuauFTlKeVZNO1U co+njrmtmfziOy3j0Iae7Be9szM8NTSuJF9RUrYEaI2w2SP+0NmjTbruUvG2Jy3O bB2S+E++ymsIvMieLV4Ul+749AnmVMuRsshUCyaJunX8BLun4V/si4XJZUZOd/12 RoBzyF+hXG9VzsMVYqtljVeDlhdFx8CRG+tRgw7U/JN0sco47mvUuVTnexFxjCgW 9GBCNsJejvay2xqWS2G/qEpSCWfNfJUb -----END CERTIFICATE-----Generated at Sat Sep 20 02:08:24 2025 by rpki-client