$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: /Br86YRLzSOfRwkGTso1Gn//ZMNrCsYCPQl7yZoPb9g= Subject key identifier: B7:24:61:C9:28:41:D9:E8:49:27:1E:17:19:47:D7:8E:C8:2A:3C:B3 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 10 Signing time: Tue 19 Aug 2025 08:36:56 +0000 Manifest this update: Tue 19 Aug 2025 08:36:56 +0000 Manifest next update: Tue 26 Aug 2025 08:36:56 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: S4J2BrkXffg7xeFCLax9OR0cXhvIV3TjSKsuCbNrzTU=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Aug 19 08:36:56 2025 GMT Not After : Aug 26 08:36:56 2025 GMT Subject: CN=68a437a8-ea61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:a9:a7:bb:69:51:51:3e:93:fd:b1:a2:0a: 6b:55:1d:0d:2f:ec:d3:c2:6d:f1:04:57:1e:74:67: 7f:90:d8:00:27:ee:d2:e1:da:6d:fc:62:69:b2:57: be:49:d8:f3:f7:e8:63:d1:29:91:ad:b1:bd:cb:3e: e3:6b:f0:12:d3:5b:c5:97:fe:e8:62:f3:8a:22:62: e3:67:40:d0:00:5a:92:c8:02:14:39:98:84:73:3d: 33:be:53:12:fb:71:21:07:e5:a4:65:8e:7a:80:96: 9b:68:ee:07:09:f8:fe:32:84:68:8a:40:90:82:e7: cc:72:d1:4b:b0:49:ea:e9:d1:93:2b:80:37:29:bb: bd:ef:70:ac:2f:a9:0f:27:b8:91:67:97:29:a0:01: 7e:4f:16:85:43:81:c7:bb:5e:16:57:37:0d:10:49: 0b:b3:21:97:42:a2:db:2b:4b:29:39:ee:a7:86:08: 51:30:a0:77:4a:88:15:0e:4f:53:ed:e1:45:e6:d3: bf:2b:6b:07:07:8b:e5:3d:00:cb:f8:78:e5:76:fe: 61:da:50:fb:cc:c6:75:5a:12:63:1a:8f:5f:7d:5a: fd:af:2a:fe:fe:02:03:f5:de:dd:9d:3f:2f:d3:5f: 41:26:39:60:2c:f2:83:73:53:cc:87:bb:ba:fa:ea: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:24:61:C9:28:41:D9:E8:49:27:1E:17:19:47:D7:8E:C8:2A:3C:B3 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9d:c3:11:45:57:f7:d6:70:83:6b:d2:29:09:36:34:ff:8b: f3:bc:aa:f6:f2:b3:6d:8d:57:1d:e5:3b:9b:fc:27:3c:49:18: 33:9f:0f:b0:28:bd:a3:24:5b:9c:11:77:d0:99:cd:b6:83:fc: d5:64:e1:1e:23:83:3e:4e:e2:cc:5a:58:dc:7b:da:b0:7b:9e: c7:b3:7d:9d:9e:e8:aa:6b:77:3d:63:9a:15:c6:d4:17:cc:61: e8:e7:91:84:52:97:b9:9e:c1:8f:07:c0:06:d2:c4:c7:38:81: 16:27:ca:d9:e7:84:5e:a8:1d:01:26:95:b3:34:b6:d3:27:04: 2a:23:9f:42:37:fd:d6:41:ae:0b:25:73:bd:fb:19:c8:3c:74: e9:67:13:bf:16:f8:2a:8e:8f:58:5b:9d:8a:99:48:d1:39:ea: 99:38:a6:a5:ed:d1:f3:c9:bf:56:01:92:0b:f4:96:38:cb:c3: 6b:f1:58:b7:a5:f7:83:3d:de:f0:e8:05:cb:c9:66:81:d4:7e: c2:9f:20:8d:f1:27:8c:d7:8c:59:d0:47:c3:dd:3d:c4:5d:a3: 1e:1c:0a:6f:3e:07:aa:4b:49:32:cc:a8:09:a6:62:d3:2c:9f: 3b:ef:68:2b:bb:6f:82:92:7d:14:e7:2a:43:31:c1:db:ad:4d: cb:cc:db:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTA4MTkwODM2NTZaFw0yNTA4MjYwODM2NTZaMBgxFjAUBgNV BAMTDTY4YTQzN2E4LWVhNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Fqmnu2lRUT6T/bGiCmtVHQ0v7NPCbfEEVx50Z3+Q2AAn7tLh2m38YmmyV75J 2PP36GPRKZGtsb3LPuNr8BLTW8WX/uhi84oiYuNnQNAAWpLIAhQ5mIRzPTO+UxL7 cSEH5aRljnqAlpto7gcJ+P4yhGiKQJCC58xy0UuwSerp0ZMrgDcpu73vcKwvqQ8n uJFnlymgAX5PFoVDgce7XhZXNw0QSQuzIZdCotsrSyk57qeGCFEwoHdKiBUOT1Pt 4UXm078rawcHi+U9AMv4eOV2/mHaUPvMxnVaEmMaj199Wv2vKv7+AgP13t2dPy/T X0EmOWAs8oNzU8yHu7r66lCpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtyRhyShB 2ehJJx4XGUfXjsgqPLMwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALCdwxFFV/fWcINr0ikJNjT/i/O8qvbys22NVx3lO5v8JzxJGDOfD7Ao vaMkW5wRd9CZzbaD/NVk4R4jgz5O4sxaWNx72rB7nsezfZ2e6Kprdz1jmhXG1BfM YejnkYRSl7mewY8HwAbSxMc4gRYnytnnhF6oHQEmlbM0ttMnBCojn0I3/dZBrgsl c737Gcg8dOlnE78W+CqOj1hbnYqZSNE56pk4pqXt0fPJv1YBkgv0ljjLw2vxWLel 94M93vDoBcvJZoHUfsKfII3xJ4zXjFnQR8PdPcRdox4cCm8+B6pLSTLMqAmmYtMs nzvvaCu7b4KSfRTnKkMxwdutTcvM25c= -----END CERTIFICATE-----Generated at Thu Aug 21 07:00:31 2025 by rpki-client