$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: Q9uknM0xJbi+EZmjv9EZ7ylahSvJCQsYJ5d9sTCCGOo= Subject key identifier: D6:52:44:6F:94:2E:BB:47:62:DE:11:F8:BA:63:26:82:C1:17:4E:72 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 0123 Signing time: Sat 23 Aug 2025 04:51:35 +0000 Manifest this update: Sat 23 Aug 2025 04:51:34 +0000 Manifest next update: Sat 30 Aug 2025 04:51:34 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: 5wRQ7m3AKytVRe19Ftj44fBnCag/4yCoa1IN5O04l1Q=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Aug 23 04:51:34 2025 GMT Not After : Aug 30 04:51:34 2025 GMT Subject: CN=68a948d7-f35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:e9:88:95:fb:8a:91:e3:ab:a3:0f:77:88: a4:bf:72:1e:ea:f1:1a:ea:b8:d0:69:61:f5:54:a7: 79:f9:a7:0c:68:84:b3:67:6f:44:14:5f:d2:66:4b: 3a:04:79:d1:f8:26:37:70:b0:85:5a:b1:80:e9:68: cc:d5:83:1a:8e:c8:e7:ac:03:c8:51:d8:fe:21:45: 68:da:31:c6:85:a8:eb:7f:f7:78:2a:bb:82:6a:c6: 79:3c:97:f9:f5:06:93:55:a6:60:47:44:2b:a3:62: ff:7f:df:0a:7c:5f:32:69:44:71:b5:9d:35:60:14: 54:a1:04:61:ad:7b:33:a2:f5:d3:aa:20:3b:f4:d9: af:dc:0b:d3:c7:6c:8b:dc:4f:b9:2c:78:a2:82:71: a2:45:df:6f:ef:a7:d7:a4:54:3f:5b:8f:73:30:ff: e6:3b:0b:d3:02:f2:b1:0c:db:f6:6a:4e:a5:19:c5: f6:4e:40:f9:71:a8:f6:c3:b5:22:ab:45:15:68:c8: 5a:b4:fe:2b:c6:1e:1c:a0:75:c1:f7:6a:91:26:23: e6:b7:eb:e6:af:e2:cc:9b:53:d5:99:36:87:94:b5: 7f:6a:23:14:27:23:54:64:a4:06:87:1c:da:61:83: 92:1c:81:39:42:79:8c:76:c8:30:2b:98:d3:a0:64: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:52:44:6F:94:2E:BB:47:62:DE:11:F8:BA:63:26:82:C1:17:4E:72 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:92:b9:e0:dd:56:4b:8b:04:63:bf:fd:78:36:b0:5d:20:42: 5b:02:60:10:1a:ca:17:2a:62:ad:fe:d2:76:f9:09:72:93:ee: 32:bf:f0:90:64:96:64:9d:ee:09:e7:d2:74:aa:04:52:bf:27: 92:20:74:d9:04:9a:2e:cc:d9:4d:ea:18:e0:4b:7e:8f:fc:76: b2:27:72:5d:db:eb:38:1d:3f:bb:69:aa:97:74:e5:c6:f9:ca: 48:03:39:b7:db:39:ba:fc:b3:54:a4:77:04:ac:73:31:01:59: 34:35:24:7a:e4:ac:4e:18:13:7e:87:ac:4a:5b:82:2b:a6:95: fb:85:6e:d0:40:90:b8:71:88:17:91:ed:9a:8a:dc:cf:63:dc: 34:25:19:d6:ff:23:72:2a:3f:10:8e:03:33:ec:95:e8:ca:6c: 1f:88:51:b0:55:6b:db:e3:47:39:f5:8d:83:68:e1:54:7c:e1: 28:e5:8c:ee:ce:0f:02:6d:91:77:1c:fd:c2:00:e5:8e:cf:e4: 8b:14:fb:fa:41:13:49:db:2c:0b:86:fd:0c:d8:06:d5:d3:21: a9:d1:97:8d:ca:51:8f:a1:43:16:8f:7e:e6:2b:dd:bc:88:f7: e6:ce:af:b6:c1:fd:fb:06:80:ad:52:a3:3b:e2:17:99:72:a1: ad:97:ce:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwODIzMDQ1MTM0WhcNMjUwODMwMDQ1MTM0WjAYMRYwFAYD VQQDEw02OGE5NDhkNy1mMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10rpiJX7ipHjq6MPd4ikv3Ie6vEa6rjQaWH1VKd5+acMaISzZ29EFF/SZks6 BHnR+CY3cLCFWrGA6WjM1YMajsjnrAPIUdj+IUVo2jHGhajrf/d4KruCasZ5PJf5 9QaTVaZgR0Qro2L/f98KfF8yaURxtZ01YBRUoQRhrXszovXTqiA79Nmv3AvTx2yL 3E+5LHiignGiRd9v76fXpFQ/W49zMP/mOwvTAvKxDNv2ak6lGcX2TkD5caj2w7Ui q0UVaMhatP4rxh4coHXB92qRJiPmt+vmr+LMm1PVmTaHlLV/aiMUJyNUZKQGhxza YYOSHIE5QnmMdsgwK5jToGTqzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZSRG+U LrtHYt4R+LpjJoLBF05yMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVkrng3VZLiwRjv/14NrBdIEJbAmAQGsoXKmKt/tJ2+Qlyk+4yv/CQ ZJZkne4J59J0qgRSvyeSIHTZBJouzNlN6hjgS36P/HayJ3Jd2+s4HT+7aaqXdOXG +cpIAzm32zm6/LNUpHcErHMxAVk0NSR65KxOGBN+h6xKW4IrppX7hW7QQJC4cYgX ke2aitzPY9w0JRnW/yNyKj8QjgMz7JXoymwfiFGwVWvb40c59Y2DaOFUfOEo5Yzu zg8CbZF3HP3CAOWOz+SLFPv6QRNJ2ywLhv0M2AbV0yGp0ZeNylGPoUMWj37mK928 iPfmzq+2wf37BoCtUqM74heZcqGtl842 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:37 2025 by rpki-client