$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: sw8aNBsDGQfu171y/dI16ZWrioObHD/FjMm4hwgpvBE= Subject key identifier: 42:E0:C8:8E:02:7C:6D:70:B6:3D:E1:FD:EB:6A:E4:FF:92:8C:6D:E7 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0C17 Signing time: Mon 18 Aug 2025 19:00:52 +0000 Manifest this update: Mon 18 Aug 2025 19:00:52 +0000 Manifest next update: Mon 25 Aug 2025 19:00:52 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: l9rxZKty0wDjM6JO2dzY7PinFIpgq8liv86hhm4omtQ=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Aug 18 19:00:52 2025 GMT Not After : Aug 25 19:00:52 2025 GMT Subject: CN=68a37864-4b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:b4:08:02:e6:7e:5a:89:72:6b:4f:cb:bd: 56:5b:97:2d:a9:de:17:87:1b:dc:5e:ce:47:29:16: 51:fd:a1:fd:ee:54:f6:cf:bb:e0:be:14:a0:f5:2f: bb:91:0c:16:53:53:c1:47:e0:37:10:df:83:97:2d: bc:7f:f0:b1:81:d9:e7:51:14:c0:ef:5a:22:4d:16: 27:2b:92:be:ea:30:c0:33:97:e6:19:ae:2e:61:31: f1:ba:0e:af:ac:4e:ae:f6:d2:a7:43:72:b8:8f:df: 60:45:04:7d:05:8f:1e:3d:1e:83:3a:21:7c:fd:9f: 98:c8:be:7e:3e:4f:72:da:8e:d6:ee:0b:3e:c8:01: 87:fb:df:8f:a0:a3:be:61:e8:37:74:96:9d:f5:37: 15:a8:df:c3:0a:30:3f:64:19:1d:ed:f2:3a:e8:ff: f7:32:54:16:e6:2a:9b:c3:4b:fd:c6:61:bf:7c:1d: fd:24:98:25:a0:ef:f7:40:ae:f8:59:a0:4e:ba:f2: 8b:bf:ef:7a:55:35:64:0a:ba:d1:75:fd:8e:c7:49: 31:ef:a4:4a:aa:01:54:35:3e:dd:11:d7:e9:c0:25: a1:41:ff:40:a3:d6:2b:c0:20:8b:71:5d:39:6b:2a: c0:e2:5b:ee:d0:e0:aa:0e:bb:fe:3e:1d:b9:60:9d: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:C8:8E:02:7C:6D:70:B6:3D:E1:FD:EB:6A:E4:FF:92:8C:6D:E7 X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b8:5c:92:9b:29:13:08:e9:08:e9:f0:a8:a1:fb:3a:16:45: 8e:08:da:33:ab:f3:ad:e4:bd:82:3c:f2:ef:41:a6:19:15:48: 86:0b:a6:ab:cd:da:30:05:f9:00:df:9b:b3:2d:26:51:fd:a9: da:bc:92:3d:06:10:4b:06:fd:12:f0:96:14:95:2e:29:2e:a0: 46:cd:99:a3:f1:db:01:2f:96:0f:98:3d:95:7c:9f:18:6f:92: 2e:cc:0c:76:8c:47:28:98:97:49:7b:f7:f1:27:37:27:58:b3: 5b:76:62:cb:12:0a:21:22:72:60:6e:d9:d4:9b:de:cc:f3:90: 5a:e4:88:3c:c8:44:25:7a:13:88:4a:3c:c5:7d:0f:c4:de:84: 8c:c9:9a:05:02:57:97:2a:62:0d:94:70:d2:51:0d:ca:3d:c2: 34:33:ca:7a:d6:63:73:a0:a4:7f:6d:e0:80:4f:3f:a4:14:ed: 0a:a4:46:e8:27:41:59:2c:da:ce:69:e9:2d:5f:3e:e2:62:1d: 07:dd:dc:78:97:fe:bb:08:e7:fb:f1:11:3f:fa:61:e9:f0:47: fc:05:dd:97:ae:39:cd:94:f9:09:4c:64:7c:d1:3b:79:e3:32: f4:ec:39:4a:44:9d:72:26:2f:22:82:f7:e2:bc:46:6a:5c:23: cd:eb:9b:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjUwODE4MTkwMDUyWhcNMjUwODI1MTkwMDUyWjAYMRYwFAYD VQQDEw02OGEzNzg2NC00YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9m0CALmflqJcmtPy71WW5ctqd4XhxvcXs5HKRZR/aH97lT2z7vgvhSg9S+7 kQwWU1PBR+A3EN+Dly28f/CxgdnnURTA71oiTRYnK5K+6jDAM5fmGa4uYTHxug6v rE6u9tKnQ3K4j99gRQR9BY8ePR6DOiF8/Z+YyL5+Pk9y2o7W7gs+yAGH+9+PoKO+ Yeg3dJad9TcVqN/DCjA/ZBkd7fI66P/3MlQW5iqbw0v9xmG/fB39JJgloO/3QK74 WaBOuvKLv+96VTVkCrrRdf2Ox0kx76RKqgFUNT7dEdfpwCWhQf9Ao9YrwCCLcV05 ayrA4lvu0OCqDrv+Ph25YJ3nnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELgyI4C fG1wtj3h/etq5P+SjG3nMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6uFySmykTCOkI6fCoofs6FkWOCNozq/Ot5L2CPPLvQaYZFUiGC6ar zdowBfkA35uzLSZR/anavJI9BhBLBv0S8JYUlS4pLqBGzZmj8dsBL5YPmD2VfJ8Y b5IuzAx2jEcomJdJe/fxJzcnWLNbdmLLEgohInJgbtnUm97M85Ba5Ig8yEQlehOI SjzFfQ/E3oSMyZoFAleXKmINlHDSUQ3KPcI0M8p61mNzoKR/beCATz+kFO0KpEbo J0FZLNrOaektXz7iYh0H3dx4l/67COf78RE/+mHp8Ef8Bd2XrjnNlPkJTGR80Tt5 4zL07DlKRJ1yJi8igvfivEZqXCPN65tG -----END CERTIFICATE-----Generated at Wed Aug 20 17:18:08 2025 by rpki-client