$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: krTqMmZg9W9605oqT2WkC4+moAQGEF/J9itOkKCteYM= Subject key identifier: 81:8B:A9:A9:65:8F:0C:85:18:B6:14:68:FB:8F:CB:F9:93:D0:62:DC Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 0331 Signing time: Fri 05 Sep 2025 01:06:38 +0000 Manifest this update: Fri 05 Sep 2025 01:06:38 +0000 Manifest next update: Fri 12 Sep 2025 01:06:37 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: HdjVAzxIJfHHmr9MPvlLjO1HqjORhmbscEwX/NTFzpE=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: Sep 5 01:06:38 2025 GMT Not After : Sep 12 01:06:37 2025 GMT Subject: CN=68ba379e-e32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:1d:ff:63:36:13:b0:fc:10:f4:b3:e6:55: 0a:de:2d:15:b2:da:5e:ad:c5:73:e8:31:60:90:51: 49:3d:73:f2:06:ed:85:9e:95:08:e3:46:12:64:b1: d5:e6:c7:1a:c4:e2:f4:b4:66:92:4c:4c:55:42:15: 16:6f:df:32:e5:af:8d:d9:a7:a9:b4:7e:66:c7:21: 6c:0e:9b:7f:6d:b8:c0:48:3f:c2:18:a8:37:c2:f1: 11:a2:d7:16:f5:1c:0c:15:3a:0c:40:af:0e:cc:f1: 33:26:7f:2b:1e:c7:6f:72:8d:db:33:3f:ed:dd:52: e5:68:af:1e:0b:ed:ae:a3:1c:96:d1:97:ec:f3:cc: 14:c7:db:38:0f:f2:b6:a9:99:69:8b:78:09:f8:5a: f3:77:b1:d0:4d:1c:7f:14:7e:ba:cf:26:e7:34:c8: e8:f8:2a:55:3f:5e:b3:3e:fb:a3:5e:1b:2c:b2:7d: 8e:e5:cf:d9:e0:03:8e:3a:fa:0f:8b:e4:be:58:c9: ac:b4:5d:13:de:e1:d9:79:ca:c6:ad:63:49:29:2e: ed:8f:2a:7a:53:bc:94:b4:12:dd:94:35:46:83:03: 09:04:36:22:2b:8f:f2:88:45:58:75:a7:f3:e1:1f: fc:f8:b1:90:57:b7:40:a0:71:bc:7d:92:62:34:66: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8B:A9:A9:65:8F:0C:85:18:B6:14:68:FB:8F:CB:F9:93:D0:62:DC X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:69:73:2a:ae:74:83:7f:35:37:be:65:e3:93:82:bf:5c:70: c4:6f:e7:e6:ed:a9:f2:31:3f:1c:d6:97:8f:d8:05:e9:f8:8f: 7f:b9:97:74:80:cf:f0:83:d2:39:66:10:1a:7e:f9:ef:fc:f4: 76:ec:08:0a:86:86:5d:15:4f:3f:9f:25:5b:9f:d9:93:a1:de: 79:1d:87:8f:8d:31:4b:e2:9d:1b:de:2d:fa:cd:b9:c0:67:f8: 40:43:86:d8:fb:ae:9b:bd:3f:a8:ae:20:ca:e0:9e:30:41:62: 63:bf:17:9e:6c:32:15:06:b6:93:21:91:f7:ae:2a:05:8c:45: c3:38:77:22:f4:06:69:26:11:e0:85:d3:78:64:6d:ed:78:54: ec:36:1e:c7:e0:7e:bc:e7:5e:1d:fe:ee:36:d9:a0:98:04:46: 75:b1:88:b4:55:eb:f7:2a:a9:b0:6e:d8:c7:5a:21:ee:a0:ef: 37:9e:d7:d7:ee:1e:d1:cd:c7:eb:ec:84:b9:fe:3c:b7:31:ec: 09:6a:52:51:a5:7e:1e:ee:bc:d7:bc:60:de:4b:0c:7e:c0:09: f5:ef:87:d0:18:b9:9c:d9:19:49:f1:a6:b1:61:12:f2:cb:e3: 46:b0:17:9a:af:37:59:36:66:ac:30:d4:c9:45:72:29:6c:c9: 97:3c:4c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjUwOTA1MDEwNjM4WhcNMjUwOTEyMDEwNjM3WjAYMRYwFAYD VQQDEw02OGJhMzc5ZS1lMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphsd/2M2E7D8EPSz5lUK3i0VstpercVz6DFgkFFJPXPyBu2FnpUI40YSZLHV 5scaxOL0tGaSTExVQhUWb98y5a+N2aeptH5mxyFsDpt/bbjASD/CGKg3wvERotcW 9RwMFToMQK8OzPEzJn8rHsdvco3bMz/t3VLlaK8eC+2uoxyW0Zfs88wUx9s4D/K2 qZlpi3gJ+Frzd7HQTRx/FH66zybnNMjo+CpVP16zPvujXhsssn2O5c/Z4AOOOvoP i+S+WMmstF0T3uHZecrGrWNJKS7tjyp6U7yUtBLdlDVGgwMJBDYiK4/yiEVYdafz 4R/8+LGQV7dAoHG8fZJiNGYLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGLqall jwyFGLYUaPuPy/mT0GLcMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6aXMqrnSDfzU3vmXjk4K/XHDEb+fm7anyMT8c1peP2AXp+I9/uZd0 gM/wg9I5ZhAafvnv/PR27AgKhoZdFU8/nyVbn9mTod55HYePjTFL4p0b3i36zbnA Z/hAQ4bY+66bvT+oriDK4J4wQWJjvxeebDIVBraTIZH3rioFjEXDOHci9AZpJhHg hdN4ZG3teFTsNh7H4H68514d/u422aCYBEZ1sYi0Vev3KqmwbtjHWiHuoO83ntfX 7h7Rzcfr7IS5/jy3MewJalJRpX4e7rzXvGDeSwx+wAn174fQGLmc2RlJ8aaxYRLy y+NGsBearzdZNmasMNTJRXIpbMmXPExF -----END CERTIFICATE-----Generated at Sat Sep 6 06:01:48 2025 by rpki-client