$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json) Hash identifier: hHokNbwu19m3yYWnbEgDu6KUkZKIG4kjbn0NFP9cwaE= Subject key identifier: B2:B3:59:10:73:CF:D9:49:FE:4F:CA:BE:7C:3C:6B:68:4F:93:2A:47 Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft Manifest number: 38 Signing time: Sat 23 Aug 2025 07:48:58 +0000 Manifest this update: Sat 23 Aug 2025 07:48:57 +0000 Manifest next update: Sat 30 Aug 2025 07:48:57 +0000 Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: cHeMa/lWFc6jbYfKgvzEc0QbLKHuKfA3TltVd9TKis4=) 2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Validity Not Before: Aug 23 07:48:57 2025 GMT Not After : Aug 30 07:48:57 2025 GMT Subject: CN=68a9726a-c7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:7d:f5:61:a3:61:63:b1:05:20:87:b0:33: 1b:18:53:23:3d:46:c9:56:4e:b7:24:39:f1:12:ed: 16:3d:42:8d:f7:3a:ba:a4:c9:a2:b7:38:dd:f3:ea: cb:5d:b7:88:25:b9:e4:f2:94:53:76:48:65:5e:a7: 7b:f4:34:b6:e1:b7:bd:8c:a3:db:38:4b:57:8c:d4: 62:b7:ff:fa:1d:ad:8d:5c:08:d3:ab:d1:f1:35:8f: e6:c8:ff:b9:98:71:fc:bd:3d:05:c1:b5:e0:e6:72: e7:aa:c5:2a:89:8b:0f:cb:98:3b:3d:2b:35:83:1b: 26:d9:01:7a:68:2d:99:bb:09:ae:36:1a:9d:84:08: c7:ab:a9:34:56:f8:1d:01:59:51:57:3c:8e:f0:86: 8d:b6:fa:59:61:95:cb:98:cf:8e:8c:ed:4d:47:bc: f2:72:bf:21:cd:96:33:0d:cf:91:64:ef:f1:59:d7: 39:41:d2:cf:72:7b:aa:1b:db:b3:03:34:43:a2:c5: 2c:31:49:13:9d:2a:70:ba:6c:e9:ba:89:48:df:af: 2d:37:11:70:29:48:d0:ba:e9:3b:e3:9b:dc:d8:1d: a0:6e:a4:39:07:9d:5d:d9:13:29:99:ab:69:d6:a2: 1e:e0:54:c7:8d:44:8f:22:ce:ad:b9:07:25:6c:4f: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B3:59:10:73:CF:D9:49:FE:4F:CA:BE:7C:3C:6B:68:4F:93:2A:47 X509v3 Authority Key Identifier: keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:22:2a:07:22:f5:45:85:a2:14:56:1e:81:20:f5:ea:82:94: 1d:85:db:5b:af:de:bb:4a:03:8a:1e:cb:4c:2e:7e:82:cb:57: f9:f8:56:2f:41:ed:36:6e:53:c9:f4:e0:d4:b5:be:8b:45:f2: cc:63:5e:45:d6:e1:a3:5e:24:eb:ca:97:1e:d9:9e:40:fe:cb: e1:e5:1e:aa:f5:70:47:84:bd:e5:88:50:dc:e2:84:56:51:4c: 33:ea:d0:2a:3a:fc:d0:e1:d7:4f:26:d9:c9:0c:9f:a5:ef:5e: 9e:34:a3:a8:4e:26:7b:0f:c7:d5:2b:05:77:cc:4b:31:39:06: 50:e6:bb:81:5c:c2:98:86:c8:ad:9e:0c:94:fb:f6:35:ca:79: 97:59:a0:35:3b:9f:f7:12:fb:df:93:59:60:07:60:e2:f8:45: ea:58:97:c0:19:bf:bd:32:b7:c0:a4:4b:d2:28:8c:1c:20:bb: f7:8f:70:6d:4e:ce:8c:9c:03:6c:d1:ec:d6:29:dc:22:47:e2: 26:2b:e3:6e:7d:d5:88:d0:28:c0:9e:43:38:06:67:57:26:03: 7f:e7:19:a6:f5:51:c2:9c:78:53:38:1b:1e:6d:c2:c5:3e:8a: b2:e9:dc:bd:47:43:2d:ff:5d:a4:3d:60:e0:5f:48:d0:6f:f9: 12:54:13:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw Q0ExMEJGRjAeFw0yNTA4MjMwNzQ4NTdaFw0yNTA4MzAwNzQ4NTdaMBgxFjAUBgNV BAMTDTY4YTk3MjZhLWM3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6rX31YaNhY7EFIIewMxsYUyM9RslWTrckOfES7RY9Qo33OrqkyaK3ON3z6std t4glueTylFN2SGVep3v0NLbht72Mo9s4S1eM1GK3//odrY1cCNOr0fE1j+bI/7mY cfy9PQXBteDmcueqxSqJiw/LmDs9KzWDGybZAXpoLZm7Ca42Gp2ECMerqTRW+B0B WVFXPI7who22+llhlcuYz46M7U1HvPJyvyHNljMNz5Fk7/FZ1zlB0s9ye6ob27MD NEOixSwxSROdKnC6bOm6iUjfry03EXApSNC66Tvjm9zYHaBupDkHnV3ZEymZq2nW oh7gVMeNRI8izq25ByVsT0XtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsrNZEHPP 2Un+T8q+fDxraE+TKkcwHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKYiKgci9UWFohRWHoEg9eqClB2F21uv3rtKA4oey0wufoLLV/n4Vi9B 7TZuU8n04NS1votF8sxjXkXW4aNeJOvKlx7ZnkD+y+HlHqr1cEeEveWIUNzihFZR TDPq0Co6/NDh108m2ckMn6XvXp40o6hOJnsPx9UrBXfMSzE5BlDmu4FcwpiGyK2e DJT79jXKeZdZoDU7n/cS+9+TWWAHYOL4RepYl8AZv70yt8CkS9IojBwgu/ePcG1O zoycA2zR7NYp3CJH4iYr42591YjQKMCeQzgGZ1cmA3/nGab1UcKceFM4Gx5twsU+ irLp3L1HQy3/XaQ9YOBfSNBv+RJUE3I= -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:29 2025 by rpki-client