$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json) Hash identifier: LNaD3Kg4xkZu0DBZljBUYDrqlVRd+ZRp96Q2Cmx4Grg= Subject key identifier: 3C:8B:CB:77:B5:31:3F:47:4D:E7:93:A7:08:5B:DB:4A:34:1E:F8:1C Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 1211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft Manifest number: 11F4 Signing time: Mon 08 Sep 2025 17:11:49 +0000 Manifest this update: Mon 08 Sep 2025 17:11:49 +0000 Manifest next update: Mon 15 Sep 2025 17:11:49 +0000 Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: uU+CMqPK+Q/LVcmT3CkRs3pgxdmCcl2yVeJbUQ7wKd0=) 2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: Ty9yOHNci88PkYFwxtboHPq9mv7Uzp9+8kGt6vwUIGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4625 (0x1211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Sep 8 17:11:49 2025 GMT Not After : Sep 15 17:11:49 2025 GMT Subject: CN=68bf0e55-64f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:f1:0e:8b:0d:2b:e6:fa:34:16:75:0e:61: 22:91:e1:74:78:f7:47:4d:9c:d3:13:5e:4c:39:51: c5:8e:1e:46:f5:27:5b:c7:97:cb:88:bd:ae:a2:fa: 9f:4f:0a:53:41:3f:92:45:83:ba:60:d4:94:94:d2: be:f8:1b:3b:a8:47:7b:4e:4c:da:db:e3:a9:7d:cb: b3:ac:b6:a0:9d:0e:1a:8b:69:53:e2:57:28:4d:da: 0c:18:c5:72:e6:93:a9:e0:84:16:c8:4b:af:5b:99: 60:b7:89:be:c8:2f:0e:91:ec:ac:1f:23:4a:db:d6: b7:f3:6e:13:20:cf:cb:34:33:f7:fc:02:9b:73:6f: db:25:97:6f:96:4b:09:26:33:18:d8:eb:52:96:53: 62:21:be:5a:22:65:2a:0d:87:0a:09:4c:43:77:86: 6d:48:72:62:95:33:39:e6:7b:08:af:1f:e7:66:af: 03:3a:d6:61:9a:02:ff:b2:5d:ef:7f:22:ab:51:0f: ab:0b:31:60:09:40:23:02:1d:95:82:fe:d7:bc:5a: 08:37:dd:f0:7b:25:b0:4b:d1:90:00:ee:68:43:cc: 62:bc:eb:46:80:a6:73:a4:9e:c4:32:f1:41:1b:c2: 0d:47:fe:2f:fb:f5:0e:cf:3f:dc:34:3d:f6:a7:a8: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8B:CB:77:B5:31:3F:47:4D:E7:93:A7:08:5B:DB:4A:34:1E:F8:1C X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3b:6f:60:c1:53:7a:5a:13:4d:f5:44:be:1d:1b:0e:e6:dc: 21:31:3d:1e:14:26:bc:f1:40:b5:98:4b:8a:22:2c:1c:f5:c1: 8c:b1:e2:46:de:47:62:e7:6d:7b:be:52:2b:92:7d:79:fa:6d: 0e:e0:3e:e5:7f:91:66:6a:15:be:13:a7:0f:2a:6c:40:42:db: 1b:9a:ae:27:81:0b:da:5e:73:64:dd:67:1f:4a:76:4a:7c:f8: 97:30:7a:45:ed:ce:e5:60:e8:74:88:23:0b:5b:e3:5e:83:a8: ec:14:a6:b4:14:19:3e:54:9d:1e:03:46:e2:ab:c4:da:ed:5e: b8:8a:39:37:69:b2:67:04:b5:e4:a4:87:54:e4:34:de:b3:b8: d2:65:d5:00:fd:e5:92:eb:dd:95:15:28:40:9d:50:be:72:f1: ff:91:7f:e4:a2:ea:f8:b5:ab:d7:d5:2b:c5:de:85:66:88:28: 27:bb:fc:3e:03:6e:51:5c:55:e9:28:cd:54:df:eb:27:53:06: 2f:c8:e5:5c:b8:7e:8b:e1:df:61:5b:31:6f:7c:ca:57:e8:d5: 29:63:f4:78:cc:c6:2b:f7:fa:75:80:f0:30:c0:9d:7e:ae:4a: fa:d6:2c:83:d6:fb:01:3d:ae:e3:96:83:2b:46:5d:42:70:45: 6b:e3:78:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUwOTA4MTcxMTQ5WhcNMjUwOTE1MTcxMTQ5WjAYMRYwFAYD VQQDEw02OGJmMGU1NS02NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYDxDosNK+b6NBZ1DmEikeF0ePdHTZzTE15MOVHFjh5G9Sdbx5fLiL2uovqf TwpTQT+SRYO6YNSUlNK++Bs7qEd7Tkza2+OpfcuzrLagnQ4ai2lT4lcoTdoMGMVy 5pOp4IQWyEuvW5lgt4m+yC8OkeysHyNK29a3824TIM/LNDP3/AKbc2/bJZdvlksJ JjMY2OtSllNiIb5aImUqDYcKCUxDd4ZtSHJilTM55nsIrx/nZq8DOtZhmgL/sl3v fyKrUQ+rCzFgCUAjAh2Vgv7XvFoIN93weyWwS9GQAO5oQ8xivOtGgKZzpJ7EMvFB G8INR/4v+/UOzz/cND32p6ifPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyLy3e1 MT9HTeeTpwhb20o0HvgcMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM UFhPTUZjY0lfc19XdTR4bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKO29gwVN6WhNN9US+HRsO5twhMT0eFCa88UC1mEuKIiwc9cGMseJG 3kdi5217vlIrkn15+m0O4D7lf5FmahW+E6cPKmxAQtsbmq4ngQvaXnNk3WcfSnZK fPiXMHpF7c7lYOh0iCMLW+Neg6jsFKa0FBk+VJ0eA0biq8Ta7V64ijk3abJnBLXk pIdU5DTes7jSZdUA/eWS692VFShAnVC+cvH/kX/kour4tavX1SvF3oVmiCgnu/w+ A25RXFXpKM1U3+snUwYvyOVcuH6L4d9hWzFvfMpX6NUpY/R4zMYr9/p1gPAwwJ1+ rkr61iyD1vsBPa7jloMrRl1CcEVr43iR -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:57 2025 by rpki-client