$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: eOwUNI4NyXy+hN+7zJapGSTdStGH3A/MIsQgejpmiws= Subject key identifier: 5B:FA:AF:29:8D:EB:EA:A0:9F:83:5C:32:8C:07:FA:49:DE:CF:C3:6D Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 01E5 Signing time: Thu 21 Aug 2025 02:42:33 +0000 Manifest this update: Thu 21 Aug 2025 02:42:32 +0000 Manifest next update: Thu 28 Aug 2025 02:42:32 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: 8JtDgf4VtcDQUwXJgNw+uN/Nm7HAT/FY50WvM5JuYuk=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Aug 21 02:42:32 2025 GMT Not After : Aug 28 02:42:32 2025 GMT Subject: CN=68a68799-35a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:8a:e8:f7:50:8f:ef:64:5f:d6:ea:de:37: 87:ac:69:f1:d1:08:f8:9b:99:b9:81:37:0c:53:5d: fa:85:f6:0a:94:58:7d:b2:46:17:41:0f:22:46:40: d5:b6:9a:75:ca:45:ce:5e:3f:0e:13:cd:f1:0c:f5: a8:91:d8:9e:9b:c9:52:8d:76:bc:16:fa:e2:07:9c: 1c:20:bd:7d:e8:c8:da:84:5b:11:55:fd:9c:ee:8e: 04:1a:9f:c9:4a:d5:02:b6:2c:3a:1b:30:ff:71:b1: 6a:c3:b9:76:f0:a2:59:30:6e:7e:b4:cd:34:c6:b6: 19:17:d4:67:e9:35:95:d5:25:49:fb:6f:66:fd:ea: 9b:a1:ee:2f:5b:d8:b7:60:22:82:85:05:bf:2e:a3: fd:a6:c1:80:6d:a6:27:2e:e9:50:84:16:cd:9e:f9: af:51:77:cd:52:cc:7b:41:fe:95:34:e8:2c:99:98: 1b:a3:f3:36:de:be:16:b2:61:b3:89:22:98:f0:5a: 24:19:5c:75:82:6a:b7:7b:09:75:c2:e7:0c:10:13: 6a:44:f0:dd:47:f4:e4:78:6a:88:90:e5:75:73:eb: 78:5c:b8:30:12:1c:50:0e:95:d9:73:87:f7:a8:78: 56:cd:df:b2:41:87:66:20:4f:23:0c:fa:7f:34:c9: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:AF:29:8D:EB:EA:A0:9F:83:5C:32:8C:07:FA:49:DE:CF:C3:6D X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b2:42:3f:4e:c8:85:5f:91:6c:8f:d2:36:18:b2:27:4e:06: b9:e1:56:2c:97:5c:e8:02:3a:ba:94:b4:27:2d:98:f8:30:6c: 89:e0:44:99:66:54:ac:35:5c:89:c9:1a:a8:91:c7:ce:66:e4: 90:27:a8:fd:05:dc:45:37:c9:15:a6:d7:c9:d9:bd:23:43:36: 80:78:2b:a6:a1:e3:9f:53:47:e4:bc:9e:e9:7c:ca:7c:08:60: 85:96:75:16:1f:c8:36:c4:a9:11:b8:41:29:10:98:5b:fa:19: 13:67:9f:e1:ce:df:39:d3:be:9b:db:b7:81:c7:ef:bc:d5:ce: c5:42:7b:e0:16:60:f9:c5:c9:98:d0:e3:ba:2a:09:1a:53:da: 55:87:ff:49:2b:6f:77:0c:5d:74:23:06:8c:85:3a:9e:1f:d1: 20:f5:29:a3:ab:ce:5f:33:f7:53:77:d7:22:74:53:b3:6e:4b: 35:f9:41:e3:66:7f:11:74:f2:04:17:39:4f:c1:c4:23:b8:1b: f4:5a:d2:a5:d1:23:bf:55:0f:09:72:b1:81:4d:f5:b3:fd:e0: 1c:20:45:75:4e:6b:37:a4:21:e7:79:09:f0:41:61:1c:51:9f: 74:e7:8c:4f:95:02:2d:8e:53:37:20:21:d4:22:90:5e:99:b2: b1:00:03:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUwODIxMDI0MjMyWhcNMjUwODI4MDI0MjMyWjAYMRYwFAYD VQQDEw02OGE2ODc5OS0zNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsWK6PdQj+9kX9bq3jeHrGnx0Qj4m5m5gTcMU136hfYKlFh9skYXQQ8iRkDV tpp1ykXOXj8OE83xDPWokdiem8lSjXa8FvriB5wcIL196MjahFsRVf2c7o4EGp/J StUCtiw6GzD/cbFqw7l28KJZMG5+tM00xrYZF9Rn6TWV1SVJ+29m/eqboe4vW9i3 YCKChQW/LqP9psGAbaYnLulQhBbNnvmvUXfNUsx7Qf6VNOgsmZgbo/M23r4WsmGz iSKY8FokGVx1gmq3ewl1wucMEBNqRPDdR/TkeGqIkOV1c+t4XLgwEhxQDpXZc4f3 qHhWzd+yQYdmIE8jDPp/NMkNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv6rymN 6+qgn4NcMowH+knez8NtMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtskI/TsiFX5Fsj9I2GLInTga54VYsl1zoAjq6lLQnLZj4MGyJ4ESZ ZlSsNVyJyRqokcfOZuSQJ6j9BdxFN8kVptfJ2b0jQzaAeCumoeOfU0fkvJ7pfMp8 CGCFlnUWH8g2xKkRuEEpEJhb+hkTZ5/hzt85076b27eBx++81c7FQnvgFmD5xcmY 0OO6KgkaU9pVh/9JK293DF10IwaMhTqeH9Eg9Smjq85fM/dTd9cidFOzbks1+UHj Zn8RdPIEFzlPwcQjuBv0WtKl0SO/VQ8JcrGBTfWz/eAcIEV1Tms3pCHneQnwQWEc UZ9054xPlQItjlM3ICHUIpBembKxAAMz -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:43 2025 by rpki-client