$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft File: O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json) Hash identifier: YI1UNik6Sp858TeRIRlV3QeMwRvQpO4C9A757XhovSY= Subject key identifier: 14:ED:4F:8E:9A:F0:6C:E3:8A:A3:61:FE:10:7C:17:C4:3B:BD:AA:E6 Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft Manifest number: 0716 Signing time: Fri 18 Jul 2025 22:09:15 +0000 Manifest this update: Fri 18 Jul 2025 22:09:15 +0000 Manifest next update: Fri 25 Jul 2025 22:09:15 +0000 Files and hashes: 1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: 0ImumSo2GIVkVZQtGpHTN0Jy4oc5VBWPYdGgjou+Dtw=) 2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Validity Not Before: Jul 18 22:09:15 2025 GMT Not After : Jul 25 22:09:15 2025 GMT Subject: CN=687ac60b-a51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:3a:30:98:94:a6:4d:a6:91:20:7f:e3:73: 24:0f:51:18:93:e7:38:f4:dc:1b:e3:8e:cc:b9:e2: 7e:fb:1e:9e:09:0d:a2:d7:13:3b:6d:d1:f6:8a:4b: e6:75:19:cb:b6:69:09:d6:74:ef:2e:fd:a6:fc:9a: c6:25:6a:0f:e9:38:a8:85:3d:19:b2:71:47:61:16: 81:77:7c:29:58:50:3c:d2:0c:45:9a:67:9b:5c:9a: 83:0c:a6:bb:91:5f:c5:73:88:79:12:83:90:5f:80: 3f:39:85:5a:c1:df:20:a4:52:69:60:9d:09:00:8c: 27:38:31:d7:73:c3:a3:9b:2f:10:e3:70:ec:63:83: 5c:d5:7b:3b:6c:98:85:73:3c:81:06:39:8e:f0:36: 46:a0:8f:79:81:cb:cc:41:fb:35:1e:ce:5b:d8:ac: d1:df:e9:bc:ca:24:11:4d:a9:1d:48:e6:e4:5f:ab: 44:07:45:50:f5:39:c7:e4:f6:f6:da:a0:9e:4e:26: 9c:49:e8:30:98:eb:70:19:d9:71:c7:97:7a:fe:7a: 49:e8:42:09:26:41:08:d7:d2:fd:5e:ce:d8:19:7c: 6e:6d:2f:48:d3:d7:82:b8:75:4b:96:f7:2d:c8:d0: f9:ce:1e:50:c1:31:29:15:b9:f7:2c:ee:e0:cb:07: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:4F:8E:9A:F0:6C:E3:8A:A3:61:FE:10:7C:17:C4:3B:BD:AA:E6 X509v3 Authority Key Identifier: keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:d6:b0:f4:18:d0:dc:16:0b:da:6c:07:51:75:0b:51:11: fc:2d:d8:b5:a1:f7:5d:23:1f:2c:2a:cb:3d:a5:3f:8c:3c:b2: 60:43:a4:d2:bc:c1:8d:b3:64:da:24:6a:b3:c8:81:ae:28:ee: b2:1c:db:d8:56:79:9a:31:0b:7d:47:d8:52:89:78:2c:06:04: 5d:a0:80:39:96:1e:6e:b9:73:bf:a4:6b:24:36:96:09:64:1e: 6a:db:7c:4b:91:68:aa:a3:9a:e3:1c:0a:45:0a:01:68:12:c6: 34:e5:c1:65:40:a7:74:d0:bc:1b:4c:60:ce:fe:e8:06:2a:ae: 82:26:d2:c5:a1:94:29:ad:40:c5:c1:e4:96:69:ca:6a:c5:6e: ba:e6:86:d5:36:d0:32:36:90:ab:ff:e5:b1:02:cc:71:61:d9: 60:46:c2:76:af:7c:d4:88:65:d0:14:8d:a7:1a:48:1f:27:9d: 26:ee:d4:17:52:ed:79:7d:37:75:95:89:93:c3:d8:85:e6:24: 12:8c:ed:6c:b7:1f:35:61:d0:d9:39:44:c1:45:30:25:b5:0b: 13:89:e8:63:7e:4e:78:e1:e1:cf:32:b4:4e:5b:40:f7:39:a3: 53:74:6b:b6:a1:04:4e:9c:f6:e3:ce:43:7a:77:0e:79:a6:6b: 80:76:ab:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz Mzc0NDBGQjQwHhcNMjUwNzE4MjIwOTE1WhcNMjUwNzI1MjIwOTE1WjAYMRYwFAYD VQQDEw02ODdhYzYwYi1hNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC46MJiUpk2mkSB/43MkD1EYk+c49Nwb447MueJ++x6eCQ2i1xM7bdH2ikvm dRnLtmkJ1nTvLv2m/JrGJWoP6TiohT0ZsnFHYRaBd3wpWFA80gxFmmebXJqDDKa7 kV/Fc4h5EoOQX4A/OYVawd8gpFJpYJ0JAIwnODHXc8Ojmy8Q43DsY4Nc1Xs7bJiF czyBBjmO8DZGoI95gcvMQfs1Hs5b2KzR3+m8yiQRTakdSObkX6tEB0VQ9TnH5Pb2 2qCeTiacSegwmOtwGdlxx5d6/npJ6EIJJkEI19L9Xs7YGXxubS9I09eCuHVLlvct yND5zh5QwTEpFbn3LO7gywdG0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTtT46a 8GzjiqNh/hB8F8Q7varmMB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4 MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTgwRi8xNjYxN0Q2QzQ4MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lN Vmc4VjE5Sk1yRm96ZEVEN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSzdaw9BjQ3BYL2mwHUXULURH8Ldi1ofddIx8sKss9pT+MPLJgQ6TS vMGNs2TaJGqzyIGuKO6yHNvYVnmaMQt9R9hSiXgsBgRdoIA5lh5uuXO/pGskNpYJ ZB5q23xLkWiqo5rjHApFCgFoEsY05cFlQKd00LwbTGDO/ugGKq6CJtLFoZQprUDF weSWacpqxW665obVNtAyNpCr/+WxAsxxYdlgRsJ2r3zUiGXQFI2nGkgfJ50m7tQX Uu15fTd1lYmTw9iF5iQSjO1stx81YdDZOUTBRTAltQsTiehjfk544eHPMrROW0D3 OaNTdGu2oQROnPbjzkN6dw55pmuAdqtH -----END CERTIFICATE-----Generated at Sun Jul 20 03:44:11 2025 by rpki-client