$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: nIX3QlgmMSFuSngbRoQmd+G5gJ66mfa6FcHYPpqcHwU= Subject key identifier: 86:E4:5C:BC:AD:9B:59:81:9C:BC:69:34:8B:EB:D1:8A:25:F5:28:D2 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 07AA Signing time: Fri 18 Jul 2025 21:37:54 +0000 Manifest this update: Fri 18 Jul 2025 21:37:54 +0000 Manifest next update: Fri 25 Jul 2025 21:37:53 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: B9GTSdhnBbRVhHPMAqjQhkZhqCXj9ugVIQmoKtq5ZGc=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: w+svrnjAumlsgho2zJHotOA2YwQVmczAOvvR54Jd4tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Jul 18 21:37:54 2025 GMT Not After : Jul 25 21:37:53 2025 GMT Subject: CN=687abeb2-8403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:ba:16:09:9f:24:24:8c:b3:fe:98:39:b1: b6:4e:e9:56:66:35:85:e3:c5:5f:c0:bb:40:2c:fd: 91:95:54:13:ec:13:42:71:ea:73:de:4b:3f:77:84: de:8c:a6:7a:61:4c:e3:a1:ac:3e:37:42:e0:b5:9f: 1a:46:a5:f2:e1:dd:18:c6:ff:ab:9e:37:b4:29:d3: 3d:41:cc:df:a3:d8:13:6d:15:2f:7b:0e:68:19:c2: 57:f9:d1:9d:be:16:47:24:8c:13:d2:50:48:55:b1: 4c:54:79:df:fd:fe:8e:8c:b1:d7:74:f8:cb:53:f8: 32:dd:6b:b0:b9:02:bf:e3:69:e8:f8:05:28:a0:bd: f9:c4:75:e4:b8:50:38:78:3a:0e:e9:4b:9c:79:1a: 3a:83:b2:f5:6c:3d:eb:e8:8a:2c:7a:52:79:6c:99: e2:a5:f9:ef:21:37:68:b9:75:5a:7b:3f:86:dc:e9: 05:de:6c:41:2b:59:38:0b:35:ed:2d:06:88:1b:2b: 9e:b5:4c:8d:c0:42:d0:14:73:5b:4b:3a:81:c3:03: 84:57:d6:19:c3:bb:b0:07:bc:af:88:86:46:df:b4: 5f:c3:37:be:b0:76:2d:2a:03:4e:09:31:23:99:12: ab:f5:09:9f:99:5f:9b:36:f5:04:9c:66:42:b3:8b: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E4:5C:BC:AD:9B:59:81:9C:BC:69:34:8B:EB:D1:8A:25:F5:28:D2 X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c9:2f:af:5c:b0:14:12:40:0e:ae:f1:c4:a4:6f:89:97:7f: 2c:b8:a4:d2:ca:a4:36:ae:c3:d8:69:e5:4d:29:ad:13:d7:3f: 36:90:5b:d5:06:f9:cb:5c:ad:a6:dd:45:35:92:b6:6e:10:2d: 5b:a0:f5:2a:7c:90:44:30:1c:d9:2b:8f:96:dd:24:79:ec:09: cb:f1:6b:85:19:ee:68:2c:32:a5:c9:5d:52:1d:23:e5:66:68: 18:2d:89:17:c7:45:96:70:2b:58:b0:27:2c:33:91:96:13:46: 2b:c6:56:ab:a1:65:d6:92:77:d5:92:77:78:9f:b7:17:87:e5: 2f:5c:5b:1c:a5:2d:d7:4f:ac:ec:90:b5:e0:85:34:81:bf:cc: 90:ff:13:c3:5d:a7:c4:8a:26:61:53:f9:3f:ea:7b:b7:70:9f: a5:d9:fd:3b:e2:2d:be:b2:d6:28:35:b8:3a:14:91:f1:ce:7e: d8:d3:ad:71:c8:66:02:74:68:f7:b6:b7:ea:09:9b:9d:60:85: 10:c3:d8:33:d8:a6:93:db:14:34:72:e7:6c:eb:61:fe:5f:ba: 56:a4:08:7a:24:3d:11:8e:d3:10:2b:98:20:ee:56:e5:9e:9c: e2:dd:94:30:b2:ae:22:77:41:be:e2:7b:52:45:af:50:f1:c7: 9e:3f:48:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUwNzE4MjEzNzU0WhcNMjUwNzI1MjEzNzUzWjAYMRYwFAYD VQQDEw02ODdhYmViMi04NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVC6FgmfJCSMs/6YObG2TulWZjWF48VfwLtALP2RlVQT7BNCcepz3ks/d4Te jKZ6YUzjoaw+N0LgtZ8aRqXy4d0Yxv+rnje0KdM9Qczfo9gTbRUvew5oGcJX+dGd vhZHJIwT0lBIVbFMVHnf/f6OjLHXdPjLU/gy3WuwuQK/42no+AUooL35xHXkuFA4 eDoO6UuceRo6g7L1bD3r6IoselJ5bJnipfnvITdouXVaez+G3OkF3mxBK1k4CzXt LQaIGyuetUyNwELQFHNbSzqBwwOEV9YZw7uwB7yviIZG37Rfwze+sHYtKgNOCTEj mRKr9QmfmV+bNvUEnGZCs4urIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbkXLyt m1mBnLxpNIvr0Yol9SjSMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhyS+vXLAUEkAOrvHEpG+Jl38suKTSyqQ2rsPYaeVNKa0T1z82kFvV BvnLXK2m3UU1krZuEC1boPUqfJBEMBzZK4+W3SR57AnL8WuFGe5oLDKlyV1SHSPl ZmgYLYkXx0WWcCtYsCcsM5GWE0YrxlaroWXWknfVknd4n7cXh+UvXFscpS3XT6zs kLXghTSBv8yQ/xPDXafEiiZhU/k/6nu3cJ+l2f074i2+stYoNbg6FJHxzn7Y061x yGYCdGj3trfqCZudYIUQw9gz2KaT2xQ0cuds62H+X7pWpAh6JD0RjtMQK5gg7lbl npzi3ZQwsq4id0G+4ntSRa9Q8ceeP0il -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:01 2025 by rpki-client