$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: wmD9xuxgRi1ma11UBr6bP9SSxROQxLsFYXFr87nx1m0= Subject key identifier: 81:5E:8C:0F:2F:9D:FF:E4:8D:45:C6:44:0E:96:6F:ED:D9:43:B1:80 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2AF2 Signing time: Fri 18 Jul 2025 15:37:44 +0000 Manifest this update: Fri 18 Jul 2025 15:37:44 +0000 Manifest next update: Fri 25 Jul 2025 15:37:43 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: oOmqekulEnCF0n1m3y+AvU/8eO4kMzWfEP9Fms2AlOw=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11062 (0x2b36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Jul 18 15:37:44 2025 GMT Not After : Jul 25 15:37:43 2025 GMT Subject: CN=687a6a48-82cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:cc:d5:b4:82:97:d2:61:86:d2:23:40:1d: 00:aa:a3:10:fd:b3:0f:56:5a:52:b8:de:e2:ae:d6: 17:e7:b0:07:58:66:a4:3b:f6:42:5c:c4:9f:39:9e: ca:02:23:aa:a8:33:5d:90:2a:73:eb:2a:76:8c:51: fa:52:b1:30:f1:f5:b6:43:5b:00:20:fd:95:c8:14: f0:81:d4:7f:a7:b9:c8:bb:4f:c3:0e:27:16:49:97: 27:e6:3b:13:d8:93:08:63:51:d3:7c:81:81:1a:c8: 35:a8:32:6a:96:1d:1d:5a:b0:21:8a:de:61:5b:45: 79:45:9f:ef:2d:3b:af:cd:f3:55:3d:3f:63:3c:5b: 9c:a6:3a:1a:27:ac:63:ca:59:c6:47:1a:ab:18:b2: 3b:7b:38:9d:11:4b:f7:15:a7:f6:40:12:1e:2a:9a: 67:f6:65:cb:10:75:07:39:62:73:3a:9f:89:0a:e9: 55:91:1c:df:5e:f3:31:99:1c:d1:c1:2f:f6:79:8a: f7:48:c3:74:ed:81:ba:aa:6e:63:c2:ea:57:cb:ae: 3c:39:35:cb:25:3e:80:dc:d2:59:77:4e:da:da:22: 37:e2:11:a8:4a:7e:62:49:0a:54:ea:6f:c9:4d:76: fd:45:7e:52:77:35:9f:34:08:8e:f5:55:41:27:e7: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:8C:0F:2F:9D:FF:E4:8D:45:C6:44:0E:96:6F:ED:D9:43:B1:80 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:66:d0:4f:2a:3e:12:0e:dc:9e:3c:9c:54:3a:2c:16:ac:1a: 3d:4d:5a:7a:7b:8f:d5:95:8e:d3:47:e8:a8:63:94:dc:f8:af: 06:b1:d5:35:30:91:13:cd:b4:59:ba:14:25:af:ec:64:47:b8: 66:d4:e4:1a:5c:30:7b:60:7b:49:47:23:f0:b6:58:c4:9d:a5: eb:7a:7c:20:6c:f1:4c:ff:4f:21:96:63:c4:8f:74:08:8a:17: 43:6f:13:7e:27:1e:6f:8d:ab:ea:55:2a:ac:62:22:0a:89:6f: d6:31:16:77:23:59:15:d5:f7:62:48:a5:8a:7d:ef:81:14:22: ad:3c:be:e7:b0:6b:d9:04:b9:d7:d7:c7:df:31:cd:74:47:b3: 66:b7:5c:ac:37:8f:c8:f5:fd:92:5a:1b:4e:67:7d:90:dc:31: f2:52:64:07:40:a3:60:d0:08:b8:bd:f6:2e:54:51:cc:76:4d: 96:dd:15:2e:70:cb:2c:b9:f3:ef:4d:8c:b0:c4:f7:be:82:51: 7c:5c:4f:31:93:7a:77:1d:74:a2:7b:e6:65:7a:02:6b:2c:a5: 7f:b0:28:02:9d:e9:9e:c4:34:13:78:b9:a9:dc:c9:42:96:a5: fb:16:5e:65:0d:72:43:f1:8c:6d:19:ec:1e:02:e6:19:76:02: 7d:09:7a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwNzE4MTUzNzQ0WhcNMjUwNzI1MTUzNzQzWjAYMRYwFAYD VQQDEw02ODdhNmE0OC04MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XrM1bSCl9JhhtIjQB0AqqMQ/bMPVlpSuN7irtYX57AHWGakO/ZCXMSfOZ7K AiOqqDNdkCpz6yp2jFH6UrEw8fW2Q1sAIP2VyBTwgdR/p7nIu0/DDicWSZcn5jsT 2JMIY1HTfIGBGsg1qDJqlh0dWrAhit5hW0V5RZ/vLTuvzfNVPT9jPFucpjoaJ6xj ylnGRxqrGLI7ezidEUv3Faf2QBIeKppn9mXLEHUHOWJzOp+JCulVkRzfXvMxmRzR wS/2eYr3SMN07YG6qm5jwupXy648OTXLJT6A3NJZd07a2iI34hGoSn5iSQpU6m/J TXb9RX5SdzWfNAiO9VVBJ+dcfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFejA8v nf/kjUXGRA6Wb+3ZQ7GAMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANZtBPKj4SDtyePJxUOiwWrBo9TVp6e4/VlY7TR+ioY5Tc+K8GsdU1 MJETzbRZuhQlr+xkR7hm1OQaXDB7YHtJRyPwtljEnaXrenwgbPFM/08hlmPEj3QI ihdDbxN+Jx5vjavqVSqsYiIKiW/WMRZ3I1kV1fdiSKWKfe+BFCKtPL7nsGvZBLnX 18ffMc10R7Nmt1ysN4/I9f2SWhtOZ32Q3DHyUmQHQKNg0Ai4vfYuVFHMdk2W3RUu cMssufPvTYywxPe+glF8XE8xk3p3HXSie+ZlegJrLKV/sCgCnemexDQTeLmp3MlC lqX7Fl5lDXJD8YxtGeweAuYZdgJ9CXof -----END CERTIFICATE-----Generated at Sun Jul 20 16:50:01 2025 by rpki-client