$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: LzHXAVMud7FC5dHLB5nkW+fkUu4tCT2itlOj4AmrX6E= Subject key identifier: 20:A4:04:4A:2F:CF:A5:3C:0C:6F:00:B5:B6:8F:8A:CB:7B:03:71:1D Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0963 Signing time: Sun 20 Jul 2025 20:17:34 +0000 Manifest this update: Sun 20 Jul 2025 20:17:34 +0000 Manifest next update: Sun 27 Jul 2025 20:17:34 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: xDJgJMqcZILTJ63xKo0ltxHDiaLSSNhIYUkvR5uwlLM=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Jul 20 20:17:34 2025 GMT Not After : Jul 27 20:17:34 2025 GMT Subject: CN=687d4ede-269a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:6a:39:93:12:3b:da:b2:96:60:e1:e0:50: 28:43:94:b1:78:7b:1a:5c:34:c1:d6:7d:c3:da:33: 7b:45:cb:5a:8e:c3:9c:d0:9e:b8:be:bb:dd:d3:00: e1:d5:e9:a8:19:1e:a3:4e:ea:ce:f6:a6:f6:d6:5d: c5:c7:7e:74:15:4b:e7:bc:39:57:b9:fb:1f:7c:1c: 12:59:9a:12:b0:f1:fe:bf:88:e3:8d:e4:e9:57:d0: c9:92:c8:53:fe:4c:5e:f3:0d:56:85:a8:ff:0f:0c: b3:b7:da:b4:4d:c6:57:50:5e:fc:c5:32:bf:dc:b4: 42:f4:ff:b4:15:18:2e:c9:74:15:4c:e9:51:40:91: 1b:70:a8:79:ee:4c:e5:18:31:b1:cb:56:f2:c6:70: d5:7a:13:5f:5a:4e:91:34:e8:f3:64:81:0b:1d:dd: fb:1d:2d:f2:7d:17:0e:1b:cc:e6:4e:f0:a2:c9:a5: f5:c9:53:31:bb:83:c5:b6:e2:95:33:3d:4e:a7:cf: f2:64:eb:9e:35:c0:5b:af:e6:24:21:51:6e:a6:bd: 10:59:0e:57:e9:75:4a:ee:24:d2:a5:ed:f9:15:46: 02:71:d5:05:84:e5:80:d6:59:32:58:5d:04:5f:dd: b6:26:7c:5d:06:63:4a:66:5b:28:5b:ac:61:45:ff: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:04:4A:2F:CF:A5:3C:0C:6F:00:B5:B6:8F:8A:CB:7B:03:71:1D X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:de:3c:9b:5f:86:82:5e:4e:bc:6b:d3:0d:20:3d:f4:c8:0b: b3:af:2c:48:1a:9c:6c:51:e1:47:6d:fd:b5:56:d8:a5:fb:8b: d4:cf:ed:56:cc:16:4a:c1:19:43:e3:5b:20:9b:67:82:20:c7: 5d:e2:fa:47:b4:18:9f:fd:d1:aa:89:95:8d:50:7e:b0:2f:a6: 1f:85:28:3b:6d:3d:55:4b:83:b5:7e:16:00:9c:b6:0e:f0:dd: a3:a5:21:38:f8:4f:be:d8:b1:df:fe:d6:79:d2:8c:41:5b:03: e1:a5:3c:e3:b8:a9:c5:b5:b0:9b:01:17:ee:7f:29:0f:f5:20: d7:57:ab:ae:1a:5d:47:05:10:be:65:9e:2b:46:88:72:e6:84: e5:3e:4c:88:66:f6:a3:e7:6a:c5:79:1b:6d:29:9c:c3:55:63: 97:01:59:32:3f:6c:b7:52:5c:9b:c4:d7:79:eb:d7:5e:25:60: 21:b0:02:d7:96:73:2a:15:1f:c1:d9:9a:46:21:32:ee:3f:b3: 27:99:2d:6a:f3:3b:eb:59:08:26:ee:e3:86:e4:bc:26:89:59: 7e:95:0b:c7:23:a3:0c:81:d1:77:3b:35:66:4c:81:56:a6:7c: cd:96:a7:35:ca:10:b1:3b:f5:7d:eb:61:f5:4a:4b:d4:50:22: f1:00:b2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUwNzIwMjAxNzM0WhcNMjUwNzI3MjAxNzM0WjAYMRYwFAYD VQQDEw02ODdkNGVkZS0yNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5lqOZMSO9qylmDh4FAoQ5SxeHsaXDTB1n3D2jN7RctajsOc0J64vrvd0wDh 1emoGR6jTurO9qb21l3Fx350FUvnvDlXufsffBwSWZoSsPH+v4jjjeTpV9DJkshT /kxe8w1Whaj/Dwyzt9q0TcZXUF78xTK/3LRC9P+0FRguyXQVTOlRQJEbcKh57kzl GDGxy1byxnDVehNfWk6RNOjzZIELHd37HS3yfRcOG8zmTvCiyaX1yVMxu4PFtuKV Mz1Op8/yZOueNcBbr+YkIVFupr0QWQ5X6XVK7iTSpe35FUYCcdUFhOWA1lkyWF0E X922JnxdBmNKZlsoW6xhRf/PrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCkBEov z6U8DG8AtbaPist7A3EdMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA3jybX4aCXk68a9MNID30yAuzryxIGpxsUeFHbf21Vtil+4vUz+1W zBZKwRlD41sgm2eCIMdd4vpHtBif/dGqiZWNUH6wL6YfhSg7bT1VS4O1fhYAnLYO 8N2jpSE4+E++2LHf/tZ50oxBWwPhpTzjuKnFtbCbARfufykP9SDXV6uuGl1HBRC+ ZZ4rRohy5oTlPkyIZvaj52rFeRttKZzDVWOXAVkyP2y3UlybxNd569deJWAhsALX lnMqFR/B2ZpGITLuP7MnmS1q8zvrWQgm7uOG5LwmiVl+lQvHI6MMgdF3OzVmTIFW pnzNlqc1yhCxO/V962H1SkvUUCLxALLR -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:30 2025 by rpki-client