$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: UUP/skTs9zB/WY5G2p1qTGeoAheW6xmYIW4rzhVpW9E= Subject key identifier: AE:C4:60:30:48:5C:78:6A:D6:1D:CA:73:6F:7E:12:FB:49:B6:69:D3 Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 207F Signing time: Sun 20 Jul 2025 16:38:46 +0000 Manifest this update: Sun 20 Jul 2025 16:38:46 +0000 Manifest next update: Sun 27 Jul 2025 16:38:46 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: vXj4leV7DOQZZwMBl9XXZGdKKn3rv1bryQF9JWaW7RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: Jul 20 16:38:46 2025 GMT Not After : Jul 27 16:38:46 2025 GMT Subject: CN=687d1b96-4227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:76:42:2a:31:5b:f4:15:22:96:77:c1:92: fb:16:b9:51:31:fb:1c:22:47:8d:57:b1:c3:6a:b4: 05:6a:b0:3c:f7:69:c4:8a:0a:79:8f:5b:7b:5e:e6: c4:54:fe:53:fb:69:8a:be:31:f1:ec:fe:2e:3f:81: d5:33:5b:20:6c:d3:86:6b:ab:09:d3:db:20:b8:e5: 27:90:ee:90:21:1e:74:e3:9a:63:c4:83:e0:f2:e1: a5:90:e3:fb:65:51:cf:a6:4e:a4:b5:52:8c:9a:3f: a3:fc:11:51:86:f6:f7:ae:86:8b:c5:f0:77:a3:1f: 26:6c:7b:40:1d:c6:e2:9d:ff:51:fa:9d:78:9c:f9: d7:7f:6e:cc:07:9e:bc:9f:7f:3a:48:d1:38:8e:5c: 1b:54:fe:ef:df:0b:20:36:d4:d1:a2:7e:6f:5c:1e: 56:5e:e8:91:e9:99:4a:25:0c:1c:19:bc:e7:ab:e2: 0b:4b:d7:8b:56:a5:78:2d:65:18:60:fa:9d:fb:c1: 10:7b:6b:67:fc:86:e8:08:d1:1e:c1:b9:6a:ea:92: 60:af:98:d6:ac:80:0c:77:b1:3d:2d:db:68:7d:bc: 55:c3:ac:38:c7:27:da:32:32:d8:c1:c3:dd:08:a8: 2f:c5:19:c3:ca:e4:42:50:4a:a4:03:f4:e1:51:3d: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:60:30:48:5C:78:6A:D6:1D:CA:73:6F:7E:12:FB:49:B6:69:D3 X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5e:1d:30:ac:3e:31:65:f7:c7:ef:58:98:a5:8f:84:31:e7: f2:81:65:dc:ff:50:1e:17:0f:c2:20:01:6d:54:15:41:5a:3f: e2:5d:f2:d3:4c:8e:b1:8a:70:a9:9a:83:b6:81:6b:b2:4b:4c: f0:33:fc:ab:7e:02:1d:ee:78:93:dc:65:45:4d:b0:83:5a:d3: cb:87:cb:b5:06:e2:72:f2:3e:af:cf:5a:85:c4:bc:cd:f4:d1: ec:ea:c7:75:0b:1c:90:cf:ac:5e:09:d6:37:e7:d0:fb:6c:13: a0:02:1c:57:2c:7d:08:af:f3:79:32:0d:8e:38:38:e7:c7:bc: c2:b1:6c:83:7c:f9:3c:a7:40:d6:57:d4:28:9c:d5:a5:16:99: 4c:47:9e:39:4a:c5:ae:10:5a:30:2b:bd:8d:50:53:c9:62:ae: f3:12:cc:af:3c:16:37:3e:8c:ac:dd:1b:95:17:ad:62:3a:72: 62:e3:ff:4b:64:0a:b9:fc:0f:d4:88:a5:e9:79:19:b5:fd:db: 75:74:ad:3e:f1:bd:b0:ca:28:e5:17:ac:2e:d9:94:3f:2c:06: 79:7a:6f:38:ea:d8:f2:3d:22:eb:c5:64:58:ac:6e:82:0b:34: c6:a1:3a:39:75:31:27:0f:d2:e8:6a:22:d2:ae:e5:35:44:40: e2:da:58:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjUwNzIwMTYzODQ2WhcNMjUwNzI3MTYzODQ2WjAYMRYwFAYD VQQDEw02ODdkMWI5Ni00MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfZ2QioxW/QVIpZ3wZL7FrlRMfscIkeNV7HDarQFarA892nEigp5j1t7XubE VP5T+2mKvjHx7P4uP4HVM1sgbNOGa6sJ09sguOUnkO6QIR5045pjxIPg8uGlkOP7 ZVHPpk6ktVKMmj+j/BFRhvb3roaLxfB3ox8mbHtAHcbinf9R+p14nPnXf27MB568 n386SNE4jlwbVP7v3wsgNtTRon5vXB5WXuiR6ZlKJQwcGbznq+ILS9eLVqV4LWUY YPqd+8EQe2tn/IboCNEewblq6pJgr5jWrIAMd7E9LdtofbxVw6w4xyfaMjLYwcPd CKgvxRnDyuRCUEqkA/ThUT3hLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7EYDBI XHhq1h3Kc29+EvtJtmnTMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJXh0wrD4xZffH71iYpY+EMefygWXc/1AeFw/CIAFtVBVBWj/iXfLT TI6xinCpmoO2gWuyS0zwM/yrfgId7niT3GVFTbCDWtPLh8u1BuJy8j6vz1qFxLzN 9NHs6sd1CxyQz6xeCdY359D7bBOgAhxXLH0Ir/N5Mg2OODjnx7zCsWyDfPk8p0DW V9QonNWlFplMR545SsWuEFowK72NUFPJYq7zEsyvPBY3Poys3RuVF61iOnJi4/9L ZAq5/A/UiKXpeRm1/dt1dK0+8b2wyijlF6wu2ZQ/LAZ5em846tjyPSLrxWRYrG6C CzTGoTo5dTEnD9LoaiLSruU1REDi2liH -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:16 2025 by rpki-client