$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: UEMF2ZTU0uRR0PoU+DXrKui30iA37Jjr+PLc/J4sWOw= Subject key identifier: 4E:15:E1:EB:18:04:A3:95:8A:14:43:FA:E5:FB:BB:0B:7B:6E:71:9A Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0BC9 Signing time: Fri 18 Jul 2025 19:06:47 +0000 Manifest this update: Fri 18 Jul 2025 19:06:46 +0000 Manifest next update: Fri 25 Jul 2025 19:06:46 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: ivPW/FGO5QfWg2LaJ73WgiN26JRHwhWNDwGsP7rYP4c=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Jul 18 19:06:46 2025 GMT Not After : Jul 25 19:06:46 2025 GMT Subject: CN=687a9b46-f0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:c9:c2:2b:1a:10:80:df:e3:78:16:4c:22: dd:6d:67:b5:9d:14:4a:bd:5a:e8:5e:bf:52:90:04: ab:e4:e0:27:0b:74:17:28:18:2d:47:19:bf:9a:7e: 4a:42:24:ca:5b:b2:ae:a3:dd:93:d0:3c:b7:fc:fa: 1e:f0:74:46:43:a5:01:3d:ac:a6:f5:4e:c6:84:fa: 87:51:39:d8:02:b5:63:67:9a:c1:9c:1a:c7:dc:0a: c6:83:20:20:24:38:cf:55:2e:d3:2a:ca:2e:e4:14: 14:45:71:b2:cd:83:ee:45:15:7f:72:e6:7d:30:93: 0f:8f:42:93:f9:44:28:ab:a0:80:0e:2c:9b:ee:99: 2e:aa:08:61:ad:4f:57:b7:ff:44:74:17:39:b9:96: 1f:65:e5:de:1c:d6:38:75:4a:62:f6:8d:80:2c:a5: d4:b4:76:07:df:d4:3d:f2:1c:4b:b1:f3:9c:f9:58: fb:8d:41:3c:62:93:a8:6f:06:ae:5b:85:f4:fe:33: 99:04:f5:e6:d4:e6:93:22:de:89:4d:14:6f:30:de: be:3b:02:4e:01:2a:f1:b2:57:b9:ac:1c:1d:79:a6: 7f:7c:62:69:26:22:74:fb:8e:b4:48:68:4b:1a:ea: 49:b4:5c:94:ec:94:cf:4e:ff:29:1a:8d:07:ae:86: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:15:E1:EB:18:04:A3:95:8A:14:43:FA:E5:FB:BB:0B:7B:6E:71:9A X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:35:50:2e:be:99:cc:b4:a3:a2:b3:54:7d:0b:a1:4d:dc:15: 07:d2:58:40:30:d6:9a:82:35:5f:44:0b:9f:da:d6:9d:e9:bc: bc:78:9f:71:54:f9:f1:f6:fd:ba:34:60:c7:e9:62:ec:98:2f: 59:ab:16:ae:91:c7:01:6e:d3:db:39:e7:5c:c2:84:32:3e:90: 9b:06:3c:32:30:d8:76:b3:1e:f5:38:e2:35:f6:6d:39:1c:76: 70:73:85:1c:6a:1c:19:2e:52:49:dd:e6:e3:a5:5a:92:72:2a: e3:6e:15:16:8e:e1:c9:1b:fc:12:2f:bc:c5:a8:0f:11:57:e2: 85:b8:42:ce:88:77:5f:a7:0d:ea:45:f8:a0:cb:c6:d1:5f:28: 75:87:91:36:23:18:3c:b7:22:de:4a:5c:62:f3:1e:0b:25:92: 09:c3:33:8c:c2:35:57:ab:2e:d6:7a:75:56:2e:88:c1:76:a5: 78:10:eb:a6:36:cc:65:ec:7e:8c:c2:b6:13:a4:54:f1:0f:2e: 7c:9e:2f:44:f0:3a:e4:b4:7c:f7:3e:0f:9c:0c:cf:46:3e:84: c8:f1:42:df:9e:96:41:5b:ad:d7:eb:84:ff:b1:9c:4f:50:a4: e4:78:54:3d:c5:5b:d8:7a:bd:62:5d:24:73:d5:25:39:0f:ba: 6a:16:e3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUwNzE4MTkwNjQ2WhcNMjUwNzI1MTkwNjQ2WjAYMRYwFAYD VQQDEw02ODdhOWI0Ni1mMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HPJwisaEIDf43gWTCLdbWe1nRRKvVroXr9SkASr5OAnC3QXKBgtRxm/mn5K QiTKW7Kuo92T0Dy3/Poe8HRGQ6UBPaym9U7GhPqHUTnYArVjZ5rBnBrH3ArGgyAg JDjPVS7TKsou5BQURXGyzYPuRRV/cuZ9MJMPj0KT+UQoq6CADiyb7pkuqghhrU9X t/9EdBc5uZYfZeXeHNY4dUpi9o2ALKXUtHYH39Q98hxLsfOc+Vj7jUE8YpOobwau W4X0/jOZBPXm1OaTIt6JTRRvMN6+OwJOASrxsle5rBwdeaZ/fGJpJiJ0+460SGhL GupJtFyU7JTPTv8pGo0HroY8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4V4esY BKOVihRD+uX7uwt7bnGaMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUNVAuvpnMtKOis1R9C6FN3BUH0lhAMNaagjVfRAuf2tad6by8eJ9x VPnx9v26NGDH6WLsmC9ZqxaukccBbtPbOedcwoQyPpCbBjwyMNh2sx71OOI19m05 HHZwc4UcahwZLlJJ3ebjpVqScirjbhUWjuHJG/wSL7zFqA8RV+KFuELOiHdfpw3q Rfigy8bRXyh1h5E2Ixg8tyLeSlxi8x4LJZIJwzOMwjVXqy7WenVWLojBdqV4EOum Nsxl7H6MwrYTpFTxDy58ni9E8DrktHz3Pg+cDM9GPoTI8ULfnpZBW63X64T/sZxP UKTkeFQ9xVvYer1iXSRz1SU5D7pqFuOs -----END CERTIFICATE-----Generated at Sun Jul 20 16:35:58 2025 by rpki-client