$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft File: M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json) Hash identifier: 3A5dJu07PF1k3hn8wGYGA3oCHL58/1znnwBHzUl9vGI= Subject key identifier: CA:9A:48:00:5A:E6:C6:3D:04:E3:B5:86:8F:01:B0:30:13:45:5B:B6 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft Manifest number: 0BD5 Signing time: Tue 22 Jul 2025 19:06:36 +0000 Manifest this update: Tue 22 Jul 2025 19:06:36 +0000 Manifest next update: Tue 29 Jul 2025 19:06:36 +0000 Files and hashes: 1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: 1bkGkRdi1D+75nN3biYiBOJ2pW384xsOhwvFG4F3r3w=) 2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: RTDiXmwESTpSqKQ7Yx+y0Fq2bjlmzbj+gxNPdVcbubY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: Jul 22 19:06:36 2025 GMT Not After : Jul 29 19:06:36 2025 GMT Subject: CN=687fe13c-e214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:9f:0a:7f:dd:1a:c8:a9:0c:ac:94:69:0d: 91:99:6e:22:a6:e6:23:e1:f5:7f:58:d0:49:92:73: 19:b7:03:43:3f:e3:af:c7:40:26:49:58:57:4a:35: 41:6f:a1:7e:ea:45:e5:b9:3f:da:63:66:ef:6e:e8: a3:17:0d:fb:06:eb:70:5c:04:30:41:3e:3a:aa:28: a3:c6:2f:b5:7b:75:dd:26:18:4c:0d:c6:08:fe:71: 51:3a:d0:5c:58:fa:7e:64:74:ea:a2:66:cf:ef:f2: 88:0b:e6:a5:63:56:b4:53:12:8c:97:42:f7:35:88: 7e:52:05:c7:21:4c:df:15:ab:4d:c2:47:4b:e8:d8: 12:7f:2b:75:68:c4:28:b6:9c:0d:95:8e:65:49:92: ed:79:a7:0d:2a:e3:b4:b7:2f:f6:99:94:09:02:c4: b9:40:4c:bb:d5:0f:48:97:56:ff:98:02:37:48:c9: 3f:f1:f9:dc:58:cb:70:81:f0:c5:29:f3:1b:44:c8: 7b:b3:4b:17:a4:a1:a5:f5:d8:92:eb:db:e5:55:01: 6a:5e:93:d3:9e:07:b2:12:ba:9d:53:36:2d:c3:13: 3a:ab:76:73:c7:f1:ef:13:a4:3e:47:5d:8a:4f:78: 49:ab:62:a9:96:96:bc:67:b6:26:32:7c:de:8f:dd: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:48:00:5A:E6:C6:3D:04:E3:B5:86:8F:01:B0:30:13:45:5B:B6 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1e:19:64:c4:1a:9a:71:a3:bd:c6:23:98:b9:47:8b:b9:8e: eb:cc:0a:5e:eb:1d:1c:be:78:cf:32:02:04:af:72:ae:a9:8c: 3b:58:11:9d:f6:ad:c7:a3:99:70:82:d4:d0:5b:26:0f:fc:4b: 21:36:ed:74:1a:ba:09:ba:2f:86:cd:07:a3:0f:9b:f0:44:88: 15:74:3d:36:9c:01:6a:87:8b:ab:d4:43:06:73:b6:0e:21:1d: c5:b7:1f:51:4e:c1:68:6c:91:88:4f:8a:4e:f7:68:e3:63:51: 93:0a:35:4d:6f:44:ed:41:a5:b8:e8:12:76:f9:68:4a:e5:8f: ba:32:26:f9:31:36:82:93:5d:4e:da:27:7e:1b:83:51:b5:78: ad:0d:eb:cd:35:3e:5a:59:ec:b9:7b:b3:7f:78:d1:b5:6b:a1: ae:e6:5e:b1:19:fc:bb:8f:63:4b:7d:25:4f:97:62:3a:88:c8: 12:26:34:ff:63:7f:2c:02:61:19:15:76:0e:57:7e:bb:59:2e: 52:37:41:4c:91:55:3c:87:ee:ca:df:b9:50:2b:ec:24:b5:b4: de:2e:89:ae:00:28:43:74:0d:47:a9:c0:41:55:3e:6e:d3:14: 9e:d8:a2:9c:ba:a3:39:56:9e:93:6c:d0:2c:e5:0c:2c:e0:0b: e2:5e:48:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjUwNzIyMTkwNjM2WhcNMjUwNzI5MTkwNjM2WjAYMRYwFAYD VQQDEw02ODdmZTEzYy1lMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzKfCn/dGsipDKyUaQ2RmW4ipuYj4fV/WNBJknMZtwNDP+Ovx0AmSVhXSjVB b6F+6kXluT/aY2bvbuijFw37ButwXAQwQT46qiijxi+1e3XdJhhMDcYI/nFROtBc WPp+ZHTqombP7/KIC+alY1a0UxKMl0L3NYh+UgXHIUzfFatNwkdL6NgSfyt1aMQo tpwNlY5lSZLteacNKuO0ty/2mZQJAsS5QEy71Q9Il1b/mAI3SMk/8fncWMtwgfDF KfMbRMh7s0sXpKGl9diS69vlVQFqXpPTngeyErqdUzYtwxM6q3Zzx/HvE6Q+R12K T3hJq2Kplpa8Z7YmMnzej90zoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqaSABa 5sY9BOO1ho8BsDATRVu2MB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFRi9GOTAzMDI2MDFGQUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VS ZXpMbjVGaHF5cFJBaVJoMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMHhlkxBqacaO9xiOYuUeLuY7rzApe6x0cvnjPMgIEr3KuqYw7WBGd 9q3Ho5lwgtTQWyYP/EshNu10GroJui+GzQejD5vwRIgVdD02nAFqh4ur1EMGc7YO IR3Ftx9RTsFobJGIT4pO92jjY1GTCjVNb0TtQaW46BJ2+WhK5Y+6Mib5MTaCk11O 2id+G4NRtXitDevNNT5aWey5e7N/eNG1a6Gu5l6xGfy7j2NLfSVPl2I6iMgSJjT/ Y38sAmEZFXYOV367WS5SN0FMkVU8h+7K37lQK+wktbTeLomuAChDdA1HqcBBVT5u 0xSe2KKcuqM5Vp6TbNAs5Qws4AviXki2 -----END CERTIFICATE-----Generated at Wed Jul 23 23:28:16 2025 by rpki-client