$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: U2CIXZr9pN8jxFx5GRnVpSO/OKS9q42kw8x2ss2F9Ng= Subject key identifier: 59:96:86:02:26:E1:7E:40:D4:1A:E8:A7:1E:10:C3:F4:5A:7C:2B:9E Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: 8E Signing time: Sat 19 Jul 2025 06:43:44 +0000 Manifest this update: Sat 19 Jul 2025 06:43:43 +0000 Manifest next update: Sat 26 Jul 2025 06:43:43 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: Bp20c2oHoPe5upAqX/D3veQAU82BiTzRCKqPGn315eg=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: zVqTt6tzc+Il4GxP87PklggXFLaDGzjtaeUtoZhSM8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Validity Not Before: Jul 19 06:43:43 2025 GMT Not After : Jul 26 06:43:43 2025 GMT Subject: CN=687b3e9f-43b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:60:0f:94:a0:5c:30:9b:f4:2b:ac:c2:e2: 4a:1c:f1:88:b0:ce:f1:ad:1e:67:23:77:1d:4a:26: 72:13:56:d8:4d:0b:c1:aa:b8:24:a9:cb:08:4f:ff: 7c:ef:a0:56:ba:73:4b:0c:f5:df:7d:3e:87:c9:e2: 9b:71:04:6e:6b:d5:b5:e6:26:4e:31:0d:53:6e:47: fd:40:19:a5:f7:66:0a:b3:30:e7:c3:fa:71:ff:ba: 38:2d:9c:55:ba:93:47:1b:17:40:da:36:27:d8:40: f7:fb:67:71:4a:b1:f4:b2:66:de:fc:e1:0d:4b:6c: 60:3e:e5:90:32:f7:3c:ae:b3:09:31:8a:25:9d:ab: dd:2d:f7:8e:29:78:85:50:20:a9:5b:2a:96:4a:00: 7e:67:49:3a:7a:dc:f1:f3:c3:48:74:3a:c1:99:83: cc:88:82:8a:dc:81:72:3d:c1:6e:0a:ff:30:a9:53: a9:d3:17:c0:12:3c:01:a6:ad:7d:cd:78:5a:8d:a8: 05:78:ce:fd:ad:9c:af:67:d3:74:7f:f4:50:91:b7: ba:0f:bd:76:f5:fa:be:7a:65:0d:49:f2:be:a0:ed: 64:ad:29:1b:00:8e:37:3b:a8:0f:b4:2d:52:bb:5a: 11:51:46:23:32:7b:b5:97:96:a2:2f:99:d2:b7:aa: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:96:86:02:26:E1:7E:40:D4:1A:E8:A7:1E:10:C3:F4:5A:7C:2B:9E X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1e:5f:f6:77:ad:de:d3:ff:68:69:fa:35:16:5d:d4:4f:95: 2b:38:33:fc:16:c0:46:c5:4c:32:a6:07:e4:40:93:c6:4a:c2: 69:6a:8e:f5:88:52:a5:42:ad:d5:fb:08:a8:92:1c:cf:88:17: 96:b1:79:4b:86:66:6f:28:fc:ec:52:b7:16:07:8d:be:01:09: 92:6a:f6:72:ba:32:c7:36:cc:cd:fc:5b:56:f2:a9:c6:c0:ee: 96:5b:7b:50:ea:d4:7e:9f:c9:c1:4c:1b:3f:4e:dc:8f:01:8c: 28:01:08:61:bf:4f:cd:3e:69:ab:3b:83:f3:6e:8f:07:79:43: 03:15:ad:4b:38:1b:26:e3:f5:65:44:c7:c9:24:e3:ff:e1:77: c9:51:d7:c7:bf:98:66:93:d6:40:f4:44:1f:b0:2f:ff:c5:66: bb:0e:cf:de:b9:44:91:6d:03:15:62:85:83:e9:a7:39:e2:47: 40:c3:2c:4f:d4:15:83:34:56:0a:71:3e:21:62:06:ca:0a:d8: 51:c4:59:4b:75:df:3e:da:32:22:bf:ea:fb:4b:cb:5a:7e:eb: bf:b0:5a:4d:14:27:a1:24:7f:9a:9c:8a:ec:19:1c:62:4f:e1: 39:9e:bf:a4:b5:7e:9a:77:4c:9f:2c:a4:87:7b:07:54:d6:98: 5a:a9:91:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKEUwRTgwODMwNjU5NUZFNjhENUYyODFBOTYyQUY2REY1 MUU4NkY5MzIwHhcNMjUwNzE5MDY0MzQzWhcNMjUwNzI2MDY0MzQzWjAYMRYwFAYD VQQDEw02ODdiM2U5Zi00M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtRgD5SgXDCb9CuswuJKHPGIsM7xrR5nI3cdSiZyE1bYTQvBqrgkqcsIT/98 76BWunNLDPXffT6HyeKbcQRua9W15iZOMQ1Tbkf9QBml92YKszDnw/px/7o4LZxV upNHGxdA2jYn2ED3+2dxSrH0smbe/OENS2xgPuWQMvc8rrMJMYolnavdLfeOKXiF UCCpWyqWSgB+Z0k6etzx88NIdDrBmYPMiIKK3IFyPcFuCv8wqVOp0xfAEjwBpq19 zXhajagFeM79rZyvZ9N0f/RQkbe6D7129fq+emUNSfK+oO1krSkbAI43O6gPtC1S u1oRUUYjMnu1l5aiL5nSt6otwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmWhgIm 4X5A1Bropx4Qw/RafCueMB8GA1UdIwQYMBaAFODoCDBllf5o1fKBqWKvbfUehvky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9BQTk4NTlGODhD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9talY4b0dwWXE5dDlSNkct VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9BQTk4NTlGODhDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9t alY4b0dwWXE5dDlSNkctVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Hl/2d63e0/9oafo1Fl3UT5UrODP8FsBGxUwypgfkQJPGSsJpao71 iFKlQq3V+wiokhzPiBeWsXlLhmZvKPzsUrcWB42+AQmSavZyujLHNszN/FtW8qnG wO6WW3tQ6tR+n8nBTBs/TtyPAYwoAQhhv0/NPmmrO4Pzbo8HeUMDFa1LOBsm4/Vl RMfJJOP/4XfJUdfHv5hmk9ZA9EQfsC//xWa7Ds/euUSRbQMVYoWD6ac54kdAwyxP 1BWDNFYKcT4hYgbKCthRxFlLdd8+2jIiv+r7S8tafuu/sFpNFCehJH+anIrsGRxi T+E5nr+ktX6ad0yfLKSHewdU1phaqZG1 -----END CERTIFICATE-----Generated at Sat Jul 19 19:01:36 2025 by rpki-client