$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: I/ituX+9cu08dncZr/05t4JB2Ca/CVeIIEahowOw+Jo= Subject key identifier: 0C:B7:3A:F3:56:88:E4:6C:57:34:85:F6:F9:72:DC:E0:D9:BA:BA:83 Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 0679 Signing time: Fri 18 Jul 2025 22:40:20 +0000 Manifest this update: Fri 18 Jul 2025 22:40:20 +0000 Manifest next update: Fri 25 Jul 2025 22:40:20 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: z/1G4P+zPUIOe9O/WxxQ138jJ3T/8IrfMJDiUD3MjEA=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: Jul 18 22:40:20 2025 GMT Not After : Jul 25 22:40:20 2025 GMT Subject: CN=687acd54-0de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:2d:bb:0e:20:ca:b9:74:36:c7:b2:2e:95: d7:cf:4a:ae:29:8f:9d:8d:be:b9:ce:ca:93:0e:7d: 0b:09:fa:85:71:10:24:3a:68:81:8c:6b:db:71:07: 99:7a:51:c6:18:1c:1f:13:15:72:79:0d:c3:fd:53: d5:6d:50:9a:f8:4c:1a:3f:20:25:fe:1b:de:0c:f1: 47:89:76:51:9f:2e:24:9d:1e:74:c6:7b:5e:e3:61: 93:3f:32:da:57:b0:50:39:eb:b0:af:68:84:ca:17: 16:ff:7f:13:04:e5:31:60:29:3d:c3:a7:f7:5e:ca: 60:8f:06:ff:57:a3:98:cc:8c:85:1d:37:0c:c4:dc: fd:44:27:31:fa:c6:a9:29:b3:70:51:23:14:87:4a: 1f:ba:d3:eb:0f:3a:75:47:da:a9:a8:4d:d3:99:60: 20:06:1e:8c:a3:4f:ea:d1:8c:a4:d4:32:e3:f4:ab: 5d:f0:fc:76:b6:ce:72:a2:05:14:97:ff:47:e3:0b: 6d:fb:b7:9c:9d:c9:6d:94:4f:55:4f:ff:90:93:88: ba:6c:5c:af:28:3c:58:e6:e6:17:c9:ff:f8:f3:4f: 4e:6b:6c:b5:50:b5:d1:63:34:c3:1d:53:98:5c:c4: 45:1e:93:70:2e:f5:bb:2f:39:36:c5:89:c6:eb:b8: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:3A:F3:56:88:E4:6C:57:34:85:F6:F9:72:DC:E0:D9:BA:BA:83 X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:9d:4d:f6:45:14:5d:72:f8:79:e0:2a:a3:19:90:97:ed:57: 48:e3:89:ba:d3:a3:97:bd:37:fe:93:3c:27:ec:83:8b:dd:0e: 4c:63:95:b1:9d:4b:84:cb:71:ae:ac:b6:03:bf:30:f3:8b:0c: e1:cc:0a:3d:f9:a6:be:83:f7:02:c1:f0:54:82:8b:9e:98:07: 4c:ca:95:d9:40:a5:44:80:ab:bb:72:15:7a:17:dc:a8:fd:45: 9a:14:81:ee:2b:e8:e8:5c:db:ff:2a:30:4f:14:83:d6:77:98: 4c:fd:00:0e:b6:16:75:fa:07:a9:6a:b9:02:c6:af:29:d0:0f: e3:28:13:96:96:98:67:1b:82:f4:58:72:45:ed:d2:4c:c1:75: 35:c3:2f:27:78:ad:d3:c6:5e:08:09:d6:50:6a:cb:42:9a:0f: 86:81:67:52:7f:e9:d1:b5:42:69:ec:6d:d6:f1:89:9d:b1:db: 19:74:93:57:35:3f:c9:67:88:1a:a0:11:c1:be:ee:52:6c:d3: d5:c5:4b:25:ed:90:02:05:7b:ce:d7:f5:aa:1f:c5:e9:27:d4: 9f:12:01:18:db:8d:36:ec:21:1d:6d:ba:72:73:b9:e1:f9:38: 75:aa:be:fa:ad:cc:2c:10:79:86:b2:06:90:99:84:9f:93:c8: 1b:03:9a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjUwNzE4MjI0MDIwWhcNMjUwNzI1MjI0MDIwWjAYMRYwFAYD VQQDEw02ODdhY2Q1NC0wZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdUtuw4gyrl0NseyLpXXz0quKY+djb65zsqTDn0LCfqFcRAkOmiBjGvbcQeZ elHGGBwfExVyeQ3D/VPVbVCa+EwaPyAl/hveDPFHiXZRny4knR50xnte42GTPzLa V7BQOeuwr2iEyhcW/38TBOUxYCk9w6f3Xspgjwb/V6OYzIyFHTcMxNz9RCcx+sap KbNwUSMUh0ofutPrDzp1R9qpqE3TmWAgBh6Mo0/q0Yyk1DLj9Ktd8Px2ts5yogUU l/9H4wtt+7ecncltlE9VT/+Qk4i6bFyvKDxY5uYXyf/4809Oa2y1ULXRYzTDHVOY XMRFHpNwLvW7Lzk2xYnG67jCQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy3OvNW iORsVzSF9vly3ODZurqDMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpnU32RRRdcvh54CqjGZCX7VdI44m606OXvTf+kzwn7IOL3Q5MY5Wx nUuEy3GurLYDvzDziwzhzAo9+aa+g/cCwfBUgouemAdMypXZQKVEgKu7chV6F9yo /UWaFIHuK+joXNv/KjBPFIPWd5hM/QAOthZ1+geparkCxq8p0A/jKBOWlphnG4L0 WHJF7dJMwXU1wy8neK3Txl4ICdZQastCmg+GgWdSf+nRtUJp7G3W8YmdsdsZdJNX NT/JZ4gaoBHBvu5SbNPVxUsl7ZACBXvO1/WqH8XpJ9SfEgEY24027CEdbbpyc7nh +Th1qr76rcwsEHmGsgaQmYSfk8gbA5p/ -----END CERTIFICATE-----Generated at Sun Jul 20 04:35:50 2025 by rpki-client