$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: 8AhkExTvrSb2nXB1CAcPGgK5D+i1wWdXw0rHB53Gsj8= Subject key identifier: 49:51:BF:68:9F:2A:5D:AC:69:4B:37:AF:08:94:55:CF:C9:CD:37:17 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0348 Signing time: Sat 19 Jul 2025 01:26:16 +0000 Manifest this update: Sat 19 Jul 2025 01:26:15 +0000 Manifest next update: Sat 26 Jul 2025 01:26:15 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: 9ueVtqxvoKMEkeA4MemxJMToW9l5gTTFERHXbxfiKwc=) 2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI=) 3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: UriRXIOaFvm5u1qncQTi3IERwvU0QHA/1gyCNIPeCng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Jul 19 01:26:15 2025 GMT Not After : Jul 26 01:26:15 2025 GMT Subject: CN=687af438-1910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:95:0f:8b:e9:04:63:8b:15:29:47:d2:5e: ee:b6:8d:f5:2f:b5:7a:93:03:cd:c3:e6:16:62:22: 93:3d:ac:75:30:f4:0b:30:2e:a7:47:e7:5a:24:43: 6a:08:98:b3:ed:5d:c6:7d:17:11:71:4d:30:15:a4: 46:f1:39:97:30:27:29:07:07:52:a2:b0:ca:f8:c0: 99:d8:38:94:b5:c2:15:20:69:8d:de:85:7b:56:05: ed:02:be:a5:b1:6f:46:ea:c3:0d:5d:a0:74:14:1e: 41:38:b1:19:10:a9:a8:3c:39:ec:0e:e9:ed:bb:8c: 88:cc:1f:15:41:ff:4e:3a:d0:0e:64:51:12:b2:f7: 94:57:63:bc:ba:8f:54:e4:54:12:a5:96:68:63:e3: ea:fd:7e:48:a8:14:87:c1:cd:b6:7b:aa:e9:0c:4a: 59:13:de:40:69:95:63:9d:28:75:5c:ad:b3:fe:ba: c7:ec:33:8a:f9:0f:ea:40:af:20:02:53:fe:87:d3: 0d:af:d6:20:24:c2:45:fd:47:d1:6f:68:e2:f5:b2: c6:38:a1:6e:13:cd:5b:3c:53:90:b2:1a:f8:b3:5f: b8:59:b8:0a:83:5b:75:8b:26:c0:fa:0e:05:fd:cf: d5:da:44:03:0a:88:55:19:14:78:eb:17:49:4c:4d: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:BF:68:9F:2A:5D:AC:69:4B:37:AF:08:94:55:CF:C9:CD:37:17 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f7:ca:db:b4:62:45:45:37:2f:d3:ba:dd:87:96:e9:f3:c1: a2:a9:d0:27:3b:c0:87:fe:6a:53:66:6d:82:a1:e8:eb:3f:74: 7a:d0:74:d0:14:1d:4c:3f:41:94:81:18:b4:79:12:eb:53:74: 85:87:e3:2e:25:a2:ce:14:6a:e3:d0:8e:cc:d1:9b:82:1a:0c: 7a:95:87:53:e8:a1:fd:fc:4b:81:ef:4d:03:03:ce:7f:9a:e0: bc:8a:70:58:89:7a:5c:b4:a3:44:c8:db:11:1b:e6:83:53:53: e8:24:05:f5:6a:d4:b0:e4:f3:5a:4d:02:11:32:4e:1e:0a:40: fc:b0:5e:78:69:e6:7f:49:cf:33:cd:b2:c9:d2:3e:f7:ec:69: a9:73:a4:9d:f6:c8:d3:71:c9:7c:06:2b:1e:33:ee:bd:60:5c: df:4c:4e:c4:50:c2:8e:b7:8c:44:bd:ea:aa:4e:46:72:19:53: ad:79:35:ae:c6:c2:a1:bc:0d:ea:c5:fb:93:a0:ad:45:0d:6e: e0:49:39:73:57:66:a3:e0:bf:74:b2:cc:67:d5:1c:2b:69:3d: a8:d8:05:e5:44:9e:fc:f4:d8:6a:74:b0:f7:88:48:61:e6:26: f2:a4:5d:34:9c:9c:ee:de:d8:72:62:52:68:53:bc:c1:9c:ee: a0:30:a5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUwNzE5MDEyNjE1WhcNMjUwNzI2MDEyNjE1WjAYMRYwFAYD VQQDEw02ODdhZjQzOC0xOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zGVD4vpBGOLFSlH0l7uto31L7V6kwPNw+YWYiKTPax1MPQLMC6nR+daJENq CJiz7V3GfRcRcU0wFaRG8TmXMCcpBwdSorDK+MCZ2DiUtcIVIGmN3oV7VgXtAr6l sW9G6sMNXaB0FB5BOLEZEKmoPDnsDuntu4yIzB8VQf9OOtAOZFESsveUV2O8uo9U 5FQSpZZoY+Pq/X5IqBSHwc22e6rpDEpZE95AaZVjnSh1XK2z/rrH7DOK+Q/qQK8g AlP+h9MNr9YgJMJF/UfRb2ji9bLGOKFuE81bPFOQshr4s1+4WbgKg1t1iybA+g4F /c/V2kQDCohVGRR46xdJTE3tmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElRv2if Kl2saUs3rwiUVc/JzTcXMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf98rbtGJFRTcv07rdh5bp88GiqdAnO8CH/mpTZm2CoejrP3R60HTQ FB1MP0GUgRi0eRLrU3SFh+MuJaLOFGrj0I7M0ZuCGgx6lYdT6KH9/EuB700DA85/ muC8inBYiXpctKNEyNsRG+aDU1PoJAX1atSw5PNaTQIRMk4eCkD8sF54aeZ/Sc8z zbLJ0j737Gmpc6Sd9sjTccl8BiseM+69YFzfTE7EUMKOt4xEveqqTkZyGVOteTWu xsKhvA3qxfuToK1FDW7gSTlzV2aj4L90ssxn1RwraT2o2AXlRJ789NhqdLD3iEhh 5ibypF00nJzu3thyYlJoU7zBnO6gMKU6 -----END CERTIFICATE-----Generated at Sun Jul 20 07:23:21 2025 by rpki-client