$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: REKrOAyxrnBWZccGkfmxBZmEA/dqt0yMEKzTrPZHmZg= Subject key identifier: 49:C9:41:7F:96:3C:A5:FB:D5:21:AC:D6:61:FC:6F:4C:1B:4E:3C:04 Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 05C6 Signing time: Fri 18 Jul 2025 23:24:58 +0000 Manifest this update: Fri 18 Jul 2025 23:24:57 +0000 Manifest next update: Fri 25 Jul 2025 23:24:57 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: 6MEOP6XmbPT+a8+Wx7Euq7/w6XJx7Ul5NKw6c77Q1C0=) 2: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: Ews4xG+BhGr1YKU7wFoc4NdQF1qugSkJAZpv3+K1VQA=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: ixAKLgsVNfo1Pz8i7g4aRb3j68KYgsQlay7em4iJOQg=) 4: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: pKLk6OfJnvru45xZOE/FJIK5VrkZPKYSrNqrwCtPYN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: Jul 18 23:24:57 2025 GMT Not After : Jul 25 23:24:57 2025 GMT Subject: CN=687ad7c9-34eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:c3:56:30:95:05:13:92:42:4e:66:f3:54: 15:91:f1:ac:4d:b8:7c:d8:a1:e1:54:21:e6:30:36: 0e:9f:02:40:28:15:ac:ee:cc:39:9e:4d:a8:97:fb: b9:7b:27:a0:c1:f1:94:42:5a:59:1b:03:bf:95:2f: ff:a3:fe:c4:4d:ac:72:b9:58:7d:58:1b:5f:ab:21: 0e:7a:09:78:6c:d7:12:a9:5f:34:dc:5f:e2:d3:e1: 53:64:cf:48:9e:41:16:99:87:e5:f3:97:03:9d:35: 07:4e:8a:1a:5e:73:03:77:32:c1:a2:fb:e9:e8:90: 9f:da:ec:ab:09:38:c2:f3:02:33:fd:82:09:d8:a0: 5c:47:54:18:2c:8a:d0:20:e4:ce:af:f4:93:81:6c: 40:aa:bd:ef:87:ec:83:d1:6b:17:de:5d:5e:b3:f3: e9:4d:57:93:9c:fc:01:ba:ec:fc:e5:94:ad:80:b1: f7:f6:46:bc:a0:1d:0a:fb:ab:48:5c:60:15:dd:24: f2:96:90:f3:02:46:d3:d7:43:12:8b:b7:c4:77:e1: 03:81:86:95:70:b0:94:36:5d:6d:d6:12:21:1b:a5: c1:7f:26:03:68:ac:3f:02:ab:b7:ba:6c:ab:0d:65: 7c:23:e3:35:d9:82:dc:53:06:f7:11:30:ce:35:ff: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C9:41:7F:96:3C:A5:FB:D5:21:AC:D6:61:FC:6F:4C:1B:4E:3C:04 X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7f:6c:b0:af:55:7a:23:bb:c7:ed:f4:22:e2:4a:e9:c6:bf: 6c:68:e4:a0:ec:fe:61:d6:ce:2e:f0:a9:bc:f9:8f:4d:a5:85: 35:e5:f2:45:07:d1:e6:a6:c3:cc:42:f4:8b:35:a8:5d:d2:b1: 22:ae:7f:96:88:cd:91:b2:51:61:d5:0b:99:1f:54:6d:75:0f: ac:0c:62:06:46:fb:7b:6e:e4:4f:a5:83:40:96:c4:35:ea:b7: 38:4f:a0:c6:6a:0e:7d:f8:32:10:2a:c4:48:5b:b4:61:ff:59: 40:3c:56:ee:e1:82:56:7e:11:04:96:33:f5:08:df:3f:68:5f: fa:13:ba:94:9e:e7:a5:6b:48:99:89:7d:eb:bf:84:48:c1:f5: bf:d4:74:09:3f:ab:f8:aa:7b:37:36:95:6d:f2:11:be:5e:06: ed:71:86:cb:f0:02:95:12:e2:e3:f5:b3:2c:83:c2:31:19:a7: 4c:94:b0:0a:9d:db:95:5f:11:e3:8f:ed:85:b5:5b:2b:61:5e: d7:e3:0e:af:f0:ed:2a:49:5f:c0:4f:23:77:79:77:08:fa:ac: 29:17:26:7d:69:7f:fb:14:8e:89:66:bb:d2:9a:ba:fb:0f:11: ca:50:ce:59:d1:82:d8:12:b9:fb:19:12:1d:cd:42:c5:e0:f6: 65:df:93:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjUwNzE4MjMyNDU3WhcNMjUwNzI1MjMyNDU3WjAYMRYwFAYD VQQDEw02ODdhZDdjOS0zNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iXDVjCVBROSQk5m81QVkfGsTbh82KHhVCHmMDYOnwJAKBWs7sw5nk2ol/u5 eyegwfGUQlpZGwO/lS//o/7ETaxyuVh9WBtfqyEOegl4bNcSqV803F/i0+FTZM9I nkEWmYfl85cDnTUHTooaXnMDdzLBovvp6JCf2uyrCTjC8wIz/YIJ2KBcR1QYLIrQ IOTOr/STgWxAqr3vh+yD0WsX3l1es/PpTVeTnPwBuuz85ZStgLH39ka8oB0K+6tI XGAV3STylpDzAkbT10MSi7fEd+EDgYaVcLCUNl1t1hIhG6XBfyYDaKw/Aqu3umyr DWV8I+M12YLcUwb3ETDONf95vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnJQX+W PKX71SGs1mH8b0wbTjwEMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRf2ywr1V6I7vH7fQi4krpxr9saOSg7P5h1s4u8Km8+Y9NpYU15fJF B9HmpsPMQvSLNahd0rEirn+WiM2RslFh1QuZH1RtdQ+sDGIGRvt7buRPpYNAlsQ1 6rc4T6DGag59+DIQKsRIW7Rh/1lAPFbu4YJWfhEEljP1CN8/aF/6E7qUnuela0iZ iX3rv4RIwfW/1HQJP6v4qns3NpVt8hG+XgbtcYbL8AKVEuLj9bMsg8IxGadMlLAK nduVXxHjj+2FtVsrYV7X4w6v8O0qSV/ATyN3eXcI+qwpFyZ9aX/7FI6JZrvSmrr7 DxHKUM5Z0YLYErn7GRIdzULF4PZl35NW -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:56 2025 by rpki-client