$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json) Hash identifier: xk7BnLe45LgQx6Jlr50pA0doG8JaVDVn/q1UYTdXi0Y= Subject key identifier: 0D:FE:0C:F6:7E:DF:EA:9A:65:66:2A:96:14:B4:6A:DC:54:5D:AB:72 Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft Manifest number: 019A Signing time: Wed 23 Jul 2025 03:37:42 +0000 Manifest this update: Wed 23 Jul 2025 03:37:41 +0000 Manifest next update: Wed 30 Jul 2025 03:37:41 +0000 Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: +DdlXw9hwuHiOItVgZNtiCGGFMiT91GSMuhh/TgqlVM=) 2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: LDgnrMv06w2uH/2SaOTlpFRL0ITCYwRDAQrZfxJgOVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Validity Not Before: Jul 23 03:37:41 2025 GMT Not After : Jul 30 03:37:41 2025 GMT Subject: CN=68805905-03c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:0f:ff:88:6a:5f:f8:8e:db:cd:b6:10:2d: ca:3e:61:98:68:cc:ac:cb:c2:2a:4f:22:bc:a7:8b: c7:59:a8:b2:a6:33:22:b6:e1:5a:4f:dd:51:db:67: eb:5a:92:8a:47:11:66:a5:48:9c:d5:ff:2a:d1:4d: 5f:28:cd:1e:26:56:06:54:ce:30:af:83:fd:0c:af: 82:84:42:6b:4a:1a:cd:40:8b:b7:c4:50:e2:59:75: 6c:36:bd:24:8b:d0:a9:26:64:07:86:0a:2c:f5:13: f9:71:dd:d3:f3:b1:7e:aa:13:c6:c4:0d:87:f5:4b: 97:5e:60:bf:8e:84:f1:3d:66:ee:59:f4:33:12:74: 5b:d7:20:22:f4:7d:5f:3b:b4:60:5c:23:d1:74:d9: d3:33:89:8a:cc:b1:06:b9:2b:46:59:cd:c1:00:48: b5:7c:b2:b6:42:3f:98:b1:4a:a3:7f:11:c3:f0:6d: 9c:20:bb:c1:e7:8f:a7:1f:aa:53:69:45:15:f0:38: a9:82:93:a4:bd:d4:86:7b:12:64:b5:69:e4:8e:53: 4d:f9:e5:f2:00:a7:0d:1f:03:71:7b:69:98:6b:7b: 24:55:60:de:ee:78:d5:31:5a:85:f1:4f:b0:f8:2f: 33:61:1e:11:45:4a:cc:75:31:77:cd:be:29:e8:43: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FE:0C:F6:7E:DF:EA:9A:65:66:2A:96:14:B4:6A:DC:54:5D:AB:72 X509v3 Authority Key Identifier: keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:6b:c1:cd:c2:84:fa:03:5a:90:6d:0a:f2:6b:1a:bb:51: a2:05:d8:6c:f8:a3:0a:18:69:5c:6d:ee:c1:0d:64:55:7d:7e: 85:e7:98:20:15:30:65:cd:bb:63:3e:a5:df:2a:d4:95:9f:b6: d8:7f:80:5a:38:af:f3:fd:5f:a0:a6:8f:c3:1f:9d:16:9a:31: 5b:10:0a:01:b6:d3:5c:70:17:95:17:b0:53:e7:df:b1:37:5d: 3e:b6:27:b5:ca:c2:22:49:37:a1:63:ea:50:ee:e7:f9:07:52: e4:3f:6f:e7:d9:e3:92:e9:a0:76:e1:69:6a:28:7e:a4:4f:9b: 7f:e9:6a:54:f9:78:aa:6d:34:00:1d:d0:eb:46:ac:d7:c8:90: f0:aa:04:16:5b:d2:f7:d2:8d:49:c7:80:67:35:b1:3c:25:6c: 26:4d:bd:dc:44:1d:af:9e:ed:d0:47:ce:23:77:32:22:96:c1: 9c:9e:75:58:8e:bd:69:92:67:7f:6d:d1:46:f8:79:51:6c:40: 56:41:02:ea:52:28:0c:b6:0f:b6:78:a7:cb:7b:0e:65:2a:d9: f7:5a:57:4d:2e:ef:79:e9:65:01:f7:9c:41:b8:1c:2a:09:6e: 14:6d:59:00:9b:0d:8d:ba:72:a3:a8:ef:e0:9e:c5:eb:ea:75: 06:03:c7:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE ODg3MEUzNzMwHhcNMjUwNzIzMDMzNzQxWhcNMjUwNzMwMDMzNzQxWjAYMRYwFAYD VQQDEw02ODgwNTkwNS0wM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A4P/4hqX/iO2822EC3KPmGYaMysy8IqTyK8p4vHWaiypjMituFaT91R22fr WpKKRxFmpUic1f8q0U1fKM0eJlYGVM4wr4P9DK+ChEJrShrNQIu3xFDiWXVsNr0k i9CpJmQHhgos9RP5cd3T87F+qhPGxA2H9UuXXmC/joTxPWbuWfQzEnRb1yAi9H1f O7RgXCPRdNnTM4mKzLEGuStGWc3BAEi1fLK2Qj+YsUqjfxHD8G2cILvB54+nH6pT aUUV8DipgpOkvdSGexJktWnkjlNN+eXyAKcNHwNxe2mYa3skVWDe7njVMVqF8U+w +C8zYR4RRUrMdTF3zb4p6EO+FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3+DPZ+ 3+qaZWYqlhS0atxUXatyMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4 N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0 M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l UDVJcnU0MnFzZGZZaHc0M00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMmvBzcKE+gNakG0K8msau1GiBdhs+KMKGGlcbe7BDWRVfX6F55gg FTBlzbtjPqXfKtSVn7bYf4BaOK/z/V+gpo/DH50WmjFbEAoBttNccBeVF7BT59+x N10+tie1ysIiSTehY+pQ7uf5B1LkP2/n2eOS6aB24WlqKH6kT5t/6WpU+XiqbTQA HdDrRqzXyJDwqgQWW9L30o1Jx4BnNbE8JWwmTb3cRB2vnu3QR84jdzIilsGcnnVY jr1pkmd/bdFG+HlRbEBWQQLqUigMtg+2eKfLew5lKtn3WldNLu956WUB95xBuBwq CW4UbVkAmw2NunKjqO/gnsXr6nUGA8dD -----END CERTIFICATE-----Generated at Wed Jul 23 08:21:19 2025 by rpki-client