$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: ETRwG1TgY/eFqZfvVBt5fiOypm3CS3olOe+CD7DycMg= Subject key identifier: 3A:29:6C:C0:CD:FD:BD:CE:3D:3D:DE:4A:43:3F:0C:BB:59:CA:CE:F3 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 076B Signing time: Fri 18 Jul 2025 21:54:55 +0000 Manifest this update: Fri 18 Jul 2025 21:54:54 +0000 Manifest next update: Fri 25 Jul 2025 21:54:54 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: op3OFSqo0fSmeeWweRlYuxLWE9Ba/S+PumrcppUm33w=) 2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: l3P+jzCX7aHklMXmE9uReg8fCRmiQ/j2jziDBZRRn4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Jul 18 21:54:54 2025 GMT Not After : Jul 25 21:54:54 2025 GMT Subject: CN=687ac2af-d5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:49:08:14:bb:c6:2d:dc:26:7e:51:2b:e4: bf:e4:bc:bb:fe:4e:b3:d0:d2:6f:56:27:58:26:88: 53:ce:ca:68:76:01:45:f2:35:78:dc:a1:7a:5a:8a: f6:fe:29:b5:6f:88:d3:a9:7d:05:13:4b:75:e2:73: c0:8f:6a:d2:1e:0f:b7:55:3b:8d:d4:d4:6e:ea:35: 90:69:bb:00:a7:82:b0:36:ad:47:2d:c0:f2:cc:8f: 53:41:27:78:fd:27:b0:d4:9c:f8:4a:7e:7b:62:58: 87:e1:76:a3:ae:62:32:3b:43:dc:a2:f6:9c:2c:02: 14:ec:5c:65:2e:cb:5c:2c:8c:fa:f0:82:17:d4:07: 36:f1:af:ed:61:dc:09:b3:25:b2:1d:24:5e:0a:6d: 06:27:25:e3:17:29:83:8c:f6:50:7a:46:c5:98:84: 9a:20:63:d0:50:9d:21:85:29:1c:e1:7d:df:27:19: 8b:c8:fc:b4:bc:df:90:58:5a:06:37:16:73:39:a9: 62:64:7a:eb:84:60:94:1c:22:5c:b7:f4:ae:3b:bd: b9:71:84:28:a1:86:7a:a7:91:ca:6e:f7:46:ef:c5: b4:5f:09:b6:f5:28:76:71:5e:df:95:c8:8e:f3:89: 26:9d:49:30:82:07:21:88:41:19:36:ac:42:27:ff: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:6C:C0:CD:FD:BD:CE:3D:3D:DE:4A:43:3F:0C:BB:59:CA:CE:F3 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e3:74:48:d1:bd:f0:44:6e:fd:1b:ce:43:0c:1f:0f:1a:e1: b2:e5:10:5a:01:fc:39:df:6a:d9:0f:95:c4:61:eb:f5:fa:7c: b4:e6:c3:9e:0a:a0:27:db:68:77:b7:62:cd:a7:07:a0:dd:d1: 80:0f:3c:10:0e:45:3a:c7:d0:dc:62:8c:db:70:73:96:39:08: 54:f1:1b:b1:a8:8a:1a:c3:98:3f:60:ed:30:e7:3f:a0:4b:0c: 3a:c6:9d:34:5f:38:85:43:66:cd:3f:1f:56:41:73:36:33:b7: 25:28:a6:fa:9b:74:b4:77:1e:28:59:e3:2c:a5:a4:eb:45:90: 0f:80:93:3d:c0:e2:36:c7:04:74:a5:98:13:25:ca:19:f1:38: 45:c7:0d:58:9e:21:10:8a:73:ec:7a:20:d4:6b:00:3e:50:56: 6e:8b:3b:71:73:60:ae:84:9d:60:97:4d:40:52:cb:bf:7e:dd: 42:ba:67:4b:a5:b1:75:61:86:76:2c:96:77:7f:62:49:de:b0: 92:f7:92:d1:85:43:4b:91:1b:f3:5e:c6:89:1c:70:b9:51:c6: 99:14:38:6b:5f:b3:f4:92:ba:06:aa:a1:be:34:36:83:11:3c: 92:81:0c:4f:25:59:e2:89:e7:26:99:1c:79:d7:b0:3d:00:8b: 5e:21:af:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNzE4MjE1NDU0WhcNMjUwNzI1MjE1NDU0WjAYMRYwFAYD VQQDEw02ODdhYzJhZi1kNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp25JCBS7xi3cJn5RK+S/5Ly7/k6z0NJvVidYJohTzspodgFF8jV43KF6Wor2 /im1b4jTqX0FE0t14nPAj2rSHg+3VTuN1NRu6jWQabsAp4KwNq1HLcDyzI9TQSd4 /Sew1Jz4Sn57YliH4XajrmIyO0PcovacLAIU7FxlLstcLIz68IIX1Ac28a/tYdwJ syWyHSReCm0GJyXjFymDjPZQekbFmISaIGPQUJ0hhSkc4X3fJxmLyPy0vN+QWFoG NxZzOaliZHrrhGCUHCJct/SuO725cYQooYZ6p5HKbvdG78W0Xwm29Sh2cV7flciO 84kmnUkwggchiEEZNqxCJ/+bAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDopbMDN /b3OPT3eSkM/DLtZys7zMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd43RI0b3wRG79G85DDB8PGuGy5RBaAfw532rZD5XEYev1+ny05sOe CqAn22h3t2LNpweg3dGADzwQDkU6x9DcYozbcHOWOQhU8RuxqIoaw5g/YO0w5z+g Sww6xp00XziFQ2bNPx9WQXM2M7clKKb6m3S0dx4oWeMspaTrRZAPgJM9wOI2xwR0 pZgTJcoZ8ThFxw1YniEQinPseiDUawA+UFZuiztxc2CuhJ1gl01AUsu/ft1CumdL pbF1YYZ2LJZ3f2JJ3rCS95LRhUNLkRvzXsaJHHC5UcaZFDhrX7P0kroGqqG+NDaD ETySgQxPJVniiecmmRx517A9AIteIa/m -----END CERTIFICATE-----Generated at Sat Jul 19 18:41:50 2025 by rpki-client