$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: iyaFb+RtkW8PHwtZoobB3ECPr7g2bdomaZ7EmDZ3LBA= Subject key identifier: D3:2D:5B:56:C3:5B:99:32:72:12:19:EC:BF:60:D5:B2:3A:1F:87:B9 Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: EF Signing time: Fri 25 Jul 2025 05:36:06 +0000 Manifest this update: Fri 25 Jul 2025 05:36:05 +0000 Manifest next update: Fri 01 Aug 2025 05:36:05 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: 40Nt5t+ekEruDc+BiGuaZ4SxxvcVJ8JeU0pZwgoiyDA=) 2: 8C7FA9C0FD4B11EEABAB0B60C4F9AE02.roa (hash: LEMiACV3Ie+SK4LkuQJBWGvSnOFQ7e/xDgjdO66Ipp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Jul 25 05:36:05 2025 GMT Not After : Aug 1 05:36:05 2025 GMT Subject: CN=688317c5-12fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:8d:a1:fc:3a:9f:d1:9e:37:e0:e1:75:1f: 65:9d:09:8a:30:e1:8b:8e:7e:aa:a4:ff:4f:57:06: ff:cd:ef:86:a3:28:69:33:a7:21:90:6f:13:af:a1: 0a:3e:e0:83:9d:eb:b7:d9:6b:ff:25:ef:4a:06:ed: c9:5d:78:19:38:b7:e3:86:63:ff:dd:0a:1a:a9:f5: 57:a3:8f:c0:81:23:81:55:75:f0:a0:f6:20:b6:a0: 78:ac:77:8d:1e:81:0a:aa:6a:1d:b7:17:32:04:3e: 3a:91:3f:a0:bd:5b:45:03:42:d8:62:e6:03:39:39: 57:32:c7:fe:45:7e:92:4e:a2:1e:15:fa:ad:c9:68: 2d:fe:e9:3c:03:6b:2c:b3:56:01:4c:2b:a3:ab:b8: ed:d5:4c:9f:a3:7b:5e:95:bc:26:fc:aa:40:c2:d0: 37:04:ab:98:18:f7:2a:5e:af:ec:03:7b:59:8f:51: 10:20:40:1c:7a:ab:0b:90:b0:e1:d0:7f:d7:ab:0c: fd:09:7a:9c:0c:d7:2c:67:15:6e:e0:86:21:1b:cd: 29:36:dd:b3:76:c2:84:37:98:ba:21:46:fc:2f:c8: a6:b2:71:f5:af:64:91:34:8e:63:b9:f2:9d:37:16: 93:31:86:3a:fd:26:c1:a6:05:d8:86:38:11:6f:a9: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:5B:56:C3:5B:99:32:72:12:19:EC:BF:60:D5:B2:3A:1F:87:B9 X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:74:3a:ae:ee:ea:fe:48:4b:61:3d:1a:cf:42:27:60:f9:55: 6a:37:8b:14:9b:51:67:99:5a:91:0e:40:a1:3f:70:af:fd:84: fe:64:65:3c:5c:c0:9b:7d:c9:15:e1:ef:a9:58:01:78:83:54: 6a:ea:8d:f2:97:91:a0:ee:01:8f:76:eb:bb:2a:89:dd:2a:30: db:6f:c2:5b:3e:67:32:50:81:ce:c7:56:3a:8f:d3:60:d0:05: 53:94:6b:db:8c:e4:73:5e:e4:7b:10:23:24:8a:25:6d:53:f7: 36:36:e9:75:93:8f:7c:3b:1a:ea:2b:21:cb:86:e3:ec:f2:86: 27:b3:78:0d:1b:81:1c:49:cc:a5:7e:d6:3a:ac:92:ae:a3:23: 05:26:d0:9e:9c:ce:47:f5:d2:34:35:8b:20:79:0a:90:bf:5f: 74:91:5b:5b:6f:85:6f:c8:ff:05:e1:ec:74:6b:09:ca:df:6a: 1f:64:85:60:0c:31:3d:48:7c:e8:e1:79:a5:e2:da:05:10:ed: 9c:d1:22:3b:53:9e:e0:68:70:fb:f2:4e:4c:9d:3e:92:c8:f2: 01:05:26:98:d9:4e:7b:e4:45:e6:a6:5f:e8:39:7d:36:bd:04: cc:c0:56:2d:0d:c3:94:77:f0:f3:24:0b:f0:5f:e2:bd:98:cd: ef:0a:33:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMEYxMTAvBgNVBAUTKEEzRUI1MUQyOTk5QkJCNDQ2NTlCRERBNkJFMUUxMEZB NTUxRTIyNjUwHhcNMjUwNzI1MDUzNjA1WhcNMjUwODAxMDUzNjA1WjAYMRYwFAYD VQQDEw02ODgzMTdjNS0xMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhqNofw6n9GeN+DhdR9lnQmKMOGLjn6qpP9PVwb/ze+GoyhpM6chkG8Tr6EK PuCDneu32Wv/Je9KBu3JXXgZOLfjhmP/3QoaqfVXo4/AgSOBVXXwoPYgtqB4rHeN HoEKqmodtxcyBD46kT+gvVtFA0LYYuYDOTlXMsf+RX6STqIeFfqtyWgt/uk8A2ss s1YBTCujq7jt1Uyfo3telbwm/KpAwtA3BKuYGPcqXq/sA3tZj1EQIEAceqsLkLDh 0H/Xqwz9CXqcDNcsZxVu4IYhG80pNt2zdsKEN5i6IUb8L8imsnH1r2SRNI5jufKd NxaTMYY6/SbBpgXYhjgRb6moxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMtW1bD W5kychIZ7L9g1bI6H4e5MB8GA1UdIwQYMBaAFKPrUdKZm7tEZZvdpr4eEPpVHiJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwRi85QTc1ODBDOEZE NEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUwUmxtOTJtdmg0US1sVWVJ bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUltVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzEwRi85QTc1ODBDOEZENEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUw UmxtOTJtdmg0US1sVWVJbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGdDqu7ur+SEthPRrPQidg+VVqN4sUm1FnmVqRDkChP3Cv/YT+ZGU8 XMCbfckV4e+pWAF4g1Rq6o3yl5Gg7gGPduu7KondKjDbb8JbPmcyUIHOx1Y6j9Ng 0AVTlGvbjORzXuR7ECMkiiVtU/c2Nul1k498OxrqKyHLhuPs8oYns3gNG4EcScyl ftY6rJKuoyMFJtCenM5H9dI0NYsgeQqQv190kVtbb4VvyP8F4ex0awnK32ofZIVg DDE9SHzo4Xml4toFEO2c0SI7U57gaHD78k5MnT6SyPIBBSaY2U575EXmpl/oOX02 vQTMwFYtDcOUd/DzJAvwX+K9mM3vCjOd -----END CERTIFICATE-----Generated at Fri Jul 25 08:38:38 2025 by rpki-client