$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: A3xLaRp8OvYq483tAJMrv4oyai9lWqYzLj8EtY/nXdQ= Subject key identifier: 6D:F0:8F:CD:5B:D0:5A:09:65:96:7A:22:D5:E9:4A:21:81:21:1C:0E Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B66 Signing time: Sun 20 Jul 2025 19:10:24 +0000 Manifest this update: Sun 20 Jul 2025 19:10:24 +0000 Manifest next update: Sun 27 Jul 2025 19:10:24 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: THdQV/XdlHlKqDGec7/QGyjJGOsf1ZPQ8s7ryRY611E=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Jul 20 19:10:24 2025 GMT Not After : Jul 27 19:10:24 2025 GMT Subject: CN=687d3f20-ed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:c1:c9:2b:b0:4a:ec:88:4b:8d:ec:6e:98: e4:01:4e:91:1d:4c:cc:e4:ef:97:33:94:14:b1:f8: 4e:eb:2f:f6:36:93:a1:28:d0:c8:fc:20:f6:6d:9a: 0c:05:0b:de:3c:18:b8:10:dd:61:64:0e:13:9e:5e: 7b:0f:ed:03:8a:21:8d:36:f4:a1:45:4d:c6:4a:cc: 14:fe:06:1e:6e:8a:6c:f1:8c:67:d6:3b:ca:aa:02: b0:2c:5e:25:77:07:b2:f0:36:11:d3:93:97:43:cf: 3b:bd:25:61:df:82:27:b1:cc:02:5b:14:be:1e:b9: 42:3e:34:1c:00:ba:06:0c:c1:ed:24:97:ee:f4:b1: 58:a0:cf:ac:05:fa:ff:a6:7a:cf:7a:67:f5:a8:52: 7f:fa:50:88:42:cc:ad:1f:3b:4a:90:2d:10:34:03: 1b:37:a4:71:b7:07:13:a3:e2:f6:d0:d8:5f:77:2a: 00:85:e7:14:b2:5a:1e:54:b1:7c:f4:c2:d8:88:2c: 65:be:65:e2:22:8d:68:0f:3e:1d:ff:f4:74:97:25: 31:27:82:09:c5:92:99:f9:81:5a:d3:ab:51:27:75: 59:62:05:8e:bb:46:c2:92:53:5b:d3:e7:aa:61:b6: f2:57:62:99:eb:55:68:be:0b:eb:bd:4a:1c:aa:54: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F0:8F:CD:5B:D0:5A:09:65:96:7A:22:D5:E9:4A:21:81:21:1C:0E X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:99:09:ea:56:ce:b2:fd:ee:61:ca:b5:dd:7e:b3:71:f7: f5:92:a3:66:74:53:2b:e9:10:24:e4:d4:0f:7d:52:42:30:ce: b8:7b:05:8b:f2:57:c9:3a:4f:fb:e8:d4:e0:e1:de:cf:e0:f9: 34:9e:3f:10:f2:90:19:b2:5c:62:d6:4a:22:ce:80:99:d4:a4: 0e:96:d4:04:03:92:13:17:7b:67:ff:0e:f7:a0:6b:c0:39:ce: f6:ca:7f:a1:20:d6:d0:49:e2:c4:7e:7e:63:86:09:2c:19:e1: c3:b2:67:c1:cf:78:71:0b:13:55:0b:df:c2:a7:fd:fb:64:ad: d2:a8:da:63:b1:50:61:aa:6d:8d:17:a1:1a:1c:92:79:f1:c0: 0e:a9:f8:18:dd:8b:a9:38:da:e0:f2:1c:8c:c2:41:f7:df:19: 24:2e:55:17:87:51:c2:b0:41:94:b3:cc:08:1b:80:2e:8f:79: e6:61:e5:f4:7e:39:dd:cd:3e:4d:78:9b:42:5e:6d:5e:d0:7f: e4:63:ea:d6:13:3d:ac:2e:e3:cc:78:2b:91:70:a3:8d:cb:68: 93:93:1e:d9:96:28:77:a1:0d:36:fd:c8:9f:9b:2a:f7:eb:35: 31:b9:eb:60:19:1e:7a:ab:9a:bc:bd:d9:a7:cf:f0:e2:46:cd: 4e:46:e5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwNzIwMTkxMDI0WhcNMjUwNzI3MTkxMDI0WjAYMRYwFAYD VQQDEw02ODdkM2YyMC1lZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszPBySuwSuyIS43sbpjkAU6RHUzM5O+XM5QUsfhO6y/2NpOhKNDI/CD2bZoM BQvePBi4EN1hZA4Tnl57D+0DiiGNNvShRU3GSswU/gYebops8Yxn1jvKqgKwLF4l dwey8DYR05OXQ887vSVh34InscwCWxS+HrlCPjQcALoGDMHtJJfu9LFYoM+sBfr/ pnrPemf1qFJ/+lCIQsytHztKkC0QNAMbN6RxtwcTo+L20NhfdyoAhecUsloeVLF8 9MLYiCxlvmXiIo1oDz4d//R0lyUxJ4IJxZKZ+YFa06tRJ3VZYgWOu0bCklNb0+eq YbbyV2KZ61VovgvrvUocqlQfqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3wj81b 0FoJZZZ6ItXpSiGBIRwOMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHmZkJ6lbOsv3uYcq13X6zcff1kqNmdFMr6RAk5NQPfVJCMM64ewWL 8lfJOk/76NTg4d7P4Pk0nj8Q8pAZslxi1koizoCZ1KQOltQEA5ITF3tn/w73oGvA Oc72yn+hINbQSeLEfn5jhgksGeHDsmfBz3hxCxNVC9/Cp/37ZK3SqNpjsVBhqm2N F6EaHJJ58cAOqfgY3YupONrg8hyMwkH33xkkLlUXh1HCsEGUs8wIG4Auj3nmYeX0 fjndzT5NeJtCXm1e0H/kY+rWEz2sLuPMeCuRcKONy2iTkx7Zlih3oQ02/cifmyr3 6zUxuetgGR56q5q8vdmnz/DiRs1ORuUC -----END CERTIFICATE-----Generated at Mon Jul 21 08:12:01 2025 by rpki-client