$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: TzWSFRjDY4XQIv1apIJY8rlJDWDkSx+359uE6kLlQ54= Subject key identifier: 1B:17:82:9C:52:56:C5:90:EA:91:C6:3C:73:B7:A8:60:DA:D0:8A:B4 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0CC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0C84 Signing time: Fri 18 Jul 2025 18:36:25 +0000 Manifest this update: Fri 18 Jul 2025 18:36:24 +0000 Manifest next update: Fri 25 Jul 2025 18:36:24 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: SmWIu4kCfbWnR2At8jZVUq46bKw1rFqapm9CQv+gS/Q=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 9xj2eLyG/tdesiN53tFy07gS2PXLIBFRo+Pfj6Aj7f4=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: dJZrsN09jQhR1tV/MBGDtF9J2z2S5+/G8ySEaBQlIWI=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0bKIGEsq8hLfPMAMaZjPiHvxpIZHU52fzssXfn7yiXU=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: DBPGuu5yRvDvP4FC/IjV2H3T+xTKFbXciVMjwanRb/4=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /EuxmPPRYBaK5xLwAa5WDWDWOcYmzlBlj89Amjexk/E=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: DfS1XhJ0VY2l1Vl6FaTOWiiwrvVb4J6NRESIx8xEXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Jul 18 18:36:24 2025 GMT Not After : Jul 25 18:36:24 2025 GMT Subject: CN=687a9429-0c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:cd:95:07:9b:27:87:50:f0:05:8e:c7:b8: 2d:d3:a2:75:8a:37:c3:9c:06:5b:73:e1:a4:38:3f: 2c:28:75:b0:13:c0:96:9d:72:e5:6d:09:61:95:0d: 48:2e:b6:c8:da:f5:1b:b7:4f:81:78:12:e1:0a:20: b8:ee:34:f1:b7:5b:ea:0a:ac:04:38:0d:6d:eb:fd: de:46:65:68:6b:90:6f:c6:17:4e:bd:fc:06:b6:30: 1b:a5:36:4f:fd:ad:96:cc:5d:8a:42:2d:a4:b9:a8: 12:ba:cb:a7:4e:dc:62:20:ef:4e:bd:a8:07:9f:52: 8f:7a:4c:e6:5e:28:05:1f:5b:bb:43:d2:27:36:14: 01:88:49:b3:3b:5e:d0:c7:2b:3b:c3:0f:33:7d:69: be:e5:f8:1c:70:66:06:92:fc:73:9e:f3:7e:33:8d: 51:21:2f:e8:db:f3:5e:36:47:8e:53:bf:05:e2:31: 28:8d:cc:1e:37:66:53:1c:9f:68:6b:d1:97:59:0e: d1:4c:3c:ba:e0:25:2c:35:7d:4d:e8:36:1a:d5:0a: 86:8a:77:c0:6c:06:6d:8a:21:ee:6e:07:c2:24:2c: 4d:14:c4:82:7e:e0:47:d8:4d:ae:47:b6:c6:24:d4: 4d:5e:65:4a:a2:3a:61:11:7a:a6:d4:c7:1e:70:ea: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:17:82:9C:52:56:C5:90:EA:91:C6:3C:73:B7:A8:60:DA:D0:8A:B4 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:10:d7:02:a4:56:5d:17:e5:ac:26:cc:4b:13:8a:d9:14: dd:0a:c0:19:e4:89:6d:dc:e9:30:80:b7:f2:29:6f:9b:10:a7: a1:22:76:a7:44:d3:34:e1:cb:d4:88:ef:96:72:59:8b:1b:3e: c8:d6:db:62:b9:99:4b:91:ef:2b:29:2f:d5:94:77:19:19:e9: 7e:81:7d:1f:d7:28:0a:f7:bd:80:ed:de:e8:b4:e2:ba:39:63: 0c:02:50:02:e1:5b:cd:6e:82:a8:37:15:bb:ed:4b:76:4d:2e: 80:11:8d:c8:f6:9e:a1:d8:59:eb:4e:94:34:2a:2f:9f:e4:8b: 60:b8:47:23:d3:d9:13:a0:c3:71:8e:3d:7b:03:5e:93:96:a3: d6:f6:f8:82:7c:fc:45:b5:61:58:07:7b:35:39:a5:b9:b7:a2: 5d:48:0c:74:8f:df:f8:a1:eb:2c:41:98:c7:8b:04:ad:66:93: a4:cd:46:1d:ad:cc:cf:6a:1c:72:28:3f:a1:1b:2b:e6:00:64: 67:94:c8:18:34:b1:56:60:15:46:0f:76:7a:e0:5c:36:94:ee: 3e:13:e7:9b:ae:b7:42:c3:6d:29:a7:9a:69:36:16:56:ff:ee: f8:e2:35:ef:87:34:3d:df:38:a3:8e:54:40:ab:7f:37:ad:34: 0b:ab:29:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUwNzE4MTgzNjI0WhcNMjUwNzI1MTgzNjI0WjAYMRYwFAYD VQQDEw02ODdhOTQyOS0wYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jjNlQebJ4dQ8AWOx7gt06J1ijfDnAZbc+GkOD8sKHWwE8CWnXLlbQlhlQ1I LrbI2vUbt0+BeBLhCiC47jTxt1vqCqwEOA1t6/3eRmVoa5BvxhdOvfwGtjAbpTZP /a2WzF2KQi2kuagSusunTtxiIO9OvagHn1KPekzmXigFH1u7Q9InNhQBiEmzO17Q xys7ww8zfWm+5fgccGYGkvxznvN+M41RIS/o2/NeNkeOU78F4jEojcweN2ZTHJ9o a9GXWQ7RTDy64CUsNX1N6DYa1QqGinfAbAZtiiHubgfCJCxNFMSCfuBH2E2uR7bG JNRNXmVKojphEXqm1McecOpX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsXgpxS VsWQ6pHGPHO3qGDa0Iq0MB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXRDXAqRWXRflrCbMSxOK2RTdCsAZ5Ilt3OkwgLfyKW+bEKehInan RNM04cvUiO+WclmLGz7I1ttiuZlLke8rKS/VlHcZGel+gX0f1ygK972A7d7otOK6 OWMMAlAC4VvNboKoNxW77Ut2TS6AEY3I9p6h2FnrTpQ0Ki+f5ItguEcj09kToMNx jj17A16TlqPW9viCfPxFtWFYB3s1OaW5t6JdSAx0j9/4oessQZjHiwStZpOkzUYd rczPahxyKD+hGyvmAGRnlMgYNLFWYBVGD3Z64Fw2lO4+E+ebrrdCw20pp5ppNhZW /+744jXvhzQ93zijjlRAq383rTQLqylX -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:21 2025 by rpki-client