$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: fHizXRpo9qGPCDEZ2HyD9UKN21OdAfH46zDW+P4xH5A= Subject key identifier: 01:9A:AE:D2:8D:0E:13:61:6C:ED:A0:10:D8:B2:07:CC:FB:3A:5C:7E Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 5B Signing time: Sat 19 Jul 2025 07:23:27 +0000 Manifest this update: Sat 19 Jul 2025 07:23:26 +0000 Manifest next update: Sat 26 Jul 2025 07:23:26 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: mCYmmxwY1bvIs243y7CThnKw/ADHO2ghoUmfTo95YeI=) 2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Jul 19 07:23:26 2025 GMT Not After : Jul 26 07:23:26 2025 GMT Subject: CN=687b47ef-754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:7d:ed:11:8a:65:2f:c8:bb:f8:37:b0:5a: 93:c2:1f:80:99:63:bd:51:03:44:5b:fb:d8:82:3c: 1a:ee:cf:9d:c1:93:de:dc:8e:b6:3f:ec:a3:1a:23: 60:1b:cc:f9:e6:5d:08:e6:3c:0b:46:4a:58:b5:48: 61:63:fe:9c:01:fd:5b:b9:06:20:b1:fd:4b:2b:b5: 1c:7c:48:42:6e:fa:9c:68:71:3e:26:4f:f4:22:84: 48:80:96:3f:06:66:51:7f:6f:58:b3:be:87:1a:92: a2:f2:d1:0e:13:39:9f:a3:31:e6:1d:6b:8f:6c:24: 1b:c7:13:ab:73:0a:e0:8d:c8:40:3d:04:62:80:5c: c0:fa:49:eb:96:5d:1c:e1:62:f9:69:ce:3f:d0:fd: 64:10:e2:a7:07:15:1c:1b:16:23:c3:ce:27:07:d9: 78:66:18:dd:d3:a0:8c:1f:5d:65:6e:a4:56:ee:fa: ef:23:0e:72:19:a7:26:80:38:e6:36:6e:3a:2b:8b: ba:72:4d:33:2a:fd:5e:d9:d6:63:93:2a:5c:e8:a8: 45:f4:0c:5d:b9:2a:db:bc:ff:dc:47:29:09:7f:47: f8:bf:71:22:88:9b:ae:75:29:5d:9a:42:6c:f6:3f: ef:51:dc:54:50:49:4c:10:6f:ad:fb:a8:ce:16:45: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9A:AE:D2:8D:0E:13:61:6C:ED:A0:10:D8:B2:07:CC:FB:3A:5C:7E X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:e0:23:51:0f:42:98:dc:68:cd:52:53:91:b1:ec:e5:bd: ab:95:2a:26:1b:85:49:45:3f:cd:77:9d:8e:12:63:08:f3:79: 11:a6:10:02:56:6d:db:cf:d7:f9:17:8f:d0:94:f5:0c:f0:62: 4a:ff:10:6d:d3:1e:23:95:f6:81:fe:21:04:2d:e0:2b:e1:74: 23:5b:6a:c6:b9:21:b6:77:45:e5:a5:08:8f:53:ea:c9:f7:6c: 2f:8d:68:02:8f:fa:e2:e6:03:62:5f:af:1a:ec:e0:5d:e5:d5: 15:88:80:c4:2f:19:b5:52:b0:6f:6e:00:49:ed:cb:11:c5:2d: 48:21:cd:04:5b:a2:6f:0d:20:eb:4f:73:1c:fd:60:a0:f7:2c: 83:1c:4e:c7:31:84:b5:cf:c4:3d:77:5d:ed:6d:79:d4:eb:4c: 19:68:36:85:29:23:88:3b:ca:94:c2:cf:ba:36:8a:8f:a3:3b: 49:13:ab:81:c9:20:d2:34:40:c7:04:1d:5c:72:80:1a:24:70: ec:0d:04:0d:f7:d8:98:ae:95:37:fa:46:34:88:11:f4:4c:5f: c7:4d:df:28:7d:ae:da:51:3e:7f:6d:5b:0e:26:01:22:9e:4f: 8a:f5:9f:54:04:30:fc:7a:da:d5:2d:4c:47:dd:1b:43:92:e8: af:c2:32:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEVDNTExMC8GA1UEBRMoM0E1RTEwMjlFNjVDNjM2ODEyMzJEQjY3RDgwNTNERDJG Njk0RTYxRjAeFw0yNTA3MTkwNzIzMjZaFw0yNTA3MjYwNzIzMjZaMBgxFjAUBgNV BAMTDTY4N2I0N2VmLTc1NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWn3tEYplL8i7+DewWpPCH4CZY71RA0Rb+9iCPBruz53Bk97cjrY/7KMaI2Ab zPnmXQjmPAtGSli1SGFj/pwB/Vu5BiCx/UsrtRx8SEJu+pxocT4mT/QihEiAlj8G ZlF/b1izvocakqLy0Q4TOZ+jMeYda49sJBvHE6tzCuCNyEA9BGKAXMD6SeuWXRzh Yvlpzj/Q/WQQ4qcHFRwbFiPDzicH2XhmGN3ToIwfXWVupFbu+u8jDnIZpyaAOOY2 bjori7pyTTMq/V7Z1mOTKlzoqEX0DF25Ktu8/9xHKQl/R/i/cSKIm651KV2aQmz2 P+9R3FRQSUwQb637qM4WRcu9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAZqu0o0O E2Fs7aAQ2LIHzPs6XH4wHwYDVR0jBBgwFoAUOl4QKeZcY2gSMttn2AU90vaU5h8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RUM1LzgyMzM1QTIwRDk1 QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVo OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2w0UUtlWmNZMmdTTXR0bjJBVTkwdmFVNWg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RUM1LzgyMzM1QTIwRDk1QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJn U010dG4yQVU5MHZhVTVoOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8C4CNRD0KY3GjNUlORsezlvauVKiYbhUlFP813nY4SYwjzeRGmEAJW bdvP1/kXj9CU9QzwYkr/EG3THiOV9oH+IQQt4CvhdCNbasa5IbZ3ReWlCI9T6sn3 bC+NaAKP+uLmA2Jfrxrs4F3l1RWIgMQvGbVSsG9uAEntyxHFLUghzQRbom8NIOtP cxz9YKD3LIMcTscxhLXPxD13Xe1tedTrTBloNoUpI4g7ypTCz7o2io+jO0kTq4HJ INI0QMcEHVxygBokcOwNBA332JiulTf6RjSIEfRMX8dN3yh9rtpRPn9tWw4mASKe T4r1n1QEMPx62tUtTEfdG0OS6K/CMmo= -----END CERTIFICATE-----Generated at Sun Jul 20 03:30:57 2025 by rpki-client