$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json) Hash identifier: EBYMT2Jv9FzNIWNgjAEYmN8xpv0xfRM9p+Diw6iCuqE= Subject key identifier: D7:35:3C:00:34:34:55:27:2A:55:CE:A1:A1:A7:EA:FC:F6:D5:27:BF Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft Manifest number: 0974 Signing time: Fri 18 Jul 2025 20:23:27 +0000 Manifest this update: Fri 18 Jul 2025 20:23:26 +0000 Manifest next update: Fri 25 Jul 2025 20:23:26 +0000 Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: IXi6yuVSCckQHaoX5vFtjBrhOjTxVn1w3zhkysDRjMo=) 2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: Mf2+h64oIkKVCrmHAT8VYLEu5usAeOj24IncTZPlL1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Validity Not Before: Jul 18 20:23:26 2025 GMT Not After : Jul 25 20:23:26 2025 GMT Subject: CN=687aad3e-b94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:ae:92:cb:e4:64:95:a2:da:8e:a5:f2:a3: 36:17:71:b1:5d:41:a9:79:1f:81:cf:ae:83:4d:bb: f9:b9:13:a1:ff:5e:8c:b1:de:9c:e4:fb:6e:9c:47: 20:59:d3:e3:84:d7:52:f3:91:b2:94:8e:a3:27:c5: f4:98:83:64:96:c6:f7:88:1d:1a:ee:fa:7d:99:23: de:ed:db:e4:11:9c:bf:59:c1:a0:55:b5:ef:fa:9a: 08:b5:4c:a3:d8:8c:f8:76:d6:8f:a3:12:14:7b:ca: 43:df:f0:66:e4:a7:05:69:5c:ee:10:d8:4f:6b:3d: e9:00:8b:da:b3:82:ff:2e:a0:32:dc:53:7f:b6:0b: 2d:e5:3e:37:bc:01:fb:91:01:40:0e:6a:61:d9:00: 83:89:e1:b3:f2:85:9e:35:36:dc:ca:3d:4d:c7:e9: 58:20:42:d8:d9:7c:fb:a2:d1:05:af:88:d9:c4:f1: 22:7f:26:25:29:3a:9d:76:98:69:fc:a1:00:d2:ca: 6d:e1:5e:a6:e2:8d:80:86:ec:c9:d2:74:88:6b:d2: 0f:c0:b1:e4:27:ac:25:69:23:71:4d:57:77:21:67: 4c:46:f7:a4:b0:fd:7a:98:75:64:07:57:dc:a3:f2: 5c:f4:8f:3f:d9:f8:b5:c0:3e:2f:ea:c4:8f:1d:fc: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:3C:00:34:34:55:27:2A:55:CE:A1:A1:A7:EA:FC:F6:D5:27:BF X509v3 Authority Key Identifier: keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:02:c5:0b:03:35:b6:1e:00:e2:38:1b:5f:4f:ba:16:8c:e7: 92:29:4c:47:47:43:66:9f:4e:d0:36:9d:3e:12:de:dd:ca:12: 00:04:a3:08:5c:12:43:75:cb:77:1c:1e:8b:42:a6:48:98:e9: 3a:d0:9c:ee:a2:0e:7b:74:a4:30:ea:01:83:9f:7d:c7:ea:de: f9:4c:40:b1:09:0b:ae:60:d9:4b:93:e2:23:ec:11:e7:ee:6f: fd:a2:a6:b5:5c:bf:68:fa:92:6b:66:68:fb:cc:42:23:05:fd: b8:e6:7b:3c:13:5b:44:6d:eb:33:52:ee:a8:2d:56:d1:38:05: 82:09:8b:c5:b0:7e:20:de:0b:93:da:63:92:df:97:51:41:f8: b5:18:3e:b3:85:c0:32:f5:18:d7:4e:83:76:f9:32:5b:e1:b8: c9:28:9e:95:a2:c1:22:15:4b:8e:c0:fe:2c:04:72:78:75:db: 20:aa:df:fc:30:68:e2:0e:77:35:09:a3:96:4d:6e:be:91:0e: f7:40:6b:3f:78:0e:98:9d:c3:ab:b9:f2:86:d9:83:98:c9:2c: 0f:dc:4f:e0:39:e3:c7:7f:33:8c:4b:9f:79:73:01:b2:98:0e: f3:6d:93:42:fd:c7:52:83:a7:b0:16:6c:ac:e0:d8:a6:93:63: f8:68:0a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE RkNBRENGRTYwHhcNMjUwNzE4MjAyMzI2WhcNMjUwNzI1MjAyMzI2WjAYMRYwFAYD VQQDEw02ODdhYWQzZS1iOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL+uksvkZJWi2o6l8qM2F3GxXUGpeR+Bz66DTbv5uROh/16Msd6c5PtunEcg WdPjhNdS85GylI6jJ8X0mINklsb3iB0a7vp9mSPe7dvkEZy/WcGgVbXv+poItUyj 2Iz4dtaPoxIUe8pD3/Bm5KcFaVzuENhPaz3pAIvas4L/LqAy3FN/tgst5T43vAH7 kQFADmph2QCDieGz8oWeNTbcyj1Nx+lYIELY2Xz7otEFr4jZxPEifyYlKTqddphp /KEA0spt4V6m4o2AhuzJ0nSIa9IPwLHkJ6wlaSNxTVd3IWdMRveksP16mHVkB1fc o/Jc9I8/2fi1wD4v6sSPHfxwRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNc1PAA0 NFUnKlXOoaGn6vz21Se/MB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3 QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAsULAzW2HgDiOBtfT7oWjOeSKUxHR0Nmn07QNp0+Et7dyhIABKMI XBJDdct3HB6LQqZImOk60Jzuog57dKQw6gGDn33H6t75TECxCQuuYNlLk+Ij7BHn 7m/9oqa1XL9o+pJrZmj7zEIjBf245ns8E1tEbeszUu6oLVbROAWCCYvFsH4g3guT 2mOS35dRQfi1GD6zhcAy9RjXToN2+TJb4bjJKJ6VosEiFUuOwP4sBHJ4ddsgqt/8 MGjiDnc1CaOWTW6+kQ73QGs/eA6YncOrufKG2YOYySwP3E/gOePHfzOMS595cwGy mA7zbZNC/cdSg6ewFmys4Nimk2P4aAoC -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:01 2025 by rpki-client