$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json) Hash identifier: WoXQm3yL5wqegGiPe7ssF/NblMuPjsXiURQvjWRbdTE= Subject key identifier: E4:6F:50:C4:41:A6:EB:1D:7E:99:EC:46:73:E0:20:9B:36:30:78:4F Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft Manifest number: E5 Signing time: Sat 19 Jul 2025 03:29:16 +0000 Manifest this update: Sat 19 Jul 2025 03:29:15 +0000 Manifest next update: Sat 26 Jul 2025 03:29:15 +0000 Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: hdlg5b/BuGSpg/Pmg48syLcf7N226FaNkVXB7S1T+Sg=) 2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: nFQQw/dyghkb1sXKy9uupZRqxzdAPtcnxFOFgRiXGi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Jul 19 03:29:15 2025 GMT Not After : Jul 26 03:29:15 2025 GMT Subject: CN=687b110b-99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:d9:b7:78:ce:4e:27:77:60:d4:02:f6:20: 16:97:2b:97:fa:ac:e6:43:05:55:ea:99:28:94:21: 7a:3c:4c:4a:72:16:14:0e:6d:25:1f:f8:9b:96:ae: 82:e6:69:a6:85:5d:72:61:d8:e1:c5:39:11:b6:ca: 45:bb:7b:6f:b7:d2:04:e9:8c:00:c5:99:35:27:8c: db:48:88:b2:85:ac:53:bb:8b:7a:53:dc:7f:3d:bf: ba:d2:e1:31:55:7e:10:8c:b6:02:c6:28:2d:d1:6f: d9:d8:89:96:cd:26:dc:83:24:f6:80:8d:42:99:9a: f7:94:e1:4d:5e:a3:6c:10:54:33:0e:d6:bf:1e:d9: 40:fc:67:ba:b7:05:27:8a:9f:78:0c:a8:61:e0:f3: 36:43:85:dd:56:53:23:65:82:55:c2:bf:fa:c0:43: 79:b7:f2:d7:a2:e6:90:1d:7b:d8:1f:41:df:0a:30: de:c6:27:60:0b:f0:ae:8d:6b:04:31:98:ac:38:df: 2d:c8:fc:ed:c7:40:39:6a:76:da:62:4e:35:2e:d1: e8:d9:66:90:57:bb:4b:16:bb:e5:7d:f6:31:4e:70: b1:c5:fc:58:ac:4a:8f:58:cc:04:2a:27:5e:0b:c4: 5c:3c:3a:d0:55:e2:ca:00:18:a8:27:26:62:aa:19: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:50:C4:41:A6:EB:1D:7E:99:EC:46:73:E0:20:9B:36:30:78:4F X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:dc:1a:bd:55:d1:6f:57:72:68:38:d9:da:8a:25:c7:f2:88: 89:ae:3d:c8:e2:a9:79:a1:1b:31:c6:22:89:83:94:be:ab:be: 6e:87:84:c9:81:df:a0:e3:5d:83:b9:6b:f1:ae:aa:b5:48:23: 9d:a6:12:d5:93:98:de:34:3a:a4:89:e9:8e:4f:27:bf:b4:89: c6:a5:e1:1f:23:38:8b:f5:97:69:1e:0c:13:7a:ef:d6:93:07: 26:77:9f:52:f7:d6:d9:c2:94:db:16:b7:5a:b9:e7:46:29:19: 4b:02:d3:d5:9d:f3:0d:54:5b:9d:90:1b:a1:bd:f2:37:a8:72: c1:4c:08:cc:95:a2:ef:59:a3:a7:5b:89:22:09:47:81:8f:43: 52:1e:d5:05:ab:d1:91:23:eb:17:8d:5e:6e:9e:6b:8d:04:ea: 06:d0:1c:5a:12:74:86:ec:0b:f3:00:0f:2f:65:b4:fb:3c:4e: 3c:46:eb:bb:e9:db:d2:81:ed:9d:7d:bd:0b:f7:9d:ed:d4:3f: 11:32:90:be:89:c3:05:2b:46:43:97:8b:f9:77:87:cc:de:b3: 70:a8:ae:03:66:03:83:00:9d:36:75:9e:3b:8d:8b:ba:cc:44: af:30:a4:bf:94:e6:11:fb:59:5e:f2:83:5f:19:03:6b:75:94: 21:b9:1e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjUwNzE5MDMyOTE1WhcNMjUwNzI2MDMyOTE1WjAYMRYwFAYD VQQDEw02ODdiMTEwYi05OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWbZt3jOTid3YNQC9iAWlyuX+qzmQwVV6pkolCF6PExKchYUDm0lH/iblq6C 5mmmhV1yYdjhxTkRtspFu3tvt9IE6YwAxZk1J4zbSIiyhaxTu4t6U9x/Pb+60uEx VX4QjLYCxigt0W/Z2ImWzSbcgyT2gI1CmZr3lOFNXqNsEFQzDta/HtlA/Ge6twUn ip94DKhh4PM2Q4XdVlMjZYJVwr/6wEN5t/LXouaQHXvYH0HfCjDexidgC/CujWsE MZisON8tyPztx0A5anbaYk41LtHo2WaQV7tLFrvlffYxTnCxxfxYrEqPWMwEKide C8RcPDrQVeLKABioJyZiqhnT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORvUMRB pusdfpnsRnPgIJs2MHhPMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD3Bq9VdFvV3JoONnaiiXH8oiJrj3I4ql5oRsxxiKJg5S+q75uh4TJ gd+g412DuWvxrqq1SCOdphLVk5jeNDqkiemOTye/tInGpeEfIziL9ZdpHgwTeu/W kwcmd59S99bZwpTbFrdauedGKRlLAtPVnfMNVFudkBuhvfI3qHLBTAjMlaLvWaOn W4kiCUeBj0NSHtUFq9GRI+sXjV5unmuNBOoG0BxaEnSG7AvzAA8vZbT7PE48Ruu7 6dvSge2dfb0L953t1D8RMpC+icMFK0ZDl4v5d4fM3rNwqK4DZgODAJ02dZ47jYu6 zESvMKS/lOYR+1le8oNfGQNrdZQhuR7a -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:38 2025 by rpki-client