$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json) Hash identifier: ydGVpqqt+u/1vISZ0tNr+T+cRlwYbo1XNUgJPRVHt2g= Subject key identifier: 17:D8:5F:A5:29:91:3D:A4:73:67:C9:5F:54:98:A2:05:C6:E9:2C:09 Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Certificate serial: 1047 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft Manifest number: 1025 Signing time: Fri 18 Jul 2025 17:36:00 +0000 Manifest this update: Fri 18 Jul 2025 17:36:00 +0000 Manifest next update: Fri 25 Jul 2025 17:36:00 +0000 Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: aqMZqw2pY4FW6/M4lIwfjawwiujH/ugNDIrWte9jCwI=) 2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=) 3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=) 4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=) 5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=) 6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4167 (0x1047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Validity Not Before: Jul 18 17:36:00 2025 GMT Not After : Jul 25 17:36:00 2025 GMT Subject: CN=687a8600-8fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:90:b6:ea:cd:96:91:35:e6:ed:7d:6b:15: 1a:3b:3b:86:92:e8:23:5d:d2:a9:1c:1c:f9:35:f1: f8:2b:8b:6d:16:6c:b7:3f:30:06:7d:65:ae:2c:7c: 96:17:a0:de:db:05:59:b2:53:8b:71:48:30:59:88: 76:42:45:ff:07:09:97:78:1f:8b:11:86:b0:c3:92: e5:5b:a5:20:9f:02:7c:44:19:2e:6e:87:7b:c0:46: c1:f7:a1:96:73:89:d1:bd:1a:f0:41:cb:a2:6c:11: 54:48:70:90:c3:eb:9a:40:6e:1c:fd:0d:ad:ca:28: 41:69:8f:a5:4c:1c:16:62:db:40:4d:d0:62:bc:f5: 49:09:09:69:c7:77:10:9e:e8:bf:5d:f9:55:e5:1a: d3:51:de:cd:8a:a1:27:7f:02:bf:9a:09:49:94:02: c7:37:28:51:42:27:62:bb:90:fa:d7:bd:7c:8a:2f: b1:1f:f1:bf:1b:6f:8f:68:a0:67:b2:f7:03:03:81: 44:6f:9e:9b:83:c1:07:af:e0:03:75:23:b4:65:f4: ba:b0:f5:1d:dc:0f:1d:89:a6:f5:a8:e3:5b:bc:5b: 5a:8d:42:83:18:de:7c:f0:6c:d6:c0:6a:89:a0:3b: df:56:8d:a1:0a:a1:39:de:75:61:6a:59:b2:35:6c: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D8:5F:A5:29:91:3D:A4:73:67:C9:5F:54:98:A2:05:C6:E9:2C:09 X509v3 Authority Key Identifier: keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:a0:e5:2c:23:fa:74:a3:97:1c:24:c5:f6:b2:9b:3f:9e: fb:c5:35:e5:b2:a8:c4:07:4a:ed:98:27:c1:82:8e:5a:af:6d: 88:9a:b4:6e:a6:0e:eb:60:69:68:75:87:2a:2e:3a:1f:8f:20: 82:0e:73:17:00:b5:df:c0:72:1e:25:0d:ac:f2:28:dc:81:8a: 99:c9:67:df:a7:a9:40:1f:11:5c:12:74:ed:72:72:07:57:30: e3:04:5d:c1:ef:77:0f:b8:65:c2:05:80:e2:75:05:50:f9:5f: c6:2a:ae:88:f1:d8:94:31:93:ac:50:8a:25:21:25:97:2c:3c: 34:ff:60:bf:1b:b8:e7:1e:22:de:38:0d:49:4d:1b:45:d6:53: 0f:fd:84:c4:a3:85:53:f5:eb:07:2b:83:98:c1:53:c2:12:69: 13:96:da:27:bb:7c:28:5d:6f:9f:ce:34:1a:c4:d8:c0:ce:b5: c9:0a:5b:12:84:ef:04:2b:1b:2f:fd:2c:3a:1f:3c:9a:f8:05: 38:f0:3c:43:1a:3d:00:96:3a:07:a5:1d:3b:17:6b:77:57:de: 1c:bd:cb:6b:5d:41:da:09:48:34:6c:3f:0f:e6:4e:97:5f:0e: 54:0d:12:a5:ac:9d:98:d2:c8:47:f3:94:72:0a:dd:fc:65:df: d5:de:a8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG QjA2MDk4OUIwHhcNMjUwNzE4MTczNjAwWhcNMjUwNzI1MTczNjAwWjAYMRYwFAYD VQQDEw02ODdhODYwMC04ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jiQturNlpE15u19axUaOzuGkugjXdKpHBz5NfH4K4ttFmy3PzAGfWWuLHyW F6De2wVZslOLcUgwWYh2QkX/BwmXeB+LEYaww5LlW6UgnwJ8RBkubod7wEbB96GW c4nRvRrwQcuibBFUSHCQw+uaQG4c/Q2tyihBaY+lTBwWYttATdBivPVJCQlpx3cQ nui/XflV5RrTUd7NiqEnfwK/mglJlALHNyhRQidiu5D61718ii+xH/G/G2+PaKBn svcDA4FEb56bg8EHr+ADdSO0ZfS6sPUd3A8diab1qONbvFtajUKDGN588GzWwGqJ oDvfVo2hCqE53nVhalmyNWyDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfYX6Up kT2kc2fJX1SYogXG6SwJMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2 b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbqDlLCP6dKOXHCTF9rKbP577xTXlsqjEB0rtmCfBgo5ar22ImrRu pg7rYGlodYcqLjofjyCCDnMXALXfwHIeJQ2s8ijcgYqZyWffp6lAHxFcEnTtcnIH VzDjBF3B73cPuGXCBYDidQVQ+V/GKq6I8diUMZOsUIolISWXLDw0/2C/G7jnHiLe OA1JTRtF1lMP/YTEo4VT9esHK4OYwVPCEmkTltonu3woXW+fzjQaxNjAzrXJClsS hO8EKxsv/Sw6Hzya+AU48DxDGj0AljoHpR07F2t3V94cvctrXUHaCUg0bD8P5k6X Xw5UDRKlrJ2Y0shH85RyCt38Zd/V3qgx -----END CERTIFICATE-----Generated at Sun Jul 20 11:37:50 2025 by rpki-client