$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json) Hash identifier: rnj+reUQqr8IY8xtS8KjVMGnqIsbT6iQEVnKNdfV8Ew= Subject key identifier: 75:DB:5D:CF:B2:12:0C:E3:47:B8:DC:D1:FF:6D:18:6A:9A:AB:22:7D Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft Manifest number: 09 Signing time: Sat 19 Jul 2025 08:25:41 +0000 Manifest this update: Sat 19 Jul 2025 08:25:40 +0000 Manifest next update: Sat 26 Jul 2025 08:25:40 +0000 Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: Khm4FNfe+a2eZHe0Y5iWBzvhmzttG3yj/g7CW2Xpqsc=) 2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Validity Not Before: Jul 19 08:25:40 2025 GMT Not After : Jul 26 08:25:40 2025 GMT Subject: CN=687b5685-fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:0b:fc:b4:e3:60:d6:84:28:21:03:15:d7: ec:8a:ad:1d:c3:56:43:ad:3a:a2:82:af:a2:93:0c: ae:62:15:12:0f:55:84:fe:cf:cb:cf:b9:c5:b0:42: 22:a8:2a:9f:34:80:9f:81:25:1c:4e:f2:bb:50:8f: 5d:bc:10:1e:fd:c6:c8:20:08:98:c4:18:cc:b3:fe: 14:f1:66:48:04:47:60:a8:57:33:30:ef:09:8c:56: 0d:dd:3b:d5:34:96:d9:7d:d3:09:0b:8b:3e:43:79: 22:db:d1:83:49:f4:c8:8f:d2:b3:9c:49:c1:b1:6e: a7:a4:f2:62:3a:49:ed:9a:1b:76:c9:e6:45:ee:e4: dd:92:d7:a1:2f:4c:b8:4b:71:18:23:43:f4:91:e6: bd:46:cf:da:70:6e:c1:bc:8c:23:86:8c:b7:bc:ed: 7f:8f:cc:66:3f:a0:3c:54:55:fe:d3:25:33:74:84: a3:e0:53:3a:69:2c:93:4f:ce:82:2c:56:e8:59:7e: 8f:d9:b5:7b:70:85:94:09:d8:cf:62:1a:48:8a:d8: 26:7a:98:33:a2:43:72:2e:f0:49:11:23:32:75:7d: 27:83:85:43:a9:47:f5:d7:2d:ea:e0:36:07:00:83: 4d:da:54:b5:3c:99:b6:ce:09:f2:e5:03:8d:7c:b8: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DB:5D:CF:B2:12:0C:E3:47:B8:DC:D1:FF:6D:18:6A:9A:AB:22:7D X509v3 Authority Key Identifier: keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8e:e3:d8:8e:0f:85:40:4e:7a:71:f5:12:34:1c:39:a5:8a: a5:3b:d4:31:3e:dd:10:c9:c1:ec:c3:a1:3c:9c:1c:6d:27:28: 27:7d:0b:1a:77:be:cd:eb:91:2a:98:6a:92:24:41:c2:75:5c: 44:f5:b2:ef:55:fb:8f:3e:a5:08:d3:86:f4:d5:23:14:c1:04: ad:c6:fd:17:54:80:0f:1d:2b:5e:90:36:19:47:09:10:fd:fa: cc:9f:7c:0a:c7:7a:f3:ab:6b:bf:0e:89:e5:1d:dd:a2:a3:ef: f4:e6:43:e7:3d:04:d1:d9:70:58:3d:ed:0e:b3:01:42:4a:c7: 7c:5f:0f:ec:24:74:7c:cd:fd:45:e6:a9:06:04:65:1f:84:15: 1e:ef:45:49:e8:44:ff:72:df:cc:2e:19:69:f8:b2:15:19:50: 24:79:1a:d2:25:fb:b8:63:45:33:7f:86:10:da:4b:a7:60:b2: fe:b1:db:d9:94:d0:39:8a:d1:3d:3f:73:3c:77:bd:89:df:12: f9:05:9d:2f:58:9a:aa:d0:98:2a:08:23:b8:0b:e7:79:e2:86: fa:c3:39:b9:f0:e7:98:1b:8a:44:71:1b:29:14:36:15:19:46: ca:6a:ab:b5:ad:f4:7f:44:cc:8e:fd:c9:11:0a:e6:b5:8d:e7: aa:05:73:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2NjQxNjZCODc0 MDJGODIyQTAeFw0yNTA3MTkwODI1NDBaFw0yNTA3MjYwODI1NDBaMBgxFjAUBgNV BAMTDTY4N2I1Njg1LWZkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+UQv8tONg1oQoIQMV1+yKrR3DVkOtOqKCr6KTDK5iFRIPVYT+z8vPucWwQiKo Kp80gJ+BJRxO8rtQj128EB79xsggCJjEGMyz/hTxZkgER2CoVzMw7wmMVg3dO9U0 ltl90wkLiz5DeSLb0YNJ9MiP0rOcScGxbqek8mI6Se2aG3bJ5kXu5N2S16EvTLhL cRgjQ/SR5r1Gz9pwbsG8jCOGjLe87X+PzGY/oDxUVf7TJTN0hKPgUzppLJNPzoIs VuhZfo/ZtXtwhZQJ2M9iGkiK2CZ6mDOiQ3Iu8EkRIzJ1fSeDhUOpR/XXLergNgcA g03aVLU8mbbOCfLlA418uMHhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUddtdz7IS DONHuNzR/20YapqrIn0wHwYDVR0jBBgwFoAUo/EASaOTr53KRFlmZBZrh0Avgiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0JERUU3Qjg4NUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb19FQVNhT1RyNTNLUkZsbVpCWnJoMEF2Z2lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUz S1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOO49iOD4VATnpx9RI0HDmliqU71DE+3RDJwezDoTycHG0nKCd9Cxp3 vs3rkSqYapIkQcJ1XET1su9V+48+pQjThvTVIxTBBK3G/RdUgA8dK16QNhlHCRD9 +syffArHevOra78OieUd3aKj7/TmQ+c9BNHZcFg97Q6zAUJKx3xfD+wkdHzN/UXm qQYEZR+EFR7vRUnoRP9y38wuGWn4shUZUCR5GtIl+7hjRTN/hhDaS6dgsv6x29mU 0DmK0T0/czx3vYnfEvkFnS9YmqrQmCoII7gL53nihvrDObnw55gbikRxGykUNhUZ Rspqq7Wt9H9EzI79yREK5rWN56oFc9U= -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:12 2025 by rpki-client