$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: s9zxr1jdc7j1wn0C58V36sjGjzDMnbq8PWD9AUg8PY8= Subject key identifier: 87:0F:42:62:0A:1B:81:69:7C:9E:77:7D:36:37:84:BB:EB:26:D4:60 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 016D Signing time: Sat 19 Jul 2025 04:01:17 +0000 Manifest this update: Sat 19 Jul 2025 04:01:16 +0000 Manifest next update: Sat 26 Jul 2025 04:01:16 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: V+zu+pK6tqCQEPB/3ofDW2jLK8jrxGyB7F3RPSOxkb8=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 6KqNq4cdtHhz/rpHpQGDibxzs+UH6NBhNOISI8YbXQE=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: 4JGUeecx58BBmafBCfjWDOEaD/pbsFBnC8eWlzMDtQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Jul 19 04:01:16 2025 GMT Not After : Jul 26 04:01:16 2025 GMT Subject: CN=687b188d-b568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:c5:fa:32:51:c4:2b:f5:f6:e8:f3:89:29: d4:25:30:ed:b5:29:f5:ac:b2:7d:b8:05:1c:ae:54: 11:60:f2:22:ed:39:2d:4b:a7:0b:f2:a9:4d:d9:53: 24:a8:33:24:21:36:cf:cf:48:15:4f:44:f2:53:42: 90:42:50:ae:36:6f:c8:89:44:05:4d:a8:51:97:6b: 04:0c:c2:6b:6a:48:0e:04:ff:35:7d:b3:24:bc:8d: 85:3e:15:0b:a5:aa:01:3d:b4:4c:06:35:a7:6c:fb: d7:2f:34:d8:16:ee:1b:8b:08:fb:39:1e:b2:d3:7a: 67:ce:9a:c7:a3:98:d2:8b:58:64:c4:f4:a3:1d:18: 82:2c:aa:98:85:2c:f1:2c:31:68:be:da:e7:c8:5c: 5a:e0:74:46:7f:d7:27:61:a1:8c:7f:c6:7b:ab:44: 49:25:88:f8:c9:8a:ef:bd:be:cd:9f:9e:fc:f7:1f: b9:14:f7:90:e4:d3:f1:a6:ef:51:61:b2:ec:41:a3: 11:bd:41:a5:41:ee:49:60:05:31:e0:a4:12:33:4c: c2:f8:bd:52:38:d4:6b:3e:ca:65:a8:c7:bf:90:80: c3:9b:88:40:b3:f8:a9:7c:92:f3:06:78:40:13:f2: af:0a:0f:01:22:83:26:ba:73:9b:a6:2a:5e:cc:d6: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:42:62:0A:1B:81:69:7C:9E:77:7D:36:37:84:BB:EB:26:D4:60 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:97:f5:18:a5:53:ce:f0:0d:d3:20:53:79:04:03:14:21:c7: cb:21:7b:c2:c4:b1:e2:3a:87:61:c2:45:51:0b:05:c9:eb:c0: a9:3e:fe:fb:99:6c:85:80:f0:cb:96:f9:d2:2c:95:f1:cd:91: 28:c4:6a:50:d0:38:a1:fd:ba:82:9e:0b:86:a4:03:94:0e:11: 3e:ed:63:fd:be:1b:28:2d:c5:0a:5e:49:2f:d8:99:4c:c7:85: 99:a9:fc:7f:44:20:d5:54:4e:88:fd:38:f1:85:ce:27:6f:94: 51:89:e0:c1:7c:26:6b:81:05:8f:46:db:09:4a:24:1a:21:97: 9a:57:52:3c:a0:96:65:fc:06:35:36:2e:60:81:de:ad:6f:fc: 04:da:c0:96:de:c2:69:0e:47:46:c1:fb:7d:ec:45:32:d6:14: 33:4c:1d:3d:9b:3f:f9:40:88:a3:91:ff:85:bb:6b:b9:5a:04: 7b:c9:00:54:d8:48:f9:e7:d2:ba:f8:ec:cf:7b:82:38:d8:72: dc:08:8b:a6:c8:0d:ca:67:62:ca:8c:f1:db:0e:e8:ba:27:c5: d4:fd:65:f1:c0:a6:ab:14:7b:c6:d1:98:33:af:e2:13:ae:1b: 9f:82:5a:51:14:45:50:09:6d:73:ae:05:7f:ac:84:f3:55:e6: a5:75:94:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUwNzE5MDQwMTE2WhcNMjUwNzI2MDQwMTE2WjAYMRYwFAYD VQQDEw02ODdiMTg4ZC1iNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLXF+jJRxCv19ujziSnUJTDttSn1rLJ9uAUcrlQRYPIi7TktS6cL8qlN2VMk qDMkITbPz0gVT0TyU0KQQlCuNm/IiUQFTahRl2sEDMJrakgOBP81fbMkvI2FPhUL paoBPbRMBjWnbPvXLzTYFu4biwj7OR6y03pnzprHo5jSi1hkxPSjHRiCLKqYhSzx LDFovtrnyFxa4HRGf9cnYaGMf8Z7q0RJJYj4yYrvvb7Nn5789x+5FPeQ5NPxpu9R YbLsQaMRvUGlQe5JYAUx4KQSM0zC+L1SONRrPsplqMe/kIDDm4hAs/ipfJLzBnhA E/KvCg8BIoMmunObpipezNZNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcPQmIK G4FpfJ53fTY3hLvrJtRgMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpl/UYpVPO8A3TIFN5BAMUIcfLIXvCxLHiOodhwkVRCwXJ68CpPv77 mWyFgPDLlvnSLJXxzZEoxGpQ0Dih/bqCnguGpAOUDhE+7WP9vhsoLcUKXkkv2JlM x4WZqfx/RCDVVE6I/Tjxhc4nb5RRieDBfCZrgQWPRtsJSiQaIZeaV1I8oJZl/AY1 Ni5ggd6tb/wE2sCW3sJpDkdGwft97EUy1hQzTB09mz/5QIijkf+Fu2u5WgR7yQBU 2Ej559K6+OzPe4I42HLcCIumyA3KZ2LKjPHbDui6J8XU/WXxwKarFHvG0Zgzr+IT rhufglpRFEVQCW1zrgV/rITzVealdZTA -----END CERTIFICATE-----Generated at Sun Jul 20 10:43:50 2025 by rpki-client