$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: rOrtob5fJYMI+UsSLo7OFaEEEyFhDqYhKgp7ZgYtVTk= Subject key identifier: 8C:99:C9:03:82:61:2E:CF:B8:C4:9B:43:53:F0:64:D3:F8:01:F6:57 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 21 Signing time: Mon 21 Jul 2025 08:02:47 +0000 Manifest this update: Mon 21 Jul 2025 08:02:47 +0000 Manifest next update: Mon 28 Jul 2025 08:02:47 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: CamHXuX/1E5xzq0ULcez4F0vY0CmVV78OJRoQct+/qI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Jul 21 08:02:47 2025 GMT Not After : Jul 28 08:02:47 2025 GMT Subject: CN=687df427-1fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:4a:61:90:c8:bd:94:55:c9:2a:a6:04:28: d4:fe:42:17:76:0f:f9:ac:72:c4:13:c7:e9:fb:31: d1:52:b8:a0:d2:be:1c:57:06:0d:c5:56:ce:41:3a: a5:11:6c:fc:1f:3a:fc:da:cd:60:ae:5a:b3:8b:83: de:d5:55:ff:80:e3:be:0e:c1:13:e7:56:4b:70:46: 13:b9:e0:a7:b6:10:ce:24:b4:b2:2b:17:d6:76:6e: 89:62:b2:51:bf:3e:83:d2:f8:a1:85:b4:76:66:c3: d1:86:76:8f:ed:a9:c1:92:c6:1b:03:30:bb:86:75: 20:3b:66:21:54:f8:41:49:1c:86:3c:45:b5:86:29: f7:53:6f:b8:56:c3:14:ad:f6:3f:cf:2e:1c:67:52: 0d:93:e1:f5:44:36:8d:b0:c6:94:99:37:0d:d3:7d: 3d:ee:66:50:d6:18:40:cf:44:a3:34:6f:9e:f8:75: a7:ad:76:b0:71:55:a0:b8:b6:71:ce:8e:35:95:35: 36:1e:7c:5d:a8:b1:a3:34:f7:f8:90:10:39:57:de: b7:d6:ab:0b:da:ed:7b:37:83:ae:d7:2e:7b:41:58: 02:92:2d:ee:3a:7c:e1:93:18:57:b7:6c:64:01:cb: d0:5d:53:aa:60:04:6f:75:db:e0:8a:1e:08:83:dc: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:99:C9:03:82:61:2E:CF:B8:C4:9B:43:53:F0:64:D3:F8:01:F6:57 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:b1:df:dc:82:2a:99:77:b9:76:38:b0:3c:e4:cb:ec:67: 89:37:a4:ed:f3:ea:43:5c:a0:47:32:ad:cc:65:ed:17:09:86: 3c:99:b3:69:37:31:ae:a7:93:6b:33:6e:91:e5:e5:8f:d7:64: d9:47:14:2b:0b:ed:84:d5:18:14:4a:c7:34:17:ab:ca:86:30: b7:84:52:04:19:67:0c:cc:9c:25:5a:0b:06:fa:3c:44:ae:4b: 5a:12:68:4d:cd:39:01:22:b5:8f:ce:2f:94:67:fc:45:f3:96: 62:f0:3f:85:66:86:62:1b:c2:32:b5:6b:d4:cc:b9:12:d6:72: 51:4e:ae:35:e9:ad:69:e7:60:f6:72:e8:62:fb:9f:d7:ba:a2: ac:29:df:dd:cd:dd:73:cb:29:56:7f:36:9d:c9:82:05:1e:8b: 68:52:ae:95:f1:61:0a:54:88:68:73:0f:e2:8e:4f:0d:c5:83: d5:b8:ee:79:ae:61:cf:89:96:d2:5e:c6:b4:81:7c:05:5b:64: 15:0f:6b:39:5e:32:01:0e:85:03:30:d8:4f:3b:2f:e4:4f:46: d1:ed:27:bd:d6:6e:43:70:53:4a:c5:ee:b8:73:d7:de:c5:f8: 47:02:b7:c9:6f:9c:85:ba:1a:3e:00:8a:31:c8:28:1c:9d:80: 47:08:12:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA3MjEwODAyNDdaFw0yNTA3MjgwODAyNDdaMBgxFjAUBgNV BAMTDTY4N2RmNDI3LTFmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJQUphkMi9lFXJKqYEKNT+Qhd2D/mscsQTx+n7MdFSuKDSvhxXBg3FVs5BOqUR bPwfOvzazWCuWrOLg97VVf+A474OwRPnVktwRhO54Ke2EM4ktLIrF9Z2bolislG/ PoPS+KGFtHZmw9GGdo/tqcGSxhsDMLuGdSA7ZiFU+EFJHIY8RbWGKfdTb7hWwxSt 9j/PLhxnUg2T4fVENo2wxpSZNw3TfT3uZlDWGEDPRKM0b574daetdrBxVaC4tnHO jjWVNTYefF2osaM09/iQEDlX3rfWqwva7Xs3g67XLntBWAKSLe46fOGTGFe3bGQB y9BdU6pgBG912+CKHgiD3MtnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjJnJA4Jh Ls+4xJtDU/Bk0/gB9lcwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKWGsd/cgiqZd7l2OLA85MvsZ4k3pO3z6kNcoEcyrcxl7RcJhjyZs2k3 Ma6nk2szbpHl5Y/XZNlHFCsL7YTVGBRKxzQXq8qGMLeEUgQZZwzMnCVaCwb6PESu S1oSaE3NOQEitY/OL5Rn/EXzlmLwP4VmhmIbwjK1a9TMuRLWclFOrjXprWnnYPZy 6GL7n9e6oqwp393N3XPLKVZ/Np3JggUei2hSrpXxYQpUiGhzD+KOTw3Fg9W47nmu Yc+JltJexrSBfAVbZBUPazleMgEOhQMw2E87L+RPRtHtJ73WbkNwU0rF7rhz197F +EcCt8lvnIW6Gj4AijHIKBydgEcIEt4= -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:56 2025 by rpki-client