$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json) Hash identifier: ZLYdMM+TZxe+uRFySabMgwhb7GLiMtkS/fATZiWO06g= Subject key identifier: 96:DF:DE:F0:CC:80:B5:B4:EE:CC:3A:E2:9B:DD:3A:9A:CD:65:30:8E Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft Manifest number: DB Signing time: Mon 21 Jul 2025 05:40:50 +0000 Manifest this update: Mon 21 Jul 2025 05:40:50 +0000 Manifest next update: Mon 28 Jul 2025 05:40:50 +0000 Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: ybt/5oybHYd6m5ycnWfIa1Zr8lm+jo9KWTnApqyuCS8=) 2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: Jul 21 05:40:50 2025 GMT Not After : Jul 28 05:40:50 2025 GMT Subject: CN=687dd2e2-2601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:1e:a6:bb:34:b0:db:d4:80:34:34:33:7c: bf:4f:2e:6f:1a:18:ce:94:dc:4c:0b:18:a4:02:f8: 6c:60:72:e3:58:13:6f:68:96:72:9a:69:dd:19:e2: 59:62:be:89:88:ac:6d:37:44:11:4b:de:16:89:57: 42:a3:e4:3a:1b:dd:ef:53:21:7c:e5:97:8d:33:13: e1:b6:65:69:c0:7c:9c:10:b5:5f:0f:30:8a:cc:cf: de:79:34:75:20:61:1e:14:f9:30:b4:ad:bf:32:e1: 63:2b:03:dd:f7:8d:b2:27:47:9c:b9:f8:f9:48:9f: 79:8f:c2:bf:63:f0:6d:a2:d4:87:a3:b1:f7:81:87: e2:96:fc:24:31:31:9b:6f:70:c4:83:31:58:7d:d0: d6:67:47:6f:6f:42:ad:15:f5:cd:4d:6b:48:02:44: b6:4e:fe:c0:c6:38:d6:82:82:f5:0f:e2:fa:00:db: 9f:81:c0:4d:d3:d8:58:c8:64:a8:0f:a4:5e:ff:38: 35:27:a4:4c:20:a8:43:d6:25:30:ca:21:21:a7:17: 22:1d:c0:c6:74:bf:fd:fc:7e:d3:21:5a:c8:43:ae: 66:3c:70:1b:14:d9:9d:13:90:7d:e8:0f:b8:b9:d6: 65:b2:f8:69:36:07:e0:15:49:d7:6b:a5:d6:1f:2f: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:DE:F0:CC:80:B5:B4:EE:CC:3A:E2:9B:DD:3A:9A:CD:65:30:8E X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:54:d1:3c:30:3f:d7:52:3b:45:de:27:fb:23:dd:a6:33:5b: c7:d4:73:2f:63:81:55:94:e0:11:e8:97:76:da:5e:0b:73:00: 59:56:7e:d1:8e:85:f1:58:73:09:d7:50:55:e2:df:be:8e:9d: 23:60:46:89:77:c8:86:f4:45:e8:2b:2b:04:b8:31:dc:a7:bf: 26:d3:c7:3e:56:59:a7:44:1f:04:54:34:25:32:d2:61:4a:68: 04:69:2e:7f:65:91:3a:06:d6:35:81:00:89:e2:89:4e:b4:de: 89:a0:95:8d:0c:70:be:a0:bc:e4:52:52:a0:01:40:a2:3a:0b: bd:00:a9:c1:63:cb:37:22:aa:f6:61:0f:5d:86:89:4a:83:0a: c5:d4:3e:14:b8:1d:3e:a3:40:f4:e1:00:b6:2c:5b:dc:a0:0d: db:73:7b:8f:40:29:1a:78:a4:2a:ec:13:74:87:3a:1a:0b:bc: 92:d3:6f:55:69:c5:d8:1f:82:af:07:2b:1d:a8:d6:c4:d7:2d: 7a:9f:66:39:9f:3c:ed:6e:88:5e:a4:03:5f:61:29:79:be:9e: 79:3f:52:06:83:c6:de:ab:ba:ce:dc:bd:6e:91:5f:6e:7a:3d: 6c:a1:80:f1:9e:05:1f:3c:bc:4a:5e:01:17:ed:cc:03:e4:39: f4:6a:6f:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjUwNzIxMDU0MDUwWhcNMjUwNzI4MDU0MDUwWjAYMRYwFAYD VQQDEw02ODdkZDJlMi0yNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxQeprs0sNvUgDQ0M3y/Ty5vGhjOlNxMCxikAvhsYHLjWBNvaJZymmndGeJZ Yr6JiKxtN0QRS94WiVdCo+Q6G93vUyF85ZeNMxPhtmVpwHycELVfDzCKzM/eeTR1 IGEeFPkwtK2/MuFjKwPd942yJ0ecufj5SJ95j8K/Y/BtotSHo7H3gYfilvwkMTGb b3DEgzFYfdDWZ0dvb0KtFfXNTWtIAkS2Tv7AxjjWgoL1D+L6ANufgcBN09hYyGSo D6Re/zg1J6RMIKhD1iUwyiEhpxciHcDGdL/9/H7TIVrIQ65mPHAbFNmdE5B96A+4 udZlsvhpNgfgFUnXa6XWHy+VvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbf3vDM gLW07sw64pvdOprNZTCOMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN MzFTdkZuNG0xV0pLVWs0dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyVNE8MD/XUjtF3if7I92mM1vH1HMvY4FVlOAR6Jd22l4LcwBZVn7R joXxWHMJ11BV4t++jp0jYEaJd8iG9EXoKysEuDHcp78m08c+VlmnRB8EVDQlMtJh SmgEaS5/ZZE6BtY1gQCJ4olOtN6JoJWNDHC+oLzkUlKgAUCiOgu9AKnBY8s3Iqr2 YQ9dholKgwrF1D4UuB0+o0D04QC2LFvcoA3bc3uPQCkaeKQq7BN0hzoaC7yS029V acXYH4KvBysdqNbE1y16n2Y5nzztbohepANfYSl5vp55P1IGg8beq7rO3L1ukV9u ej1soYDxngUfPLxKXgEX7cwD5Dn0am/N -----END CERTIFICATE-----Generated at Wed Jul 23 02:46:37 2025 by rpki-client