$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json) Hash identifier: 1GI+r/aVmZpcBWwEY+Un0sTGULcxaYC6W/h+08UTFaQ= Subject key identifier: 8B:50:07:2D:20:15:D2:85:FD:81:C5:0A:F1:5A:71:1F:0E:47:E1:A0 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft Manifest number: DC Signing time: Wed 23 Jul 2025 05:49:23 +0000 Manifest this update: Wed 23 Jul 2025 05:49:22 +0000 Manifest next update: Wed 30 Jul 2025 05:49:22 +0000 Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: qmgI2K6R0zzdzsDQJn9VI+v/epYXLrMFHfSy8JqHywo=) 2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: Jul 23 05:49:22 2025 GMT Not After : Jul 30 05:49:22 2025 GMT Subject: CN=688077e2-559b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:94:a4:4c:c9:a5:c9:e3:85:fe:03:87:8c: 26:49:9e:e1:ff:ee:d9:d0:e6:a7:26:98:69:d5:95: 64:22:3b:a0:48:ae:66:d3:fc:ad:4f:7d:a6:c0:b7: 94:d4:de:2d:dd:cb:d3:f2:c5:f8:ec:c6:5e:5b:49: 47:c4:f7:ed:df:cd:3e:a4:72:b4:5c:c8:e2:9d:a7: 91:5c:d8:3b:f3:9b:53:44:27:d9:bc:44:a6:2b:e2: 7b:65:88:db:49:82:9f:f6:ef:13:af:78:bd:5b:8d: 24:f2:a4:db:12:95:2d:87:cd:ab:02:c1:b9:46:46: 36:e8:3f:60:5a:99:9e:d0:03:5a:95:0e:84:99:1b: 99:33:41:4d:3d:08:b7:b0:b9:63:43:ce:06:3c:78: 37:fe:1b:5e:49:cb:5a:0b:30:f4:a3:e9:e6:93:a5: 05:f7:a2:c2:5e:98:79:da:76:c3:cb:0a:16:fc:c6: 12:cc:87:77:1e:10:79:36:31:95:cc:d7:cb:a9:96: 93:8d:33:6d:8e:b6:29:d3:0c:0e:31:5d:17:da:27: 26:99:70:52:57:e6:66:87:7b:69:b1:e3:53:0f:23: d0:bd:e7:fd:94:52:44:56:ef:af:d9:8e:a0:de:f0: 84:a1:92:8c:84:43:2f:4b:c5:f2:df:bd:af:42:ca: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:07:2D:20:15:D2:85:FD:81:C5:0A:F1:5A:71:1F:0E:47:E1:A0 X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fd:89:ad:03:f4:40:45:1c:d6:eb:62:5d:61:82:f9:64:94: 00:61:69:1a:e1:d3:3e:ae:84:73:87:48:98:1d:5f:31:cb:2b: b5:6a:40:2d:c8:42:e7:0d:b4:5c:38:ae:86:eb:5a:6c:49:f9: a0:14:57:8b:c8:64:da:aa:04:a0:2f:23:bd:ad:cf:e8:c1:6b: c3:46:55:23:c4:49:ce:5a:63:70:4c:f9:5a:f3:42:db:73:a6: 69:80:c3:4b:17:79:65:7a:bf:b0:68:b3:a6:b8:03:fd:47:25: 05:f5:ad:39:b7:cf:68:f9:7e:6b:f3:d2:d9:45:21:d2:68:86: 66:90:1b:a7:e6:4c:0d:07:60:fc:4c:d5:42:f4:12:4a:ae:aa: c4:cf:42:98:4f:78:07:48:93:6e:f5:4d:52:c1:50:73:60:15: 58:bf:be:fe:f1:62:7e:88:37:9a:38:f3:e1:d1:bd:d9:d5:49: 38:12:e4:bc:0c:99:e3:aa:a6:4d:55:7f:ed:0e:1f:84:79:b3: a7:8e:83:5b:12:06:a5:7c:18:e7:6a:88:c3:17:a2:12:ff:27: 9e:e5:72:b8:c1:63:50:e0:05:2e:aa:86:af:1d:53:8d:32:62: 8c:a5:e4:3a:dd:b0:03:04:69:fa:90:8f:ae:0e:a3:e8:e2:f4: be:df:db:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjUwNzIzMDU0OTIyWhcNMjUwNzMwMDU0OTIyWjAYMRYwFAYD VQQDEw02ODgwNzdlMi01NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru6UpEzJpcnjhf4Dh4wmSZ7h/+7Z0OanJphp1ZVkIjugSK5m0/ytT32mwLeU 1N4t3cvT8sX47MZeW0lHxPft380+pHK0XMjinaeRXNg785tTRCfZvESmK+J7ZYjb SYKf9u8Tr3i9W40k8qTbEpUth82rAsG5RkY26D9gWpme0ANalQ6EmRuZM0FNPQi3 sLljQ84GPHg3/hteSctaCzD0o+nmk6UF96LCXph52nbDywoW/MYSzId3HhB5NjGV zNfLqZaTjTNtjrYp0wwOMV0X2icmmXBSV+Zmh3tpseNTDyPQvef9lFJEVu+v2Y6g 3vCEoZKMhEMvS8Xy372vQsr52QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItQBy0g FdKF/YHFCvFacR8OR+GgMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN MzFTdkZuNG0xV0pLVWs0dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/YmtA/RARRzW62JdYYL5ZJQAYWka4dM+roRzh0iYHV8xyyu1akAt yELnDbRcOK6G61psSfmgFFeLyGTaqgSgLyO9rc/owWvDRlUjxEnOWmNwTPla80Lb c6ZpgMNLF3ller+waLOmuAP9RyUF9a05t89o+X5r89LZRSHSaIZmkBun5kwNB2D8 TNVC9BJKrqrEz0KYT3gHSJNu9U1SwVBzYBVYv77+8WJ+iDeaOPPh0b3Z1Uk4EuS8 DJnjqqZNVX/tDh+EebOnjoNbEgalfBjnaojDF6IS/yee5XK4wWNQ4AUuqoavHVON MmKMpeQ63bADBGn6kI+uDqPo4vS+39sX -----END CERTIFICATE-----Generated at Thu Jul 24 05:03:29 2025 by rpki-client