$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: jA1yy/7hfRMU/Y+GWbYh/2d6Jjtu33eu1Gzg9z3Mo24= Subject key identifier: 8D:D2:E8:C8:20:C3:AB:E9:03:8B:28:18:B2:22:F9:2F:E0:61:C7:F3 Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0A57 Signing time: Fri 18 Jul 2025 20:07:53 +0000 Manifest this update: Fri 18 Jul 2025 20:07:52 +0000 Manifest next update: Fri 25 Jul 2025 20:07:52 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: LCS/Tb7Q76sMH7MnwRVFyp4nZtKcodpyPKo0e9fhY2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Jul 18 20:07:52 2025 GMT Not After : Jul 25 20:07:52 2025 GMT Subject: CN=687aa998-8019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:c6:97:d9:3b:dd:3b:ab:3b:9f:f4:fb:20: 0e:9a:f0:2f:fb:73:21:73:eb:0d:da:c8:6f:1d:7f: 78:96:3e:b1:92:aa:cd:b4:f2:d1:69:89:96:76:c3: 47:2a:00:a5:d5:cd:c4:05:98:a5:b7:07:b6:39:d8: d3:d0:ca:74:fb:6f:e5:85:fb:0e:a9:89:d0:a3:95: 0a:08:85:32:65:02:c6:1d:94:36:63:a9:5b:08:ec: a2:6d:25:89:b6:c4:b0:4f:c3:c5:dc:98:d7:60:6a: a3:6b:df:7f:85:4a:90:92:0f:fc:44:4d:d9:a8:de: ec:ac:d1:96:01:4e:73:a2:23:a4:bf:82:93:71:e1: 40:26:d2:6e:54:3e:61:e1:98:22:52:2f:5b:88:d9: df:30:26:4f:de:36:59:8c:36:fe:6f:f7:57:3f:19: 68:51:30:8a:f3:f9:bf:dd:13:ae:0f:c5:96:17:52: fc:9c:02:79:ea:4c:fd:82:95:ba:82:c2:ea:6e:b3: e4:73:8a:30:23:d1:b1:47:88:70:31:11:e9:bb:65: 44:07:e2:2a:67:29:cd:fc:cf:dd:fa:c2:b0:31:28: 32:f8:63:58:e4:3d:3d:3d:a1:fb:e6:22:0b:d1:a1: 9b:5d:b4:2d:ff:c1:6d:e7:bc:d7:63:e6:12:ec:0e: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:E8:C8:20:C3:AB:E9:03:8B:28:18:B2:22:F9:2F:E0:61:C7:F3 X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5f:18:e7:ab:5b:14:23:77:2f:a7:30:84:60:67:c0:3c:6e: 79:42:10:ed:69:b1:8d:a4:6e:9a:de:a3:19:1a:50:b8:ab:bf: 03:ec:e3:c9:28:79:d8:41:e2:e3:7d:4e:9b:f7:dd:81:80:f8: d5:eb:b6:1f:46:6b:f7:b6:92:52:cc:55:52:07:3f:cf:8c:08: d6:cd:32:09:bb:8e:7f:25:fe:be:1a:24:af:a3:20:5e:29:d6: d3:15:68:04:fa:f2:53:ef:20:20:c7:35:d4:9a:dd:93:80:81: 97:b3:1c:e1:d1:bd:60:2a:a8:ae:39:bc:cc:79:9d:a9:7c:aa: 07:95:0b:82:c2:51:f9:0a:bd:2a:eb:04:69:0b:17:40:0e:6d: cc:eb:28:d1:36:dd:3e:86:7b:83:6a:fc:12:b0:73:6d:95:ad: 41:76:67:2b:9c:e6:ba:f8:b8:e8:14:5d:30:af:40:00:2c:7d: 25:9d:87:60:33:97:6e:80:b3:91:20:63:2e:fa:d7:dc:e6:ec: e2:cc:c1:5b:47:ae:9d:ce:70:4d:37:9f:69:8e:24:5a:5a:4d: 44:df:4b:eb:17:59:37:bf:af:76:62:28:27:1a:be:9f:e6:40: 3d:33:41:76:b0:ca:da:6f:d4:e9:3a:f8:a1:4a:4e:a5:a5:97: 96:8f:4f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjUwNzE4MjAwNzUyWhcNMjUwNzI1MjAwNzUyWjAYMRYwFAYD VQQDEw02ODdhYTk5OC04MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g7Gl9k73TurO5/0+yAOmvAv+3Mhc+sN2shvHX94lj6xkqrNtPLRaYmWdsNH KgCl1c3EBZiltwe2OdjT0Mp0+2/lhfsOqYnQo5UKCIUyZQLGHZQ2Y6lbCOyibSWJ tsSwT8PF3JjXYGqja99/hUqQkg/8RE3ZqN7srNGWAU5zoiOkv4KTceFAJtJuVD5h 4ZgiUi9biNnfMCZP3jZZjDb+b/dXPxloUTCK8/m/3ROuD8WWF1L8nAJ56kz9gpW6 gsLqbrPkc4owI9GxR4hwMRHpu2VEB+IqZynN/M/d+sKwMSgy+GNY5D09PaH75iIL 0aGbXbQt/8Ft57zXY+YS7A7F0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3S6Mgg w6vpA4soGLIi+S/gYcfzMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyXxjnq1sUI3cvpzCEYGfAPG55QhDtabGNpG6a3qMZGlC4q78D7OPJ KHnYQeLjfU6b992BgPjV67YfRmv3tpJSzFVSBz/PjAjWzTIJu45/Jf6+GiSvoyBe KdbTFWgE+vJT7yAgxzXUmt2TgIGXsxzh0b1gKqiuObzMeZ2pfKoHlQuCwlH5Cr0q 6wRpCxdADm3M6yjRNt0+hnuDavwSsHNtla1BdmcrnOa6+LjoFF0wr0AALH0lnYdg M5dugLORIGMu+tfc5uzizMFbR66dznBNN59pjiRaWk1E30vrF1k3v692YignGr6f 5kA9M0F2sMrab9TpOvihSk6lpZeWj09w -----END CERTIFICATE-----Generated at Sun Jul 20 07:33:20 2025 by rpki-client