$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft File: oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json) Hash identifier: fyGf7JH1eEKd1HiKSmn3JuhG2SSX08q+e0Nmbx7Ii9o= Subject key identifier: C4:71:64:96:CC:A1:92:F4:6A:14:E9:99:2F:5A:81:25:71:E9:D7:81 Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 11EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft Manifest number: 11D2 Signing time: Fri 18 Jul 2025 17:20:28 +0000 Manifest this update: Fri 18 Jul 2025 17:20:27 +0000 Manifest next update: Fri 25 Jul 2025 17:20:27 +0000 Files and hashes: 1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: SBUPkJjKvnzvnbxwNceTjsE4H5DllM/UgNHoSGENWJM=) 2: 5E66667ED3AE11EB908D6529C4F9AE02.roa (hash: n7ZfWu9YevyGMpJ105uNq2hULd/nZeOAu9j3eqShoBg=) 3: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: 1n0gDL6bGzAnn9xKGXqg42AcMaFYnb+E6TJXe2riXIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4588 (0x11ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Jul 18 17:20:27 2025 GMT Not After : Jul 25 17:20:27 2025 GMT Subject: CN=687a825b-385a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:f0:09:e7:72:5c:31:39:84:50:3e:d5:32: 49:07:75:37:3d:0e:ba:f2:7c:e6:f9:2e:ed:8c:7b: 1b:13:1d:e2:26:12:fa:af:af:25:7a:6b:1c:a5:a5: b2:5d:65:ac:ce:84:0a:29:9e:67:66:e7:5d:75:33: ab:6c:be:33:51:e8:3f:7c:b6:44:0b:6f:ba:6c:76: ca:12:f0:97:54:7d:e7:3d:32:93:1c:03:39:4f:36: 65:8e:85:6a:34:65:42:fe:7f:92:a6:9e:02:2b:0d: 5b:f2:14:e1:04:a1:cb:4f:02:62:14:e2:0a:35:aa: 93:5b:a1:10:9d:68:b2:77:e5:fd:11:11:fb:e7:ca: cf:d0:f9:f1:65:9c:e7:36:5e:71:2f:b7:64:37:79: 25:ff:38:a4:5a:ae:6d:38:8c:ce:0d:2b:9d:88:46: 2a:29:44:c2:e6:4e:8f:fb:9c:b4:51:62:10:f3:1f: f9:92:70:01:51:30:7a:61:bd:2e:ee:59:fd:5f:40: 83:33:58:37:3d:8f:93:39:29:94:9c:9e:b4:13:9e: 97:a2:32:7b:d7:ca:bf:a6:d3:da:19:4d:e1:06:3c: 62:d5:d0:e1:aa:8d:2c:d4:2a:43:9f:10:b7:d8:e2: 39:d1:91:34:25:e3:9f:9a:6e:0e:0c:34:db:21:bc: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:64:96:CC:A1:92:F4:6A:14:E9:99:2F:5A:81:25:71:E9:D7:81 X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b0:43:f3:c2:a6:ab:6b:12:18:fb:92:dd:d6:cf:c1:64:65: 6f:1c:86:1e:6a:b7:0c:ea:ae:00:62:e8:92:8a:5f:a5:83:92: 7c:8f:2c:19:28:5f:40:59:e2:e7:a2:4d:64:13:d3:1f:36:ac: d2:56:6c:32:e5:da:4a:c2:37:a2:d1:f6:8a:d7:30:2b:30:8c: 78:85:5d:48:9c:03:66:e5:d9:12:80:d8:37:2e:10:e2:b6:49: 41:d2:d2:cf:eb:a0:ba:c2:bb:c3:ee:fa:fc:d2:ed:eb:32:06: 6b:1d:c5:6f:38:10:ac:9d:f3:a0:0b:ec:80:c2:19:1a:d4:62: 7b:80:07:45:7c:2d:d7:da:5b:d0:66:1d:60:b7:74:d2:53:70: 5a:27:64:66:cb:21:c8:97:28:e9:07:c6:8d:f8:76:ca:7f:f9: 51:76:01:cf:55:71:8d:36:81:a0:6a:db:46:66:24:8b:09:a7: 43:09:ef:8b:4c:ec:b5:d8:a2:e6:2e:14:2d:d6:26:61:5e:aa: 5d:07:bd:93:2d:63:9c:8f:85:16:8e:ea:07:3e:2c:88:9d:15: 28:9d:70:d8:07:66:1e:09:6e:a8:e2:fc:59:d0:4d:b5:fe:ac: 36:b2:9b:31:a4:09:d3:a0:d8:dc:9c:0d:67:ba:36:9c:77:35: b2:06:2f:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUwNzE4MTcyMDI3WhcNMjUwNzI1MTcyMDI3WjAYMRYwFAYD VQQDEw02ODdhODI1Yi0zODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ErwCedyXDE5hFA+1TJJB3U3PQ668nzm+S7tjHsbEx3iJhL6r68lemscpaWy XWWszoQKKZ5nZudddTOrbL4zUeg/fLZEC2+6bHbKEvCXVH3nPTKTHAM5TzZljoVq NGVC/n+Spp4CKw1b8hThBKHLTwJiFOIKNaqTW6EQnWiyd+X9ERH758rP0PnxZZzn Nl5xL7dkN3kl/zikWq5tOIzODSudiEYqKUTC5k6P+5y0UWIQ8x/5knABUTB6Yb0u 7ln9X0CDM1g3PY+TOSmUnJ60E56XojJ718q/ptPaGU3hBjxi1dDhqo0s1CpDnxC3 2OI50ZE0JeOfmm4ODDTbIbx5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRxZJbM oZL0ahTpmS9agSVx6deBMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9EOTJERDAzOEY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRM UFhPTUZjY0lfc19XdTR4bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFsEPzwqaraxIY+5Ld1s/BZGVvHIYearcM6q4AYuiSil+lg5J8jywZ KF9AWeLnok1kE9MfNqzSVmwy5dpKwjei0faK1zArMIx4hV1InANm5dkSgNg3LhDi tklB0tLP66C6wrvD7vr80u3rMgZrHcVvOBCsnfOgC+yAwhka1GJ7gAdFfC3X2lvQ Zh1gt3TSU3BaJ2RmyyHIlyjpB8aN+HbKf/lRdgHPVXGNNoGgattGZiSLCadDCe+L TOy12KLmLhQt1iZhXqpdB72TLWOcj4UWjuoHPiyInRUonXDYB2YeCW6o4vxZ0E21 /qw2spsxpAnToNjcnA1nujacdzWyBi9d -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:28 2025 by rpki-client