$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json) Hash identifier: eXn5Jb/9nXUz90PjNgzEDQCQARpaZIYosWBwO0lzeuM= Subject key identifier: C8:95:BF:99:74:5D:95:47:7C:1A:B7:39:3A:6C:71:47:90:98:56:C5 Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft Manifest number: 03A1 Signing time: Sat 19 Jul 2025 01:12:05 +0000 Manifest this update: Sat 19 Jul 2025 01:12:05 +0000 Manifest next update: Sat 26 Jul 2025 01:12:05 +0000 Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: hMoHumTCasfB1NaRPEU8tNXGrBbLZAnnJDq7kUhjeYI=) 2: D1E294C2A34411EC803D2585C4F9AE02.roa (hash: lJa/v3Ew27zEz3fGPQRNJii4SZZ7fJhhCVEdIkMKWNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194040, serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Validity Not Before: Jul 19 01:12:05 2025 GMT Not After : Jul 26 01:12:05 2025 GMT Subject: CN=687af0e5-c101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:37:7b:f6:cb:f4:c7:89:b9:59:e6:d7:7b: 6a:5f:dd:9e:c6:72:60:5b:c3:c5:9d:61:10:cb:94: f1:9a:b0:08:39:e1:9d:f6:99:d3:77:1a:a7:85:df: a6:59:1b:c3:83:47:53:0c:ad:54:7f:be:94:33:27: a9:45:01:3a:6e:d7:c7:59:96:66:4c:c9:d7:1b:cc: 8c:bb:5e:48:e8:b8:35:34:e7:d0:52:9c:c4:50:06: a8:62:ca:1c:f0:96:b7:f3:55:12:31:fb:66:d3:b2: c1:d4:ac:16:53:04:bc:47:f7:33:64:6c:e8:a1:c8: b3:0c:c4:b7:ee:6f:a2:7e:b4:3a:bf:04:2c:d8:e2: f9:e9:75:74:3c:5f:96:db:27:4f:c8:a2:9d:48:ca: 1b:77:10:a0:93:35:71:bb:9e:e3:1c:8d:0a:8c:0f: 1d:58:5f:0d:bc:07:10:dc:7e:f8:42:c4:83:a6:96: 3d:1f:bb:1d:ec:f5:8d:b5:ba:74:56:d6:9b:14:d5: e3:2f:91:89:9d:8b:f5:b7:f1:71:6e:46:46:05:d5: f3:3c:d9:7f:69:52:6a:65:51:11:9e:9c:cd:67:66: 0c:7d:1c:25:b4:0d:75:96:e9:de:4a:da:e5:19:db: 16:75:e2:f4:af:98:76:ba:04:ed:d4:aa:88:95:a3: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:95:BF:99:74:5D:95:47:7C:1A:B7:39:3A:6C:71:47:90:98:56:C5 X509v3 Authority Key Identifier: keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d5:2d:68:70:a0:06:3b:57:3b:8e:c0:a2:c1:c4:57:fc:73: d7:84:93:13:6e:63:8e:a5:bb:74:77:50:d6:9e:28:10:a7:96: 0f:af:d1:6a:ba:67:f3:35:d0:61:e6:cf:d3:60:ca:7a:25:e6: 3f:bc:be:17:2a:75:ea:be:6a:ad:86:9c:d8:72:5f:11:b1:3b: 47:0d:d6:c2:c8:56:2b:f3:40:5c:01:c6:7f:5c:b4:fd:9a:f5: 62:52:57:fb:7c:70:a0:5e:a6:52:b4:6e:4f:41:45:45:55:be: 88:5a:fd:58:16:4e:25:c6:55:69:15:e2:81:34:a0:9e:b5:37: 87:ee:4c:ec:d3:32:e6:e3:fb:8b:8b:fb:55:6a:6c:f8:48:73: e9:fa:c0:78:b5:b1:08:e0:b2:41:60:4f:7e:ad:9e:c6:ff:3a: 52:ba:6b:6c:7d:69:85:94:a9:60:e9:49:15:41:52:20:ce:ba: 3d:0e:bd:28:43:f2:c5:c4:b3:96:31:b5:ed:4a:13:ef:cb:76: 1a:12:70:d8:00:6b:b3:37:86:e1:d9:71:7c:a4:6a:0c:64:ad: d7:54:ca:28:30:fd:f6:a9:9e:11:49:ad:ec:8e:33:25:10:b0: eb:bc:69:4b:89:89:f8:e6:59:84:83:97:ae:12:ca:3a:3f:d8: 95:12:e2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwNDAxMTAvBgNVBAUTKEEwN0NEM0QxMDIxQTU4QzI0MEExMjEzNzQwMEI5N0Ix OEI3OTk4RDAwHhcNMjUwNzE5MDExMjA1WhcNMjUwNzI2MDExMjA1WjAYMRYwFAYD VQQDEw02ODdhZjBlNS1jMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1Q3e/bL9MeJuVnm13tqX92exnJgW8PFnWEQy5TxmrAIOeGd9pnTdxqnhd+m WRvDg0dTDK1Uf76UMyepRQE6btfHWZZmTMnXG8yMu15I6Lg1NOfQUpzEUAaoYsoc 8Ja381USMftm07LB1KwWUwS8R/czZGzoocizDMS37m+ifrQ6vwQs2OL56XV0PF+W 2ydPyKKdSMobdxCgkzVxu57jHI0KjA8dWF8NvAcQ3H74QsSDppY9H7sd7PWNtbp0 VtabFNXjL5GJnYv1t/FxbkZGBdXzPNl/aVJqZVERnpzNZ2YMfRwltA11luneStrl GdsWdeL0r5h2ugTt1KqIlaPEVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiVv5l0 XZVHfBq3OTpscUeQmFbFMB8GA1UdIwQYMBaAFKB809ECGljCQKEhN0ALl7GLeZjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA0MC85QjA0QTBGMkEz NDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdNSkFvU0UzUUF1WHNZdDVt TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29IelQwUUlhV01KQW9TRTNRQXVYc1l0NW1OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDA0MC85QjA0QTBGMkEzNDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdN SkFvU0UzUUF1WHNZdDVtTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1S1ocKAGO1c7jsCiwcRX/HPXhJMTbmOOpbt0d1DWnigQp5YPr9Fq umfzNdBh5s/TYMp6JeY/vL4XKnXqvmqthpzYcl8RsTtHDdbCyFYr80BcAcZ/XLT9 mvViUlf7fHCgXqZStG5PQUVFVb6IWv1YFk4lxlVpFeKBNKCetTeH7kzs0zLm4/uL i/tVamz4SHPp+sB4tbEI4LJBYE9+rZ7G/zpSumtsfWmFlKlg6UkVQVIgzro9Dr0o Q/LFxLOWMbXtShPvy3YaEnDYAGuzN4bh2XF8pGoMZK3XVMooMP32qZ4RSa3sjjMl ELDrvGlLiYn45lmEg5euEso6P9iVEuJN -----END CERTIFICATE-----Generated at Sun Jul 20 15:17:04 2025 by rpki-client