$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json) Hash identifier: YEJ5TpNFnEL+s1OR+nq+Kw+3F+gWzqo4fAXeWBnqhts= Subject key identifier: 5E:2F:3B:1B:5F:61:68:80:DE:30:9B:EC:55:EB:EC:54:45:6F:45:13 Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft Manifest number: 015B Signing time: Sat 19 Jul 2025 04:16:56 +0000 Manifest this update: Sat 19 Jul 2025 04:16:55 +0000 Manifest next update: Sat 26 Jul 2025 04:16:55 +0000 Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: TcLGN5AbmRJNjtC3ntm3w+Ee8qmbGua3xR94MkQJTZg=) 2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: S579X7Eg58aEG3SPKUs0UURwjN76vzCVTAQS2DSPcNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Validity Not Before: Jul 19 04:16:55 2025 GMT Not After : Jul 26 04:16:55 2025 GMT Subject: CN=687b1c38-77aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:0b:7e:15:79:9b:57:6b:1e:fe:09:b0:f3: f5:37:1c:07:fd:17:ce:4d:b3:f7:69:10:b5:2b:89: a1:22:e3:1a:db:7c:d0:df:1f:27:5c:cf:d8:65:18: 45:43:30:b4:7d:ad:a6:a3:64:14:bf:3f:de:0a:05: 9d:98:27:c3:f3:f5:63:98:f3:9c:82:63:82:e6:c8: 27:71:ce:58:e1:ad:e6:83:f5:e6:b7:bc:fe:00:91: fb:1d:fc:94:3d:95:24:8b:dc:bf:7f:98:43:ff:1d: ac:e7:fe:83:7e:0f:e5:41:c2:55:c4:dc:d3:e8:0a: 5e:51:df:e1:23:96:0e:ba:30:45:8b:d0:84:01:e9: 00:ba:d7:c9:38:82:e3:20:d2:e4:c8:17:52:3e:d3: 9d:2c:49:0d:f5:3e:f7:a2:62:41:46:26:95:43:46: 59:38:ef:40:aa:ef:47:02:14:0f:e6:8f:f4:93:d8: 2c:76:3e:23:85:51:24:e5:3b:d8:17:98:c8:a2:28: 2e:1a:ee:3e:ca:81:45:a4:c0:74:6f:99:0b:90:1d: 41:51:28:a0:41:64:58:6b:f0:d9:2c:38:7c:2a:03: b7:62:c0:8c:20:64:98:c0:8b:3e:8d:c9:bd:e7:27: c7:44:23:ec:8f:5a:6a:89:41:0f:00:23:c1:3a:49: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:3B:1B:5F:61:68:80:DE:30:9B:EC:55:EB:EC:54:45:6F:45:13 X509v3 Authority Key Identifier: keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:f7:fc:66:e4:2f:cc:33:7c:38:58:83:71:39:62:36:98: 56:88:73:89:c2:41:e3:69:d3:ee:31:37:ea:17:34:8c:25:d0: 0f:d8:2a:75:e7:bc:ec:9a:17:16:12:36:f1:e1:54:45:36:59: 19:7f:b6:46:d7:d4:95:9b:0d:c9:5d:6c:97:2a:7b:72:f2:a2: f4:a9:19:f3:ad:b3:9f:9c:c5:f1:c4:bf:62:af:cc:a1:63:86: 58:cd:d3:b0:31:7d:ee:c6:cd:0b:19:c8:22:51:65:bb:a0:c5: 54:18:6c:05:4c:5b:fa:14:00:ab:88:46:cf:ad:ea:1c:39:0f: ce:42:b3:d3:2f:6e:e4:ef:94:78:c5:f3:4c:90:8d:a6:0b:96: b8:1e:16:25:56:61:38:28:1e:cc:bc:eb:3f:d6:b6:cd:e3:0f: 6c:c2:2f:4d:12:7a:81:e0:73:3b:4b:bf:7d:ad:e2:fe:1c:f5: 38:4e:c8:8b:0d:7c:af:5b:fd:09:28:75:37:40:aa:3b:47:9e: 7c:fc:28:cc:4b:b2:3e:58:c7:f1:56:38:08:ff:99:cd:b4:41: a9:9e:a5:98:0b:45:b7:e5:c4:68:70:97:d6:ac:49:c5:15:3a: 4a:16:d8:eb:5d:1b:ce:ab:da:f1:1a:6b:dd:bb:a4:3b:97:87: 45:83:d9:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG NjdGQ0IxRDMwHhcNMjUwNzE5MDQxNjU1WhcNMjUwNzI2MDQxNjU1WjAYMRYwFAYD VQQDEw02ODdiMWMzOC03N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk4LfhV5m1drHv4JsPP1NxwH/RfOTbP3aRC1K4mhIuMa23zQ3x8nXM/YZRhF QzC0fa2mo2QUvz/eCgWdmCfD8/VjmPOcgmOC5sgncc5Y4a3mg/Xmt7z+AJH7HfyU PZUki9y/f5hD/x2s5/6Dfg/lQcJVxNzT6ApeUd/hI5YOujBFi9CEAekAutfJOILj INLkyBdSPtOdLEkN9T73omJBRiaVQ0ZZOO9Aqu9HAhQP5o/0k9gsdj4jhVEk5TvY F5jIoiguGu4+yoFFpMB0b5kLkB1BUSigQWRYa/DZLDh8KgO3YsCMIGSYwIs+jcm9 5yfHRCPsj1pqiUEPACPBOkk+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4vOxtf YWiA3jCb7FXr7FRFb0UTMB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BNDcwNzg1RTU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEkt SEVpMTlRMW9EUFQyZjhzZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEFff8ZuQvzDN8OFiDcTliNphWiHOJwkHjadPuMTfqFzSMJdAP2Cp1 57zsmhcWEjbx4VRFNlkZf7ZG19SVmw3JXWyXKnty8qL0qRnzrbOfnMXxxL9ir8yh Y4ZYzdOwMX3uxs0LGcgiUWW7oMVUGGwFTFv6FACriEbPreocOQ/OQrPTL27k75R4 xfNMkI2mC5a4HhYlVmE4KB7MvOs/1rbN4w9swi9NEnqB4HM7S799reL+HPU4TsiL DXyvW/0JKHU3QKo7R558/CjMS7I+WMfxVjgI/5nNtEGpnqWYC0W35cRocJfWrEnF FTpKFtjrXRvOq9rxGmvdu6Q7l4dFg9lQ -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:23 2025 by rpki-client