$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: DHM/f+H5GzeA5sqbHNHijgk4UVcLjxfdwOJ43Y0da5M= Subject key identifier: E1:30:D7:26:87:30:26:3B:E7:02:32:C1:A5:B8:77:1D:AB:32:6A:0C Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0778 Signing time: Tue 22 Jul 2025 21:51:13 +0000 Manifest this update: Tue 22 Jul 2025 21:51:12 +0000 Manifest next update: Tue 29 Jul 2025 21:51:12 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: cF9rxzy5eiCTL2KmOnQZ0gUmf6YhoJJZnuWywn2Sm4o=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Jul 22 21:51:12 2025 GMT Not After : Jul 29 21:51:12 2025 GMT Subject: CN=688007d0-8b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:b4:37:f6:16:b4:c6:e2:de:a4:e7:5b:b3: a9:de:44:6d:43:1d:9a:cc:80:77:cf:0f:66:be:0c: 28:c0:85:98:ad:dc:6d:ba:ff:da:5f:c8:15:23:36: ee:17:ba:da:cf:82:76:1a:40:54:0f:3f:ff:dc:0d: ea:14:5c:b7:34:89:d3:dd:cf:1f:fa:18:d7:e8:5f: dc:c8:09:32:c9:91:c3:04:3a:6c:74:fd:b7:29:c0: 6e:f7:1b:51:79:58:bd:be:ac:33:4e:cf:0f:36:0c: 96:01:97:00:5e:ca:e7:13:63:da:ef:a8:46:d8:6d: 38:ed:28:b0:85:f4:c0:e7:e9:25:39:bb:03:dc:61: a3:ac:72:26:06:6a:53:86:72:7a:86:6a:28:a5:47: 7c:0f:52:30:99:cd:9c:4b:e2:31:16:b9:9e:b6:47: 39:1e:64:01:c4:55:5e:f2:1c:88:73:00:a5:32:c0: c5:af:66:46:f9:88:08:40:56:6f:74:79:cf:83:44: 56:1d:d4:b7:35:29:94:42:6a:39:29:8e:cc:31:40: 68:b8:08:69:31:9b:78:18:b3:e5:9a:f9:b6:e2:ce: e5:9e:50:5b:13:ad:2c:4e:f1:6a:6c:43:8f:86:15: a5:f4:00:89:b8:fc:41:3c:ff:1a:11:45:2e:f9:82: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:30:D7:26:87:30:26:3B:E7:02:32:C1:A5:B8:77:1D:AB:32:6A:0C X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:0e:77:04:31:fa:b5:34:29:6a:26:db:95:98:ae:88:f8: f1:58:a3:10:a5:72:a5:b6:d4:46:cc:67:24:cb:45:b3:5b:28: 27:4e:d8:e2:61:76:03:81:be:ac:41:80:e6:3c:fa:d5:29:d3: 04:72:c1:ea:69:be:6e:b3:0a:c0:91:d4:b4:6d:a6:9f:8c:c4: 21:80:42:ac:e8:3f:7f:6e:57:25:46:0a:7a:74:8e:a1:95:eb: a1:a6:dc:f3:c5:3a:cb:8b:22:22:c3:42:50:fa:82:6c:96:16: 6d:7a:19:bf:bc:9e:7a:16:c8:1d:8e:f7:b7:08:f8:bf:b0:5d: dd:ba:37:c6:14:2e:44:37:1c:80:2a:8f:80:79:25:c7:e6:6f: 89:20:79:e0:05:03:b8:68:bd:b8:67:bb:9a:a1:b9:91:cf:1c: 9d:f5:91:83:4f:e8:89:fd:1e:f1:f1:7c:52:80:2b:1c:00:42: fc:73:1f:4f:36:07:be:5a:1f:18:4a:6a:6d:06:1f:d2:61:9f: 57:47:3d:69:e6:1c:9d:88:ad:2f:b7:c1:f8:ed:3f:95:19:fd: ac:0a:9d:17:73:1f:08:c7:dc:57:fb:6d:3f:e9:ac:c7:b1:44: 07:41:1a:ae:16:ed:a9:1b:c5:bf:51:bd:99:cf:8b:76:6d:f1: 35:6f:0a:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwNzIyMjE1MTEyWhcNMjUwNzI5MjE1MTEyWjAYMRYwFAYD VQQDEw02ODgwMDdkMC04YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40G0N/YWtMbi3qTnW7Op3kRtQx2azIB3zw9mvgwowIWYrdxtuv/aX8gVIzbu F7raz4J2GkBUDz//3A3qFFy3NInT3c8f+hjX6F/cyAkyyZHDBDpsdP23KcBu9xtR eVi9vqwzTs8PNgyWAZcAXsrnE2Pa76hG2G047SiwhfTA5+klObsD3GGjrHImBmpT hnJ6hmoopUd8D1Iwmc2cS+IxFrmetkc5HmQBxFVe8hyIcwClMsDFr2ZG+YgIQFZv dHnPg0RWHdS3NSmUQmo5KY7MMUBouAhpMZt4GLPlmvm24s7lnlBbE60sTvFqbEOP hhWl9ACJuPxBPP8aEUUu+YI5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEw1yaH MCY75wIywaW4dx2rMmoMMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3g53BDH6tTQpaibblZiuiPjxWKMQpXKlttRGzGcky0WzWygnTtji YXYDgb6sQYDmPPrVKdMEcsHqab5uswrAkdS0baafjMQhgEKs6D9/blclRgp6dI6h leuhptzzxTrLiyIiw0JQ+oJslhZtehm/vJ56Fsgdjve3CPi/sF3dujfGFC5ENxyA Ko+AeSXH5m+JIHngBQO4aL24Z7uaobmRzxyd9ZGDT+iJ/R7x8XxSgCscAEL8cx9P Nge+Wh8YSmptBh/SYZ9XRz1p5hydiK0vt8H47T+VGf2sCp0Xcx8Ix9xX+20/6azH sUQHQRquFu2pG8W/Ub2Zz4t2bfE1bwqr -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:53 2025 by rpki-client