$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: Fwm3AzVh8Fsol8K6ZBpMtwf0ff9Vr49x6dD3CWvXKSg= Subject key identifier: 9C:EF:EE:F3:0D:85:72:83:8E:F7:9B:A8:3F:B3:07:69:87:0B:C5:95 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 3614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 356A Signing time: Fri 18 Jul 2025 14:24:39 +0000 Manifest this update: Fri 18 Jul 2025 14:24:39 +0000 Manifest next update: Fri 25 Jul 2025 14:24:39 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: 6RR3esMiM8/0DxsqR1hxGbdWoc3AGxePkZJAlIFmKY0=) 2: 608B0526308511F0AD5E7760C4F9AE02.roa (hash: vLE1ive57Bl66BXPQleXFbzJWKlXtTM6jQsjzKxDkyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13844 (0x3614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Jul 18 14:24:39 2025 GMT Not After : Jul 25 14:24:39 2025 GMT Subject: CN=687a5927-850f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:0e:4f:aa:eb:42:ad:ca:71:9b:04:92:78: 7b:8d:8f:dc:22:dc:a4:42:90:4f:e3:8d:e5:f0:6f: 87:0a:ca:f5:4f:ef:a3:18:e4:c3:a4:66:21:db:d8: c0:0f:e5:7d:2c:ba:02:bc:de:65:a5:7a:bc:2f:cf: 04:dd:82:43:56:9a:ec:82:b4:6c:16:cc:b5:3f:e9: 79:5e:17:14:a5:7a:49:fd:5a:a2:e1:ab:d7:d4:e3: 3a:6f:02:3c:73:aa:d3:47:c8:36:b0:73:33:17:10: 48:54:a9:b8:77:91:a8:93:7e:eb:47:77:f0:d6:6e: 8f:e3:c8:aa:47:a2:13:68:e8:a1:f9:55:b0:87:40: 39:98:41:37:5f:b7:a3:56:fc:ef:15:a2:93:5c:39: 21:4f:5e:f5:ab:d5:e5:1e:0d:da:b8:f2:93:2d:60: 99:c1:6f:59:41:d4:9f:14:c2:99:3d:25:79:22:11: 43:44:71:14:2b:26:16:a2:f5:fa:04:54:b6:b3:f5: 77:43:b6:ab:e2:18:3b:37:40:f8:a9:57:8a:8a:2b: 60:ec:eb:ca:f0:50:17:e6:0a:0e:63:ec:87:3e:23: 15:f0:43:d8:a8:d4:cd:ca:68:73:70:ee:de:bb:fa: bb:39:18:a1:10:72:e4:53:0b:f2:a4:b4:3c:04:54: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:EE:F3:0D:85:72:83:8E:F7:9B:A8:3F:B3:07:69:87:0B:C5:95 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0d:6e:7d:cf:e7:ad:7a:bc:aa:f3:19:b7:6e:01:e4:f3:2d: 5c:15:c2:15:d4:ec:a2:68:7d:47:19:5c:d2:7b:41:a2:6a:ff: 5f:a1:53:c0:ab:8d:8a:04:79:9f:04:95:57:63:78:15:fe:dd: 65:49:ac:f6:73:d6:49:d4:3a:65:1d:dd:5a:83:50:01:68:39: aa:a6:9e:e2:ac:aa:5a:d0:89:da:6b:32:af:6e:98:0b:62:47: f3:5d:8f:14:fa:0d:45:7c:59:81:5d:a6:65:b9:63:5a:36:d1: df:d5:a9:36:e9:bf:4e:a5:ac:02:31:5d:10:2e:35:ae:ec:af: 6b:77:32:94:35:55:3f:e7:3c:eb:e7:6e:a3:3a:45:e0:56:62: 76:5b:3a:a0:99:f0:7e:df:8d:fb:cd:ca:67:ce:95:9c:a9:f4: 21:5e:2a:71:75:ca:ec:3f:5b:e7:6d:eb:a6:28:54:e7:fb:90: 28:3e:56:c2:31:36:58:58:41:56:96:eb:e7:5e:95:70:96:a5: 41:5b:cd:84:57:1b:1b:65:a6:4a:27:d1:cd:0c:d2:d4:c1:58: 32:6f:4e:b0:86:72:f1:e8:50:7d:e8:07:9e:8a:ab:84:b3:59: 6b:7b:51:e5:ff:c0:0a:ea:5a:fb:6b:fe:33:48:f1:59:a6:ed: ec:c4:51:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwNzE4MTQyNDM5WhcNMjUwNzI1MTQyNDM5WjAYMRYwFAYD VQQDEw02ODdhNTkyNy04NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02gOT6rrQq3KcZsEknh7jY/cItykQpBP443l8G+HCsr1T++jGOTDpGYh29jA D+V9LLoCvN5lpXq8L88E3YJDVprsgrRsFsy1P+l5XhcUpXpJ/Vqi4avX1OM6bwI8 c6rTR8g2sHMzFxBIVKm4d5Gok37rR3fw1m6P48iqR6ITaOih+VWwh0A5mEE3X7ej VvzvFaKTXDkhT171q9XlHg3auPKTLWCZwW9ZQdSfFMKZPSV5IhFDRHEUKyYWovX6 BFS2s/V3Q7ar4hg7N0D4qVeKiitg7OvK8FAX5goOY+yHPiMV8EPYqNTNymhzcO7e u/q7ORihEHLkUwvypLQ8BFQnLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzv7vMN hXKDjvebqD+zB2mHC8WVMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoDW59z+eteryq8xm3bgHk8y1cFcIV1OyiaH1HGVzSe0Giav9foVPA q42KBHmfBJVXY3gV/t1lSaz2c9ZJ1DplHd1ag1ABaDmqpp7irKpa0InaazKvbpgL YkfzXY8U+g1FfFmBXaZluWNaNtHf1ak26b9OpawCMV0QLjWu7K9rdzKUNVU/5zzr 526jOkXgVmJ2WzqgmfB+3437zcpnzpWcqfQhXipxdcrsP1vnbeumKFTn+5AoPlbC MTZYWEFWluvnXpVwlqVBW82EVxsbZaZKJ9HNDNLUwVgyb06whnLx6FB96AeeiquE s1lre1Hl/8AK6lr7a/4zSPFZpu3sxFGm -----END CERTIFICATE-----Generated at Sun Jul 20 11:06:45 2025 by rpki-client