$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: Ypvu41blmM2RC55PPtG/MktsbRlh9ieTDWMbcLaz6p0= Subject key identifier: 38:F8:75:A5:F1:9B:01:76:81:98:91:BC:93:CA:8B:68:0C:06:92:C2 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 0C Signing time: Tue 01 Jul 2025 08:55:08 +0000 Manifest this update: Tue 01 Jul 2025 08:55:07 +0000 Manifest next update: Tue 08 Jul 2025 08:55:07 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: J0379Wew3HH3ApCPxRYgG9/bAqRTebdOZVQakt6mEg0=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Jul 1 08:55:07 2025 GMT Not After : Jul 8 08:55:07 2025 GMT Subject: CN=6863a26b-7750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:d6:14:39:be:3e:1e:e9:e5:46:f1:c1:8c: 54:fd:81:08:16:aa:61:a1:cc:1d:83:db:42:b6:ea: 0e:00:37:57:39:74:24:3c:6e:a6:f8:88:3f:b5:d3: 98:ad:92:5d:c7:98:22:13:f5:a5:c5:42:cd:67:fb: 61:5b:03:27:9a:e8:15:9d:a7:de:51:ca:90:22:e8: 85:5c:f5:fd:c4:f0:3d:18:61:d9:54:a3:42:e8:8e: 90:ba:88:41:51:39:ce:2d:2c:a8:3b:1b:8b:c0:e3: 45:a2:2b:a2:b6:5e:68:df:15:cf:91:ec:d9:bc:81: 28:08:02:5e:3b:54:42:e1:8a:c5:25:2c:ce:2c:d9: 3c:ec:df:10:90:40:a6:25:e8:e7:a4:d7:fe:6e:05: 6e:f2:c0:c6:bd:99:ac:13:04:95:12:30:b6:4f:29: 97:71:99:8a:47:e1:08:4b:c1:01:f0:41:88:3a:7c: 22:f9:0d:fb:b2:65:96:74:05:45:d4:b8:ea:99:ea: e2:09:3c:d2:6f:17:97:6d:ef:fc:e9:54:34:08:14: 78:32:22:4e:d3:65:c9:ae:24:57:66:d2:67:ad:00: c2:1d:bd:ce:dc:97:e6:c2:b4:f5:a6:62:ce:00:ec: 48:4b:6f:b8:44:ab:7d:86:d1:64:b8:15:e6:55:ef: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F8:75:A5:F1:9B:01:76:81:98:91:BC:93:CA:8B:68:0C:06:92:C2 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:37:cc:b4:a2:28:bf:90:db:75:f6:40:28:15:0c:14:c7:d8: 73:85:7e:58:41:0b:ee:6e:ce:87:06:b0:8b:34:0f:92:35:d3: 4c:4f:02:51:57:64:4a:c1:93:9b:47:4d:77:31:35:d9:79:94: c7:84:08:5b:05:1f:b8:1f:e6:89:25:15:6a:e1:1c:75:df:b7: bc:c7:64:9a:83:9a:92:47:5b:95:0b:61:52:b7:d4:fc:dc:53: 80:eb:0b:cb:87:1a:90:f9:7d:26:9e:58:a3:85:9e:66:7e:fb: f4:48:a1:a1:19:14:54:6a:79:f4:70:6d:94:37:f1:91:f5:8c: 51:2c:2b:77:18:09:78:a5:a5:e0:6a:57:c7:5d:61:49:88:4b: 7c:58:60:3d:9b:fc:7e:4d:4f:a5:d2:3a:42:bf:3d:dd:2f:63: 99:d3:ca:8c:c2:54:d7:51:fd:51:36:8a:a7:37:30:b3:32:25: d2:13:88:a3:f7:23:ae:f2:59:f1:78:f0:84:ff:2b:4d:71:f5: b1:7d:e9:ad:31:d9:9c:43:e5:a7:6d:85:12:31:5e:6c:66:72: ee:1c:6b:88:1c:34:95:ac:7f:5e:df:5b:3e:b8:a5:66:6e:b9: 93:94:29:2b:54:98:7b:1d:aa:e1:92:24:d8:5d:b2:22:c2:0c: 9e:63:fb:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTA3MDEwODU1MDdaFw0yNTA3MDgwODU1MDdaMBgxFjAUBgNV BAMTDTY4NjNhMjZiLTc3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR0dYUOb4+HunlRvHBjFT9gQgWqmGhzB2D20K26g4AN1c5dCQ8bqb4iD+105it kl3HmCIT9aXFQs1n+2FbAyea6BWdp95RypAi6IVc9f3E8D0YYdlUo0LojpC6iEFR Oc4tLKg7G4vA40WiK6K2XmjfFc+R7Nm8gSgIAl47VELhisUlLM4s2Tzs3xCQQKYl 6Oek1/5uBW7ywMa9mawTBJUSMLZPKZdxmYpH4QhLwQHwQYg6fCL5DfuyZZZ0BUXU uOqZ6uIJPNJvF5dt7/zpVDQIFHgyIk7TZcmuJFdm0metAMIdvc7cl+bCtPWmYs4A 7EhLb7hEq32G0WS4FeZV70/3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOPh1pfGb AXaBmJG8k8qLaAwGksIwHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADs3zLSiKL+Q23X2QCgVDBTH2HOFflhBC+5uzocGsIs0D5I100xPAlFX ZErBk5tHTXcxNdl5lMeECFsFH7gf5oklFWrhHHXft7zHZJqDmpJHW5ULYVK31Pzc U4DrC8uHGpD5fSaeWKOFnmZ++/RIoaEZFFRqefRwbZQ38ZH1jFEsK3cYCXilpeBq V8ddYUmIS3xYYD2b/H5NT6XSOkK/Pd0vY5nTyozCVNdR/VE2iqc3MLMyJdITiKP3 I67yWfF48IT/K01x9bF96a0x2ZxD5adthRIxXmxmcu4ca4gcNJWsf17fWz64pWZu uZOUKStUmHsdquGSJNhdsiLCDJ5j+5I= -----END CERTIFICATE-----Generated at Wed Jul 2 01:06:23 2025 by rpki-client