$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: 780+me7/l5iXbwkNP3V9y+kUulwjAhZ/+vj65cOYdZo= Subject key identifier: DF:C3:AF:23:98:82:8E:2D:3C:D7:DF:5B:E0:60:0E:87:3C:F4:92:6F Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 05 Signing time: Sat 19 Jul 2025 08:28:09 +0000 Manifest this update: Sat 19 Jul 2025 08:28:08 +0000 Manifest next update: Sat 26 Jul 2025 08:28:08 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: T5ZO82mU8/O10mdMMF/64q3jzICcLSeB/CzOr1OKhbU=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Jul 19 08:28:08 2025 GMT Not After : Jul 26 08:28:08 2025 GMT Subject: CN=687b5719-281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:6f:c4:8c:6f:23:72:93:3e:c4:ee:b2:56: 85:bd:9f:31:06:bd:f4:57:32:4f:75:09:13:b1:57: e4:bf:2c:99:0b:31:fb:8b:10:e4:5a:b9:24:19:4c: 75:3e:ac:d6:2c:84:29:a6:ed:19:be:eb:41:3e:36: 75:df:6c:60:c6:68:96:db:37:90:8b:69:60:c6:24: 4d:d3:ac:d8:1e:93:da:f7:93:27:bf:7f:33:e6:11: a7:25:5f:75:33:81:a7:13:eb:00:e6:00:80:fa:c9: f8:a9:69:46:61:46:66:51:cb:db:8f:6e:66:d1:bd: cf:41:cc:00:fb:16:97:2c:b8:60:5c:17:f2:75:69: 5c:eb:ed:0f:63:b4:93:9c:18:b8:fa:f2:f4:03:81: 92:0f:1a:30:a8:57:ee:be:c5:5d:80:27:aa:aa:8d: 99:f7:0a:56:3f:bb:e9:e6:eb:fa:0b:72:8e:98:bf: f2:74:f1:7e:5c:be:81:14:55:5a:ae:c7:8a:69:e0: 9c:6d:8d:00:32:7d:9f:f8:64:f8:dd:6d:43:06:e9: 99:52:ba:e9:ce:3e:1d:7a:03:ba:af:69:d5:d2:b4: b6:55:db:bb:4a:d1:9f:37:dc:ad:eb:06:48:83:b8: 2f:da:8b:92:f6:be:fb:c8:fb:c0:b1:86:88:63:69: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:AF:23:98:82:8E:2D:3C:D7:DF:5B:E0:60:0E:87:3C:F4:92:6F X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:c3:6c:9e:0b:03:62:b0:e3:5d:8b:18:2f:62:db:2b:e9: 46:cf:f3:e0:c2:dc:4e:a2:62:70:3c:fd:0e:6a:be:ae:91:9f: f0:41:56:e6:d8:bd:96:2a:e4:c2:55:ec:14:75:0a:40:72:fa: 60:bf:19:43:c1:29:08:a5:2d:5d:66:2a:6d:07:1c:3e:19:27: 5d:c8:e7:c2:95:d9:5a:59:61:31:2d:e4:51:46:61:dc:ae:47: 88:ff:d1:5b:7f:d2:fb:97:62:18:5b:50:65:57:da:db:70:6c: 8a:b3:c5:39:1f:82:4d:23:93:c3:a9:f6:70:a8:e5:37:ea:18: ae:03:5e:f2:75:47:19:0a:56:ea:25:99:b4:71:07:08:04:93: 96:56:8f:58:be:e0:f9:22:2b:34:77:c2:90:52:b6:cd:1d:a6: e1:25:8c:61:cc:f9:f4:80:78:70:f7:1b:d7:90:e1:5b:ba:f9: c4:4f:c5:f2:e7:ee:b1:74:90:91:73:8a:bf:af:3b:da:4f:8c: 0b:68:1f:84:38:f6:fe:c6:50:ab:1d:2e:d5:7d:6b:05:f1:91: 72:34:70:c2:f3:a3:44:e8:c3:9d:98:61:49:a3:e1:9b:f0:c5: 56:5c:60:f0:14:a9:b4:33:1b:91:7e:a8:ac:37:37:37:e3:61: c9:f6:9e:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTA3MTkwODI4MDhaFw0yNTA3MjYwODI4MDhaMBgxFjAUBgNV BAMTDTY4N2I1NzE5LTI4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwXG/EjG8jcpM+xO6yVoW9nzEGvfRXMk91CROxV+S/LJkLMfuLEORauSQZTHU+ rNYshCmm7Rm+60E+NnXfbGDGaJbbN5CLaWDGJE3TrNgek9r3kye/fzPmEaclX3Uz gacT6wDmAID6yfipaUZhRmZRy9uPbmbRvc9BzAD7FpcsuGBcF/J1aVzr7Q9jtJOc GLj68vQDgZIPGjCoV+6+xV2AJ6qqjZn3ClY/u+nm6/oLco6Yv/J08X5cvoEUVVqu x4pp4JxtjQAyfZ/4ZPjdbUMG6ZlSuunOPh16A7qvadXStLZV27tK0Z833K3rBkiD uC/ai5L2vvvI+8CxhohjaZMxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU38OvI5iC ji08199b4GAOhzz0km8wHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOLw2yeCwNisONdixgvYtsr6UbP8+DC3E6iYnA8/Q5qvq6Rn/BBVubY vZYq5MJV7BR1CkBy+mC/GUPBKQilLV1mKm0HHD4ZJ13I58KV2VpZYTEt5FFGYdyu R4j/0Vt/0vuXYhhbUGVX2ttwbIqzxTkfgk0jk8Op9nCo5TfqGK4DXvJ1RxkKVuol mbRxBwgEk5ZWj1i+4PkiKzR3wpBSts0dpuEljGHM+fSAeHD3G9eQ4Vu6+cRPxfLn 7rF0kJFzir+vO9pPjAtoH4Q49v7GUKsdLtV9awXxkXI0cMLzo0Tow52YYUmj4Zvw xVZcYPAUqbQzG5F+qKw3NzfjYcn2nkc= -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:40 2025 by rpki-client