$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: Ki/xKs7z9B5D4enpjMd0Di393zKG/s4sxB4aNoubI/0= Subject key identifier: 1D:5C:4E:AD:95:62:74:1D:50:1A:9C:D3:A7:0F:1A:6E:99:25:53:04 Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03F5 Signing time: Sat 19 Jul 2025 00:24:00 +0000 Manifest this update: Sat 19 Jul 2025 00:23:59 +0000 Manifest next update: Sat 26 Jul 2025 00:23:59 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: sZaPAaCSKh9yjFe2fYJ0Ubiq6F1M22edihKyO0IQpvk=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Jul 19 00:23:59 2025 GMT Not After : Jul 26 00:23:59 2025 GMT Subject: CN=687ae59f-8013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:0c:f2:4e:9a:6d:dc:22:cd:86:17:90:75: 22:de:b3:af:a7:1e:9d:d3:ea:fd:8b:6c:c3:7e:f8: 68:1f:0d:5d:86:96:cd:20:e9:d7:5e:33:ce:6b:18: 65:b6:c8:2e:3b:78:1b:f6:a1:bc:a3:f7:c6:c0:60: 30:9d:68:dd:f8:e3:c2:d5:74:cd:de:1f:92:06:04: 08:b7:5f:5d:eb:72:b6:13:28:db:99:4d:5a:79:28: f3:55:e7:f6:87:5d:f0:02:98:f2:b6:6f:cd:6d:3e: 67:3d:50:85:dd:78:96:90:57:e3:a8:52:f9:69:38: 66:f7:f7:0c:1c:6d:0a:25:2b:dc:ea:15:1c:1e:85: 01:1a:ab:a5:26:95:eb:46:8e:54:c2:d9:46:e3:7e: 0d:98:d5:95:d7:c8:25:81:2c:09:15:88:c1:15:29: f4:6f:7b:a7:bc:dc:b6:e5:24:ac:bf:0f:ee:f1:ed: 81:6c:10:87:58:f4:d5:ef:bd:81:5f:62:a4:04:0c: 75:ac:63:66:4a:ff:15:2e:71:09:63:e7:0d:a0:9d: 3c:a2:bc:c8:f6:66:14:49:dc:b2:99:ae:a0:b9:52: 21:4a:7d:f3:e8:83:a2:2b:4b:26:1a:14:49:9a:80: 2f:d5:0a:ab:d5:d1:38:fd:1f:a8:f6:cb:7d:af:aa: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:4E:AD:95:62:74:1D:50:1A:9C:D3:A7:0F:1A:6E:99:25:53:04 X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4f:7f:49:8e:20:c6:e4:96:e2:58:9d:cf:59:20:23:e0:d7: 6a:56:47:62:a3:b8:46:d4:15:a3:86:eb:af:21:2a:20:f3:fd: 1d:53:9e:f0:73:95:bf:0c:ad:72:62:c1:42:8c:8a:37:45:0c: 87:f0:fe:9c:b2:d2:04:0e:c7:ae:b5:53:97:53:1b:b0:b3:38: dc:4d:25:7f:04:2a:63:7f:98:ae:30:30:0e:7e:3d:67:4a:40: 56:6a:1a:05:5c:55:6f:15:ec:5b:31:6c:54:88:12:3a:81:11: 0a:3d:fe:bb:e0:d1:f8:42:67:3e:8b:6f:f8:56:fb:ae:42:7e: 75:6f:93:3d:70:d8:29:82:3e:99:0f:50:7b:b4:d0:93:a2:50: 8e:d8:ca:15:d9:21:48:d8:3e:63:87:02:94:34:70:f9:03:94: bc:b5:b3:44:c3:75:9b:00:fa:41:87:82:e6:6d:b1:d0:1d:81: 28:77:01:2a:f2:d8:7b:3e:bd:96:b7:89:82:dd:c0:a9:39:c3: 9f:0c:65:a3:43:0a:44:24:62:88:0b:ec:7d:9c:7c:32:a5:51: 2e:1a:63:44:78:b1:5b:4a:f2:53:f8:45:88:04:d0:52:f9:0c: 62:ba:71:8f:94:06:dc:18:18:85:6f:25:61:22:38:1f:cf:bf: 04:91:97:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwNzE5MDAyMzU5WhcNMjUwNzI2MDAyMzU5WjAYMRYwFAYD VQQDEw02ODdhZTU5Zi04MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKoM8k6abdwizYYXkHUi3rOvpx6d0+r9i2zDfvhoHw1dhpbNIOnXXjPOaxhl tsguO3gb9qG8o/fGwGAwnWjd+OPC1XTN3h+SBgQIt19d63K2EyjbmU1aeSjzVef2 h13wApjytm/NbT5nPVCF3XiWkFfjqFL5aThm9/cMHG0KJSvc6hUcHoUBGqulJpXr Ro5UwtlG434NmNWV18glgSwJFYjBFSn0b3unvNy25SSsvw/u8e2BbBCHWPTV772B X2KkBAx1rGNmSv8VLnEJY+cNoJ08orzI9mYUSdyyma6guVIhSn3z6IOiK0smGhRJ moAv1Qqr1dE4/R+o9st9r6p4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1cTq2V YnQdUBqc06cPGm6ZJVMEMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpT39JjiDG5JbiWJ3PWSAj4NdqVkdio7hG1BWjhuuvISog8/0dU57w c5W/DK1yYsFCjIo3RQyH8P6cstIEDseutVOXUxuwszjcTSV/BCpjf5iuMDAOfj1n SkBWahoFXFVvFexbMWxUiBI6gREKPf674NH4Qmc+i2/4VvuuQn51b5M9cNgpgj6Z D1B7tNCTolCO2MoV2SFI2D5jhwKUNHD5A5S8tbNEw3WbAPpBh4LmbbHQHYEodwEq 8th7Pr2Wt4mC3cCpOcOfDGWjQwpEJGKIC+x9nHwypVEuGmNEeLFbSvJT+EWIBNBS +QxiunGPlAbcGBiFbyVhIjgfz78EkZd4 -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:37 2025 by rpki-client