$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: k1yzN05x79kM67cluu4tqosQOy1oJHgot1uL+rUFMQY= Subject key identifier: E3:EA:A7:B7:04:D6:26:94:B5:39:3C:0F:71:7F:40:8E:3C:7C:7E:D0 Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 52 Signing time: Sat 19 Jul 2025 07:28:43 +0000 Manifest this update: Sat 19 Jul 2025 07:28:42 +0000 Manifest next update: Sat 26 Jul 2025 07:28:42 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: O7eeqOkUXdAlq0iJAo9ims1LxRCKtyBsQISkO78NUuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Jul 19 07:28:42 2025 GMT Not After : Jul 26 07:28:42 2025 GMT Subject: CN=687b492b-3c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:a2:22:da:49:61:f0:39:46:d3:e4:87:2e: 45:2e:b3:85:15:cf:4d:cc:4c:62:a3:e6:8f:ba:4d: 54:fa:b9:e2:69:ba:14:77:19:4a:10:4c:b4:b1:c8: 27:1a:f1:cf:33:b3:8a:04:9b:76:6f:f5:71:07:d3: 85:10:44:09:74:2f:29:f3:6f:02:7c:1b:43:94:35: 8e:be:17:c4:42:c6:6a:1f:06:1e:f6:b3:43:84:3a: c0:7f:8b:ff:0e:ce:85:4a:19:be:cb:c6:b7:06:a2: 16:f4:a7:40:4b:a2:ae:9e:c9:66:26:85:83:0a:a7: 89:b2:d1:41:1d:58:29:0b:93:11:bb:ec:83:70:c8: 6e:e4:b7:da:49:e3:83:d2:7a:5e:11:b4:82:af:64: fc:9f:5c:c2:e1:d5:8a:10:20:e2:c6:6c:2c:31:d1: b5:62:15:c7:86:de:ec:f0:82:57:a0:a0:fc:a0:b0: 05:91:cb:42:fc:7b:a8:d5:37:1e:5f:05:79:72:b5: 11:1b:97:50:53:14:db:c5:44:93:b7:1c:0e:d7:3a: af:4e:b2:81:54:b6:bb:4a:ed:80:73:d0:26:66:83: 1a:d9:92:bd:0c:1a:d4:00:4f:c9:32:89:d2:d9:bb: be:96:19:6b:01:dd:5f:ae:36:e4:b0:4c:e3:54:38: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EA:A7:B7:04:D6:26:94:B5:39:3C:0F:71:7F:40:8E:3C:7C:7E:D0 X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5e:52:1b:f6:c5:78:e3:96:0e:3c:e7:20:f9:6d:a0:1a:29: 2d:7c:84:2b:8e:37:86:fd:25:da:40:8b:f0:8d:45:a0:8c:8b: 5b:34:a0:20:ce:17:dd:eb:94:05:b2:ac:0e:b3:3b:83:b8:b7: e2:8e:76:49:4d:dc:ed:b0:9e:37:92:26:92:31:29:fd:04:b5: 8a:c4:c5:82:58:13:74:48:9a:10:51:6d:97:21:03:4e:11:d2: ca:73:19:3e:88:8a:a9:08:f2:30:2f:31:5a:91:cb:e7:7f:de: b0:e6:af:7f:51:da:d6:27:7d:ce:8c:94:1a:67:70:3f:7e:29: ca:8c:12:40:d6:a9:6b:46:b1:06:01:19:87:36:b1:b6:23:62: 52:ab:13:8e:27:2a:fd:3f:9d:e1:ad:9a:be:1d:fb:66:ca:b1: e7:4d:18:11:68:2f:d4:04:ef:f5:6f:7b:3f:0e:e2:68:a8:cc: 5b:ed:97:f2:7f:47:34:a7:df:3e:9e:24:7c:c4:f8:1c:f1:53: 7a:9f:8e:77:ec:b8:e6:8b:9c:df:cb:bd:98:6c:53:1f:42:1c: 50:ef:ef:d8:62:80:16:a0:63:bc:fd:d2:0d:28:3f:0b:27:49: 81:15:a2:69:32:f4:9e:af:b7:84:66:f2:2a:4b:92:b9:08:69: c5:13:0f:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA3MTkwNzI4NDJaFw0yNTA3MjYwNzI4NDJaMBgxFjAUBgNV BAMTDTY4N2I0OTJiLTNjODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4k6Ii2klh8DlG0+SHLkUus4UVz03MTGKj5o+6TVT6ueJpuhR3GUoQTLSxyCca 8c8zs4oEm3Zv9XEH04UQRAl0LynzbwJ8G0OUNY6+F8RCxmofBh72s0OEOsB/i/8O zoVKGb7LxrcGohb0p0BLoq6eyWYmhYMKp4my0UEdWCkLkxG77INwyG7kt9pJ44PS el4RtIKvZPyfXMLh1YoQIOLGbCwx0bViFceG3uzwglegoPygsAWRy0L8e6jVNx5f BXlytREbl1BTFNvFRJO3HA7XOq9OsoFUtrtK7YBz0CZmgxrZkr0MGtQAT8kyidLZ u76WGWsB3V+uNuSwTONUOGNfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+qntwTW JpS1OTwPcX9Ajjx8ftAwHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIheUhv2xXjjlg485yD5baAaKS18hCuON4b9JdpAi/CNRaCMi1s0oCDO F93rlAWyrA6zO4O4t+KOdklN3O2wnjeSJpIxKf0EtYrExYJYE3RImhBRbZchA04R 0spzGT6IiqkI8jAvMVqRy+d/3rDmr39R2tYnfc6MlBpncD9+KcqMEkDWqWtGsQYB GYc2sbYjYlKrE44nKv0/neGtmr4d+2bKsedNGBFoL9QE7/Vvez8O4miozFvtl/J/ RzSn3z6eJHzE+BzxU3qfjnfsuOaLnN/LvZhsUx9CHFDv79higBagY7z90g0oPwsn SYEVomky9J6vt4Rm8ipLkrkIacUTDyg= -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:53 2025 by rpki-client