$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: f0dm+B2A2HIrjTWn1ABntU/D914QYnRfgncM96c/z4Q= Subject key identifier: 30:05:CB:04:EE:1C:3D:29:AE:4F:5C:B5:65:ED:F7:9D:E2:95:BA:75 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 07BE Signing time: Fri 22 Aug 2025 21:27:26 +0000 Manifest this update: Fri 22 Aug 2025 21:27:26 +0000 Manifest next update: Fri 29 Aug 2025 21:27:25 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: GAzw4YVkm+zpF03tD+bw0B4PE5jGktEmGbANl/xsw1E=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: Ld5X+hhHes8uxmazOqPYTCeJp0q6EYoIhogSp+9j3P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Aug 22 21:27:26 2025 GMT Not After : Aug 29 21:27:25 2025 GMT Subject: CN=68a8e0be-f1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:20:df:a1:fd:18:f2:08:d5:27:d0:2d:28: 3e:a2:35:ba:93:fd:32:ac:89:33:78:a2:98:ee:fe: a5:8c:ae:cb:16:2e:17:58:0a:7f:83:3f:02:94:d3: 5a:aa:1c:50:b3:fd:11:76:e9:5c:da:33:e3:39:9f: 62:bb:9f:9c:dc:61:74:c9:96:a0:49:53:41:06:62: bb:8b:09:33:9c:37:3d:3f:81:1e:aa:34:4d:a1:3c: 20:13:aa:22:2e:2e:2b:1a:56:de:70:3a:ed:23:79: 87:f7:36:6f:d1:97:50:10:26:7e:3b:59:40:24:1f: a0:38:91:b7:c0:06:32:45:82:d4:45:21:9d:b3:ae: 41:d1:5f:44:8f:d7:5c:40:b3:9a:0e:95:23:da:ff: cd:21:40:b0:6c:ef:d5:aa:0b:8d:38:b2:bd:76:51: a0:e0:5f:a6:73:fc:8f:fe:a3:31:14:58:d0:c8:bb: 11:cd:a0:f8:85:85:e0:03:fc:23:8c:59:1a:29:70: f1:04:7a:ff:fe:a0:60:55:84:f7:ab:ee:0c:d7:ac: 2e:d3:18:0c:57:e8:de:74:c2:c3:79:cb:3f:93:29: 8e:be:e3:a6:85:6e:61:57:a6:6d:47:73:50:04:60: 9a:da:75:9a:2f:eb:e8:37:db:4c:a9:b2:95:4f:46: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:05:CB:04:EE:1C:3D:29:AE:4F:5C:B5:65:ED:F7:9D:E2:95:BA:75 X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:81:65:a9:c4:62:a1:5e:e0:df:e3:92:36:bb:26:0d:c2: 8c:58:0d:f0:09:e4:53:42:d0:b1:69:9b:4f:65:cf:75:f5:ae: 1b:1f:2f:eb:d1:dd:ef:93:3d:0f:d6:b8:27:77:89:7d:4f:c1: fd:fb:47:b3:87:b1:10:51:a8:66:75:b4:b1:75:0c:b4:b1:bc: 7d:d9:16:ec:a1:db:9c:b0:42:ed:5c:e0:c8:97:c1:d2:2f:82: 8a:f4:65:0a:53:1c:2e:8e:f2:1a:cc:88:82:f8:2b:d7:30:45: 27:a9:49:8e:f0:4d:78:ad:31:2c:32:ff:cd:d3:aa:fc:fb:06: 6c:30:4d:b4:e3:db:72:1f:2b:e1:71:a2:c0:d7:b3:ac:bf:34: d1:81:ff:8d:dd:93:d3:bd:d0:f9:a7:d2:c1:c4:b2:d6:4f:a9: 67:b9:f2:2e:35:d9:7c:08:50:9c:82:22:2a:79:11:f9:6f:8f: ca:83:f3:17:c6:49:99:15:df:b0:08:2c:5d:5e:d9:b8:07:ab: 2c:5b:c8:a6:b0:6e:7a:5e:8f:10:67:ef:7e:9e:66:ec:42:5e: e1:10:3d:d8:9b:6b:a8:7b:8f:8b:07:df:83:c9:00:ed:e6:18: f6:dc:49:0f:22:5e:c8:7c:54:cc:e5:2b:aa:c3:71:54:87:de: 35:c5:9b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUwODIyMjEyNzI2WhcNMjUwODI5MjEyNzI1WjAYMRYwFAYD VQQDEw02OGE4ZTBiZS1mMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FUg36H9GPII1SfQLSg+ojW6k/0yrIkzeKKY7v6ljK7LFi4XWAp/gz8ClNNa qhxQs/0Rdulc2jPjOZ9iu5+c3GF0yZagSVNBBmK7iwkznDc9P4EeqjRNoTwgE6oi Li4rGlbecDrtI3mH9zZv0ZdQECZ+O1lAJB+gOJG3wAYyRYLURSGds65B0V9Ej9dc QLOaDpUj2v/NIUCwbO/VqguNOLK9dlGg4F+mc/yP/qMxFFjQyLsRzaD4hYXgA/wj jFkaKXDxBHr//qBgVYT3q+4M16wu0xgMV+jedMLDecs/kymOvuOmhW5hV6ZtR3NQ BGCa2nWaL+voN9tMqbKVT0b2EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAFywTu HD0prk9ctWXt953ilbp1MB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZ4FlqcRioV7g3+OSNrsmDcKMWA3wCeRTQtCxaZtPZc919a4bHy/r 0d3vkz0P1rgnd4l9T8H9+0ezh7EQUahmdbSxdQy0sbx92RbsoducsELtXODIl8HS L4KK9GUKUxwujvIazIiC+CvXMEUnqUmO8E14rTEsMv/N06r8+wZsME2049tyHyvh caLA17OsvzTRgf+N3ZPTvdD5p9LBxLLWT6lnufIuNdl8CFCcgiIqeRH5b4/Kg/MX xkmZFd+wCCxdXtm4B6ssW8imsG56Xo8QZ+9+nmbsQl7hED3Ym2uoe4+LB9+DyQDt 5hj23EkPIl7IfFTM5Suqw3FUh941xZvK -----END CERTIFICATE-----Generated at Sat Aug 23 07:27:35 2025 by rpki-client