$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: SZvX9s0YkmedOtR/pXiQlgQV+dFEsXyuHDSUCZTqKE4= Subject key identifier: 2B:92:0D:A4:C7:CF:10:2F:4B:0A:41:95:F6:33:70:14:21:AD:82:B8 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01AB Signing time: Thu 03 Jul 2025 03:20:50 +0000 Manifest this update: Thu 03 Jul 2025 03:20:50 +0000 Manifest next update: Thu 10 Jul 2025 03:20:50 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: N5h8Vhd1FXVjRI1H7URX02CF81ckxu9Fa9+CEbfAQxY=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Jul 3 03:20:50 2025 GMT Not After : Jul 10 03:20:50 2025 GMT Subject: CN=6865f712-c75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:de:0b:a8:c7:ba:1c:1a:4a:ba:db:b0:3b: 91:54:4f:82:2e:9f:7f:4a:97:dd:1a:87:a0:f5:da: 2e:84:55:94:8c:bd:18:2b:63:40:7a:25:9c:2b:45: 56:3d:86:37:e1:12:ef:b9:b3:89:83:b2:ac:c9:a6: 28:0e:95:d0:49:8a:48:c0:54:49:b6:9e:84:01:80: 42:b0:f5:17:b6:97:4d:bd:55:17:f7:13:24:0c:dd: 9c:00:49:5b:26:31:d7:e2:46:63:21:e1:45:00:38: b0:15:76:f5:c3:06:5d:5b:a9:33:72:aa:5e:8b:d2: 8f:42:fa:4c:98:68:6c:1f:f8:99:56:bf:3e:0d:75: 2b:3c:da:b3:d9:28:3a:9e:1e:fb:d4:bd:d4:39:ac: 19:27:50:51:c9:3d:47:63:7d:c4:c6:47:8c:f1:b7: 53:6b:0c:47:d1:c8:a3:c1:75:3f:09:fc:d4:fd:57: dc:3e:6d:03:33:27:47:d8:ea:94:87:49:99:90:e8: 9c:13:af:36:6b:7b:ad:fa:68:49:28:63:63:45:ad: cb:41:e6:df:17:25:87:6c:a3:5d:50:2f:3f:7d:6c: 64:2b:5f:8e:4a:06:bb:25:92:7c:da:02:e4:83:e3: 54:0c:44:85:c4:c6:13:f6:83:af:12:67:ba:43:3a: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:0D:A4:C7:CF:10:2F:4B:0A:41:95:F6:33:70:14:21:AD:82:B8 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e5:58:97:eb:b6:e4:99:92:c8:53:4b:8e:68:82:4c:14:3d: 2a:e7:7c:20:99:e8:03:57:bf:5c:f7:1f:d2:e6:a8:eb:de:d3: 70:22:32:20:d0:7b:ae:3c:9a:ec:d6:0f:f4:ff:9f:b8:af:44: 15:7b:08:4c:a2:0d:99:8e:41:9c:ca:ea:b2:24:7f:4d:01:47: 2b:e0:74:35:2b:1e:f6:c1:ad:fa:14:92:bf:b2:9e:af:01:96: f2:04:d3:9a:4d:7f:31:1e:2d:f7:74:63:70:9f:b2:26:67:29: e9:7a:9f:5a:9b:c9:59:78:25:1e:23:45:df:df:32:f0:6d:11: aa:a5:cc:47:87:aa:10:8b:68:d5:c2:5e:88:a5:a8:df:41:bd: 8b:d7:fc:78:92:13:52:f2:27:6b:7a:09:02:2f:fe:1d:31:4b: ef:7b:7e:2c:34:84:d9:27:a3:87:7a:f1:fd:03:fc:08:d4:68: 73:22:2a:60:f0:7d:67:19:19:44:8b:1e:ec:82:61:e8:cc:37: 76:c0:8d:9b:d7:5c:6f:a3:9b:c6:48:d1:a8:24:ab:d9:bb:e6: 8f:ae:23:17:db:f7:3d:59:b5:46:f3:54:d3:b0:21:f6:c4:65: f8:a2:6c:a6:cd:34:1c:06:8b:8e:8a:a9:2a:21:27:47:a2:1f: a8:0c:17:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwNzAzMDMyMDUwWhcNMjUwNzEwMDMyMDUwWjAYMRYwFAYD VQQDEw02ODY1ZjcxMi1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5PeC6jHuhwaSrrbsDuRVE+CLp9/SpfdGoeg9douhFWUjL0YK2NAeiWcK0VW PYY34RLvubOJg7KsyaYoDpXQSYpIwFRJtp6EAYBCsPUXtpdNvVUX9xMkDN2cAElb JjHX4kZjIeFFADiwFXb1wwZdW6kzcqpei9KPQvpMmGhsH/iZVr8+DXUrPNqz2Sg6 nh771L3UOawZJ1BRyT1HY33ExkeM8bdTawxH0cijwXU/CfzU/VfcPm0DMydH2OqU h0mZkOicE682a3ut+mhJKGNjRa3LQebfFyWHbKNdUC8/fWxkK1+OSga7JZJ82gLk g+NUDESFxMYT9oOvEme6QzoE6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuSDaTH zxAvSwpBlfYzcBQhrYK4MB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5ViX67bkmZLIU0uOaIJMFD0q53wgmegDV79c9x/S5qjr3tNwIjIg 0HuuPJrs1g/0/5+4r0QVewhMog2ZjkGcyuqyJH9NAUcr4HQ1Kx72wa36FJK/sp6v AZbyBNOaTX8xHi33dGNwn7ImZynpep9am8lZeCUeI0Xf3zLwbRGqpcxHh6oQi2jV wl6IpajfQb2L1/x4khNS8idregkCL/4dMUvve34sNITZJ6OHevH9A/wI1GhzIipg 8H1nGRlEix7sgmHozDd2wI2b11xvo5vGSNGoJKvZu+aPriMX2/c9WbVG81TTsCH2 xGX4omymzTQcBouOiqkqISdHoh+oDBeL -----END CERTIFICATE-----Generated at Fri Jul 4 07:40:04 2025 by rpki-client