$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json) Hash identifier: BCWWC0kWzpFiopt6Dv6btu6NiATmc8JgtarSRySclOY= Subject key identifier: F4:5C:A2:E2:AA:F6:77:9B:95:76:2E:2D:0D:24:3D:88:DD:AC:F3:6C Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft Manifest number: 040B Signing time: Sat 05 Jul 2025 00:54:56 +0000 Manifest this update: Sat 05 Jul 2025 00:54:56 +0000 Manifest next update: Sat 12 Jul 2025 00:54:56 +0000 Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: 4a2GSCxT+X/Pwbyr85S+ZSx7CkMzdgSIQYr8xgVnlng=) 2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Validity Not Before: Jul 5 00:54:56 2025 GMT Not After : Jul 12 00:54:56 2025 GMT Subject: CN=686877e0-9209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:59:c7:bd:06:65:bc:e5:d5:5b:5f:83:b2: 63:f7:97:64:3f:84:ab:a7:c5:ef:66:b9:ef:35:d2: 2a:2c:a7:7b:c0:13:e4:b9:5c:4b:2a:2f:a4:c6:b9: b7:86:9c:33:9e:68:7e:a3:64:18:98:23:9c:45:29: d2:47:10:a4:63:dc:d6:82:80:ae:d6:14:bd:34:2d: a9:b6:52:1d:f1:b2:27:cf:d5:4f:fd:7f:c7:73:5e: 2c:8b:33:98:3c:1d:a9:cb:b7:c1:3b:19:40:af:1b: 55:b0:a7:e7:77:bf:31:1e:5c:e6:a6:16:f3:b9:5f: 08:68:34:d4:19:27:97:70:04:c6:de:ba:a7:41:71: 7b:93:5f:1a:13:47:27:ff:2b:ca:1c:75:e2:8f:78: a2:c8:8f:5d:6b:ed:1c:dc:0c:61:78:3f:d2:00:e7: 85:d5:59:6d:41:2e:1a:f4:27:8f:55:94:b2:e2:89: d7:8b:9a:e0:cc:14:92:42:c7:f2:61:94:d2:29:63: fa:05:33:22:1d:9c:05:1a:e6:9c:17:e6:ee:b3:01: c1:12:cf:87:8a:fe:9b:ae:b3:6c:79:6a:b7:e7:18: 3e:1d:6f:03:38:52:87:0b:ad:28:fb:a0:5d:04:97: 3f:7c:0d:f7:54:90:9e:53:f3:13:90:80:7c:b0:c0: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:A2:E2:AA:F6:77:9B:95:76:2E:2D:0D:24:3D:88:DD:AC:F3:6C X509v3 Authority Key Identifier: keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:75:49:c8:41:d4:1e:e1:80:eb:94:7c:f9:58:da:4e:02:0e: 2b:fd:5a:47:c0:1b:38:39:7e:4e:f2:1c:63:da:00:55:94:2e: b9:8d:c6:83:91:fd:78:fb:a4:02:70:90:b6:b9:92:bc:2c:eb: a6:0c:a3:6b:b7:33:d2:9e:27:ce:ac:6b:66:fd:88:70:11:de: 98:a6:1b:c0:9c:7b:db:1b:79:1e:50:7d:9d:94:9c:e2:4b:03: 4e:be:41:27:11:61:e6:d3:5e:f2:02:58:06:00:08:e3:80:1b: 45:bb:87:83:13:c8:f5:db:0c:71:5b:81:0f:21:d5:1e:b6:36: 52:0d:02:60:d3:6c:19:55:f9:d2:bd:77:47:61:54:0c:c0:26: 0e:b9:d1:95:44:fa:77:90:da:f1:b4:3e:9e:a3:1b:1a:92:c0: bc:a3:f6:48:72:69:6f:d3:66:d0:82:aa:9e:e4:43:58:79:c8: 24:de:f3:1d:51:ba:99:17:84:74:47:41:7c:f0:ca:e1:ca:8b: 5b:d9:f8:e8:fb:1e:94:9a:c3:2f:8b:c8:45:f9:ac:ad:3d:5d: b8:cd:ea:9f:f4:6e:d7:e5:be:22:6f:81:52:6d:4b:ff:39:f1: d1:59:dc:a6:c8:ef:68:ef:28:d3:30:38:87:c5:68:ec:17:e1: 37:36:dc:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0 OUMyNDI5MkIwHhcNMjUwNzA1MDA1NDU2WhcNMjUwNzEyMDA1NDU2WjAYMRYwFAYD VQQDEw02ODY4NzdlMC05MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43BZx70GZbzl1Vtfg7Jj95dkP4Srp8XvZrnvNdIqLKd7wBPkuVxLKi+kxrm3 hpwznmh+o2QYmCOcRSnSRxCkY9zWgoCu1hS9NC2ptlId8bInz9VP/X/Hc14sizOY PB2py7fBOxlArxtVsKfnd78xHlzmphbzuV8IaDTUGSeXcATG3rqnQXF7k18aE0cn /yvKHHXij3iiyI9da+0c3AxheD/SAOeF1VltQS4a9CePVZSy4onXi5rgzBSSQsfy YZTSKWP6BTMiHZwFGuacF+buswHBEs+Hiv6brrNseWq35xg+HW8DOFKHC60o+6Bd BJc/fA33VJCeU/MTkIB8sMCxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRcouKq 9neblXYuLQ0kPYjdrPNsMB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2 QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6dUnIQdQe4YDrlHz5WNpOAg4r/VpHwBs4OX5O8hxj2gBVlC65jcaD kf14+6QCcJC2uZK8LOumDKNrtzPSnifOrGtm/YhwEd6YphvAnHvbG3keUH2dlJzi SwNOvkEnEWHm017yAlgGAAjjgBtFu4eDE8j12wxxW4EPIdUetjZSDQJg02wZVfnS vXdHYVQMwCYOudGVRPp3kNrxtD6eoxsaksC8o/ZIcmlv02bQgqqe5ENYecgk3vMd UbqZF4R0R0F88Mrhyotb2fjo+x6UmsMvi8hF+aytPV24zeqf9G7X5b4ib4FSbUv/ OfHRWdymyO9o7yjTMDiHxWjsF+E3NtzH -----END CERTIFICATE-----Generated at Sun Jul 6 00:53:20 2025 by rpki-client