$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: QW767vgiqHlB47cVQIZ2Ttwn0eqt9isPx0JrvXhD8Ro= Subject key identifier: FF:D3:01:C3:D3:DF:0F:CB:E9:E6:37:89:8D:DC:E6:EA:88:FA:1D:CC Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01A9 Signing time: Thu 03 Jul 2025 03:21:56 +0000 Manifest this update: Thu 03 Jul 2025 03:21:55 +0000 Manifest next update: Thu 10 Jul 2025 03:21:55 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: Hws8L1NAxrWXcoDXbAUwY7hsG7ymNuq7uYxMX/LHmLA=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Jul 3 03:21:55 2025 GMT Not After : Jul 10 03:21:55 2025 GMT Subject: CN=6865f753-9493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:f3:06:e6:5c:0f:9d:a2:6b:48:21:d7:81: f9:fc:aa:15:d6:d1:de:b1:f9:33:0a:c4:d4:82:73: aa:5a:82:2e:2a:33:e5:83:33:0b:ba:65:17:b8:4b: 9d:38:2c:32:b2:21:ca:52:5f:9f:cd:db:0a:e1:c5: 64:8b:24:43:b3:d2:5c:d1:ae:8c:39:99:cc:4c:80: 55:1b:a2:d7:ed:16:20:f5:ad:5e:c6:65:68:27:86: 30:ca:de:de:b6:0c:99:31:bf:57:55:fb:b6:71:30: 47:89:80:ee:3a:b7:d6:03:46:dc:a1:94:37:bc:49: e6:fc:b7:f4:1b:98:1f:42:7d:38:29:c9:90:20:68: 0c:56:44:76:09:8e:f1:f2:dc:d5:eb:58:63:80:c5: dd:9e:c7:49:79:f3:a8:fe:ba:6c:04:91:3a:bb:0c: 40:16:a2:19:4c:13:50:a8:99:52:0c:24:fe:cb:35: 3d:f3:10:ce:37:fd:59:e2:37:cf:f6:67:96:eb:1e: c4:6e:3f:49:9e:8f:0f:71:2a:92:2a:f9:95:bb:94: 10:6b:63:f8:17:00:55:6c:ff:38:59:3f:ad:ba:69: ef:1e:53:e0:2b:21:bc:8f:34:56:0d:90:7c:9d:72: 47:2c:8a:b1:40:89:a1:fe:dd:59:b8:8c:1e:81:a9: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:01:C3:D3:DF:0F:CB:E9:E6:37:89:8D:DC:E6:EA:88:FA:1D:CC X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:8a:f5:28:44:f3:d5:48:56:a5:e1:87:53:df:89:ec:8f: eb:94:ba:02:60:02:6b:b3:fc:57:88:42:30:fc:63:e5:0b:8a: 3b:e6:4c:28:45:72:9e:e7:4f:f4:84:40:df:d4:63:c7:53:7c: b8:a4:48:86:51:4b:de:18:44:12:e3:b3:9a:e8:e2:eb:be:28: 62:f7:cb:45:7d:de:cb:04:ce:ed:a0:40:fd:d3:cb:39:30:9a: 13:0f:43:10:a2:30:66:08:b9:58:c7:c0:8e:cb:43:56:b9:e4: 2a:bc:2a:e8:0b:2d:0b:c8:58:b7:a6:68:16:eb:56:70:87:25: ff:83:52:f1:61:f1:bd:cc:b1:82:9c:0f:e6:45:89:8c:29:48: fc:6d:5e:05:d5:78:5e:a2:64:60:4b:d7:9b:87:5e:e9:4c:01: e9:7f:23:01:fc:94:10:31:ca:43:11:76:9a:d9:fc:6a:1a:52: 0b:c5:cf:1f:10:f3:de:b6:55:bc:f5:65:8a:ec:f7:99:5e:fa: bb:23:0f:22:b9:44:88:60:79:1a:d0:ad:48:7b:37:b9:da:7f: 8a:b3:51:a6:1c:ae:6c:90:f7:60:1c:2f:8a:3b:78:1a:27:39: 15:21:d6:f2:89:2a:53:fa:f9:8d:8c:64:ee:ec:59:74:ce:93: 1d:c6:37:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwNzAzMDMyMTU1WhcNMjUwNzEwMDMyMTU1WjAYMRYwFAYD VQQDEw02ODY1Zjc1My05NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhTzBuZcD52ia0gh14H5/KoV1tHesfkzCsTUgnOqWoIuKjPlgzMLumUXuEud OCwysiHKUl+fzdsK4cVkiyRDs9Jc0a6MOZnMTIBVG6LX7RYg9a1exmVoJ4Ywyt7e tgyZMb9XVfu2cTBHiYDuOrfWA0bcoZQ3vEnm/Lf0G5gfQn04KcmQIGgMVkR2CY7x 8tzV61hjgMXdnsdJefOo/rpsBJE6uwxAFqIZTBNQqJlSDCT+yzU98xDON/1Z4jfP 9meW6x7Ebj9Jno8PcSqSKvmVu5QQa2P4FwBVbP84WT+tumnvHlPgKyG8jzRWDZB8 nXJHLIqxQImh/t1ZuIwegandkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/TAcPT 3w/L6eY3iY3c5uqI+h3MMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZNIr1KETz1UhWpeGHU9+J7I/rlLoCYAJrs/xXiEIw/GPlC4o75kwo RXKe50/0hEDf1GPHU3y4pEiGUUveGEQS47Oa6OLrvihi98tFfd7LBM7toED908s5 MJoTD0MQojBmCLlYx8COy0NWueQqvCroCy0LyFi3pmgW61ZwhyX/g1LxYfG9zLGC nA/mRYmMKUj8bV4F1XheomRgS9ebh17pTAHpfyMB/JQQMcpDEXaa2fxqGlILxc8f EPPetlW89WWK7PeZXvq7Iw8iuUSIYHka0K1Ieze52n+Ks1GmHK5skPdgHC+KO3ga JzkVIdbyiSpT+vmNjGTu7Fl0zpMdxje1 -----END CERTIFICATE-----Generated at Thu Jul 3 07:04:27 2025 by rpki-client