$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: AL8uUasHDHRNAWQHLPlf9x3aTaESR8qqLWwnHDElXyo= Subject key identifier: 8A:80:A3:78:10:8E:F3:BE:FE:32:09:73:3C:14:19:C1:F3:EF:A6:8B Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0BDB Signing time: Fri 22 Aug 2025 19:02:05 +0000 Manifest this update: Fri 22 Aug 2025 19:02:05 +0000 Manifest next update: Fri 29 Aug 2025 19:02:05 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: sHcMDAki6YfO7wOHH9kdYWUelOUJNfr0nST7nVYr0DY=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Aug 22 19:02:05 2025 GMT Not After : Aug 29 19:02:05 2025 GMT Subject: CN=68a8bead-ab50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:dc:20:18:43:3e:c4:8a:98:40:4f:1d:04: 80:f8:a2:15:e2:d0:4d:5c:a5:ac:e0:fb:75:cd:8d: 98:9a:50:79:28:43:3f:46:69:8a:07:50:85:72:0d: 6e:f1:cf:fc:d7:b4:6d:10:16:30:08:cb:ea:3b:b5: eb:00:b8:e5:93:1f:b4:f9:86:52:c2:6a:ac:73:3f: 38:33:1c:af:15:65:03:f4:e3:d5:ae:b2:59:6d:8f: 6f:ae:77:cf:84:3f:98:01:74:c6:28:7b:fe:55:5e: 72:92:39:cf:47:34:03:e2:ed:f8:18:fe:f5:3f:11: c4:f4:91:97:7b:69:c2:7c:14:94:a9:7c:f6:96:f4: bc:54:ce:11:ae:02:72:ff:d9:a3:c9:b9:fa:65:7a: cf:bf:b5:3f:6a:cf:5d:ac:73:51:8a:06:1d:ca:ce: 90:0d:cd:fc:60:45:83:7a:e3:6d:a9:fb:f8:ab:b3: c7:f4:ec:5c:07:51:22:90:47:7b:45:64:12:ee:c5: eb:43:ec:e0:42:73:e4:67:51:87:70:25:1a:0f:a3: 07:ac:4d:3f:eb:ce:27:83:bd:87:5e:db:7c:1f:f4: 07:8f:cd:43:d4:37:0f:41:10:53:db:dd:0f:3e:ab: ce:c8:9e:9f:ee:f9:36:2c:c1:9d:84:d5:68:a8:b4: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:80:A3:78:10:8E:F3:BE:FE:32:09:73:3C:14:19:C1:F3:EF:A6:8B X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:69:70:ec:77:60:46:6b:15:1d:bf:82:ca:d1:7f:26:5b: 59:5b:97:c0:2f:13:78:1c:de:a3:d0:bc:31:70:93:36:f5:73: f6:a1:3e:79:e1:bd:13:5e:7e:0c:d8:06:5b:6a:b0:19:5d:55: 67:92:8f:8a:c6:c7:6d:8e:eb:d7:64:80:17:a5:91:b1:c5:1d: 61:fc:cd:60:4c:f5:ab:60:97:81:4c:ea:ab:95:df:8c:74:8f: bb:b0:76:57:3a:f9:8d:b7:56:68:dc:1e:3e:60:34:18:eb:a5: f6:25:24:62:eb:c3:6e:82:1e:a4:47:89:1b:19:af:d8:c1:45: 2a:88:09:84:95:f3:f9:6a:e2:04:b6:6b:77:55:28:d4:61:37: 24:11:37:00:6e:6e:8a:a7:e8:fd:cd:e1:ee:91:57:81:c6:bd: 26:d7:26:17:53:30:27:ab:da:78:35:44:c1:3c:46:fc:68:90: be:a0:9c:1a:6e:68:f0:e1:21:45:b9:ab:de:30:71:ea:cb:ba: aa:de:41:ac:d5:e3:2d:ec:d3:15:7f:b6:d8:59:db:7a:60:8d: d2:ae:db:32:53:a0:94:7a:d3:cd:29:c3:e2:e0:c8:2f:77:0e: a0:a8:1a:70:0e:74:ed:17:7f:dd:55:70:02:9e:2c:76:ba:08: 97:e7:d4:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUwODIyMTkwMjA1WhcNMjUwODI5MTkwMjA1WjAYMRYwFAYD VQQDEw02OGE4YmVhZC1hYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGXcIBhDPsSKmEBPHQSA+KIV4tBNXKWs4Pt1zY2YmlB5KEM/RmmKB1CFcg1u 8c/817RtEBYwCMvqO7XrALjlkx+0+YZSwmqscz84MxyvFWUD9OPVrrJZbY9vrnfP hD+YAXTGKHv+VV5ykjnPRzQD4u34GP71PxHE9JGXe2nCfBSUqXz2lvS8VM4RrgJy /9mjybn6ZXrPv7U/as9drHNRigYdys6QDc38YEWDeuNtqfv4q7PH9OxcB1EikEd7 RWQS7sXrQ+zgQnPkZ1GHcCUaD6MHrE0/684ng72HXtt8H/QHj81D1DcPQRBT290P PqvOyJ6f7vk2LMGdhNVoqLT+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqAo3gQ jvO+/jIJczwUGcHz76aLMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncWlw7HdgRmsVHb+CytF/JltZW5fALxN4HN6j0LwxcJM29XP2oT55 4b0TXn4M2AZbarAZXVVnko+KxsdtjuvXZIAXpZGxxR1h/M1gTPWrYJeBTOqrld+M dI+7sHZXOvmNt1Zo3B4+YDQY66X2JSRi68Nugh6kR4kbGa/YwUUqiAmElfP5auIE tmt3VSjUYTckETcAbm6Kp+j9zeHukVeBxr0m1yYXUzAnq9p4NUTBPEb8aJC+oJwa bmjw4SFFuaveMHHqy7qq3kGs1eMt7NMVf7bYWdt6YI3SrtsyU6CUetPNKcPi4Mgv dw6gqBpwDnTtF3/dVXACnix2ugiX59QC -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:58 2025 by rpki-client