$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: Xt5dmWGLwTz2sZQ8jaDFC2EbBXSZFO2y2AxSSdCWY+Y= Subject key identifier: A8:D3:1A:B9:A5:87:D6:07:0C:0A:4F:44:83:E7:35:BA:9F:6F:4C:C0 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0BC1 Signing time: Wed 02 Jul 2025 19:10:37 +0000 Manifest this update: Wed 02 Jul 2025 19:10:37 +0000 Manifest next update: Wed 09 Jul 2025 19:10:37 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: hZ9x1Hkr7XRK0YqcsF7cLixEgGwLnK9aBzeD341Qml0=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Jul 2 19:10:37 2025 GMT Not After : Jul 9 19:10:37 2025 GMT Subject: CN=6865842d-de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:bc:b3:f0:11:bc:97:0f:32:77:a3:1c:bb: aa:87:0c:97:6e:9f:12:ff:1b:ab:9d:f2:8c:4c:d6: 84:16:f1:5e:a4:86:33:e9:f6:c8:b2:64:9a:01:9b: 4d:9e:44:41:82:89:bf:fb:30:af:e7:70:c5:05:85: 31:ff:69:62:a7:5a:5c:bb:cf:85:87:5b:45:45:c4: a2:33:09:9b:20:26:43:94:2b:98:de:b2:6b:0b:f0: 2b:c9:49:ef:76:72:0a:15:37:27:8b:50:28:7f:6d: 88:48:97:85:b3:78:57:30:6e:e3:45:5c:3c:c8:aa: 0a:88:f3:09:76:a3:78:40:9f:2d:7c:d2:d8:d6:72: 19:63:6e:02:7a:b5:a4:09:bc:7e:fc:e5:58:ea:2a: 62:09:60:19:bb:7c:90:aa:9a:18:e4:aa:03:08:5c: 5e:8a:1d:31:e0:94:76:17:7b:32:bd:c5:36:2f:f2: 74:07:6a:46:02:a6:53:b9:57:5e:06:3d:a8:3c:b4: 58:c2:2d:5e:0b:6b:b0:13:f9:b1:39:0f:40:57:c3: d3:f7:1c:ce:30:ab:ad:52:f0:b1:92:8f:08:75:f0: 1f:4b:89:0f:c7:4a:dd:ae:1e:23:36:42:c8:50:80: 18:d4:ea:83:a6:0b:5d:4c:da:8e:a9:36:c6:32:3e: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:1A:B9:A5:87:D6:07:0C:0A:4F:44:83:E7:35:BA:9F:6F:4C:C0 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d1:c3:fc:94:3b:aa:c1:cb:83:c2:68:6f:5e:36:03:d6:a5: fe:f9:73:2d:d2:db:b5:1f:ac:38:8a:ad:fe:f3:b3:35:0a:ae: 81:a0:20:42:7e:54:71:95:3b:c0:e1:15:59:79:dd:e5:83:28: 95:f7:c4:ea:d9:32:e6:49:f6:2f:95:58:99:67:86:17:20:2c: 38:31:e0:14:e7:e3:f9:3e:c0:32:88:c0:a7:59:e3:03:be:ff: 6b:89:91:26:c3:84:78:ae:49:d1:82:2a:85:c1:26:69:ac:7c: a8:14:f6:fc:7f:f2:2e:23:21:77:2a:4d:3c:5b:db:09:1f:71: cb:67:2a:76:47:ab:b4:71:59:72:d8:3a:f9:d4:16:92:53:cc: 37:f4:d1:74:92:44:34:01:09:6f:3e:95:a4:c3:8a:71:b4:14: be:dd:2d:8b:08:eb:2e:fa:23:ee:69:35:5c:0e:9f:fa:ae:c3: 2d:9d:8f:ec:b5:6e:cf:63:77:1d:f6:11:ee:a4:e0:f9:af:3a: 7f:56:c6:cb:1c:e4:5b:d9:cc:0c:9f:29:0d:fc:1d:bc:a3:cd: ed:b6:6c:95:ce:50:ed:ca:4c:be:0f:f6:80:84:d9:72:1a:be: 86:a1:75:8e:e5:9f:b0:98:46:3d:bf:5e:ea:81:e0:e0:b8:05: 93:53:69:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUwNzAyMTkxMDM3WhcNMjUwNzA5MTkxMDM3WjAYMRYwFAYD VQQDEw02ODY1ODQyZC1kZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBu8s/ARvJcPMnejHLuqhwyXbp8S/xurnfKMTNaEFvFepIYz6fbIsmSaAZtN nkRBgom/+zCv53DFBYUx/2lip1pcu8+Fh1tFRcSiMwmbICZDlCuY3rJrC/AryUnv dnIKFTcni1Aof22ISJeFs3hXMG7jRVw8yKoKiPMJdqN4QJ8tfNLY1nIZY24CerWk Cbx+/OVY6ipiCWAZu3yQqpoY5KoDCFxeih0x4JR2F3syvcU2L/J0B2pGAqZTuVde Bj2oPLRYwi1eC2uwE/mxOQ9AV8PT9xzOMKutUvCxko8IdfAfS4kPx0rdrh4jNkLI UIAY1OqDpgtdTNqOqTbGMj61RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjTGrml h9YHDApPRIPnNbqfb0zAMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC00cP8lDuqwcuDwmhvXjYD1qX++XMt0tu1H6w4iq3+87M1Cq6BoCBC flRxlTvA4RVZed3lgyiV98Tq2TLmSfYvlViZZ4YXICw4MeAU5+P5PsAyiMCnWeMD vv9riZEmw4R4rknRgiqFwSZprHyoFPb8f/IuIyF3Kk08W9sJH3HLZyp2R6u0cVly 2Dr51BaSU8w39NF0kkQ0AQlvPpWkw4pxtBS+3S2LCOsu+iPuaTVcDp/6rsMtnY/s tW7PY3cd9hHupOD5rzp/VsbLHORb2cwMnykN/B28o83ttmyVzlDtyky+D/aAhNly Gr6GoXWO5Z+wmEY9v17qgeDguAWTU2nJ -----END CERTIFICATE-----Generated at Fri Jul 4 11:14:50 2025 by rpki-client