$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: N3igEGxbBYJQzVt/JtoLz1iJA050ZsEc3fjYcYUlF0Y= Subject key identifier: DE:00:59:A7:26:5F:9B:71:2B:22:C6:75:D7:98:F9:CB:35:C1:36:A7 Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:48:12 +0000 Manifest this update: Thu 03 Jul 2025 06:48:12 +0000 Manifest next update: Thu 10 Jul 2025 06:48:12 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: p3Ds+h9itGRaI25XbqX+QUxBdf/ne7Lr5o24lZN02kk=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: zVqTt6tzc+Il4GxP87PklggXFLaDGzjtaeUtoZhSM8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Validity Not Before: Jul 3 06:48:12 2025 GMT Not After : Jul 10 06:48:12 2025 GMT Subject: CN=686627ac-856e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:ff:a9:4f:06:bd:b8:41:6f:72:f8:3a:1e: 6a:1e:b8:1b:eb:e5:d6:fb:5f:c4:ca:f8:ea:8c:fb: bf:65:44:05:4e:fc:ee:3a:fc:8a:a8:58:34:2a:18: b1:06:58:0a:b2:87:64:e5:b3:68:91:53:02:e5:6e: 25:9f:ae:eb:ca:6f:94:70:02:bc:55:d4:63:bd:e6: 7f:65:f4:e6:3e:00:1a:70:ff:52:56:6a:87:19:57: a4:4d:8e:20:05:31:60:c7:75:8d:cb:b9:36:46:de: e7:c1:1e:9d:90:30:e0:07:7d:0c:50:0e:63:fd:e4: 4c:e8:94:6b:41:c7:1f:e4:40:3e:98:da:b5:72:bc: d4:f4:2b:ba:ed:6b:71:7a:ab:c5:aa:d6:41:b4:bf: dd:6f:48:f1:e6:2b:a8:fd:90:d5:be:ff:aa:d7:7e: 41:cc:e6:2a:07:4f:e4:ba:59:37:f6:75:00:95:56: dd:1a:eb:3d:cc:ae:ee:55:2b:e6:11:40:67:6f:1b: 75:f0:e6:5b:fd:3b:2f:d5:1a:3e:78:ab:1c:bf:37: ff:e8:49:d2:dd:2b:cd:dd:5e:93:08:11:c9:32:90: 3b:5e:d2:66:88:87:30:65:6a:1f:90:9b:39:e3:1c: c6:fe:ba:4e:26:f8:97:cb:5b:14:50:2c:48:8b:18: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:00:59:A7:26:5F:9B:71:2B:22:C6:75:D7:98:F9:CB:35:C1:36:A7 X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:b2:a1:5f:67:73:c3:10:49:75:03:8d:03:56:61:2e:1a: 9d:a2:93:d9:a6:c4:26:75:91:0c:98:2b:cc:76:1d:7f:22:76: e7:f1:13:07:32:9b:01:91:04:01:f1:c4:fe:30:6e:3c:ea:cc: a9:29:89:87:f5:eb:d5:54:70:6c:44:2c:94:1f:46:4c:e2:fb: f6:8e:5a:d7:35:c1:a3:27:f1:1e:86:4f:ad:a9:82:ff:81:e1: 1d:1c:43:b1:eb:8f:6f:38:62:69:c4:43:e4:7e:0a:fc:3c:94: e4:3c:07:0e:3a:bb:20:bc:7e:d4:5f:e9:41:13:9d:90:48:12: cd:a7:f4:f9:f7:74:29:e8:83:8f:b9:e8:f7:7b:3e:11:3a:4d: 97:a8:f6:24:e8:2d:c7:fe:4d:0e:eb:dd:6d:7d:aa:0a:3a:e9: 03:89:f8:c2:48:e6:cc:3a:39:15:f1:bc:52:e4:35:7c:f5:22: ec:27:25:27:4f:e3:0b:2e:1c:cc:d3:8d:c8:5c:82:6a:5d:fa: 6b:b8:2d:cd:39:77:7b:40:20:6f:c0:ac:0d:dd:34:c9:98:05: f6:44:32:fa:c1:dd:c7:88:95:63:a5:d8:a6:98:56:b9:24:58: ea:48:b2:ff:ab:b5:86:97:f9:62:37:e1:a8:3d:91:43:24:cc: 57:83:7f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKEUwRTgwODMwNjU5NUZFNjhENUYyODFBOTYyQUY2REY1 MUU4NkY5MzIwHhcNMjUwNzAzMDY0ODEyWhcNMjUwNzEwMDY0ODEyWjAYMRYwFAYD VQQDEw02ODY2MjdhYy04NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAH/qU8GvbhBb3L4Oh5qHrgb6+XW+1/EyvjqjPu/ZUQFTvzuOvyKqFg0Khix BlgKsodk5bNokVMC5W4ln67rym+UcAK8VdRjveZ/ZfTmPgAacP9SVmqHGVekTY4g BTFgx3WNy7k2Rt7nwR6dkDDgB30MUA5j/eRM6JRrQccf5EA+mNq1crzU9Cu67Wtx eqvFqtZBtL/db0jx5iuo/ZDVvv+q135BzOYqB0/kulk39nUAlVbdGus9zK7uVSvm EUBnbxt18OZb/Tsv1Ro+eKscvzf/6EnS3SvN3V6TCBHJMpA7XtJmiIcwZWofkJs5 4xzG/rpOJviXy1sUUCxIixg9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4AWacm X5txKyLGddeY+cs1wTanMB8GA1UdIwQYMBaAFODoCDBllf5o1fKBqWKvbfUehvky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9BQTk4NTlGODhD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9talY4b0dwWXE5dDlSNkct VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9BQTk4NTlGODhDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9t alY4b0dwWXE5dDlSNkctVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6CbKhX2dzwxBJdQONA1ZhLhqdopPZpsQmdZEMmCvMdh1/Inbn8RMH MpsBkQQB8cT+MG486sypKYmH9evVVHBsRCyUH0ZM4vv2jlrXNcGjJ/Eehk+tqYL/ geEdHEOx649vOGJpxEPkfgr8PJTkPAcOOrsgvH7UX+lBE52QSBLNp/T593Qp6IOP uej3ez4ROk2XqPYk6C3H/k0O691tfaoKOukDifjCSObMOjkV8bxS5DV89SLsJyUn T+MLLhzM043IXIJqXfpruC3NOXd7QCBvwKwN3TTJmAX2RDL6wd3HiJVjpdimmFa5 JFjqSLL/q7WGl/liN+GoPZFDJMxXg3+i -----END CERTIFICATE-----Generated at Thu Jul 3 21:17:33 2025 by rpki-client