$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: 2tc/U6Hv6z+pmjptMGU8iYcc3RwUUWl2ZgRzMxAA+Ak= Subject key identifier: 17:0A:57:47:9F:51:FF:9E:51:4E:5B:3D:34:78:E4:BC:58:23:AC:A1 Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 0726 Signing time: Wed 02 Jul 2025 22:05:29 +0000 Manifest this update: Wed 02 Jul 2025 22:05:28 +0000 Manifest next update: Wed 09 Jul 2025 22:05:28 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: Mg7cRFJst8pse05L5R8OwO6Y77h5fRyHDWvtr4tEBIM=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: P6M32s9N/Ait6pG90TBg5gFRqcz9Jw3z+OITkwygUn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Jul 2 22:05:28 2025 GMT Not After : Jul 9 22:05:28 2025 GMT Subject: CN=6865ad28-fd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:8a:5c:5c:d2:8e:d4:4c:cf:78:59:58:75: 12:f7:24:fc:81:4a:b8:e5:13:21:fb:b1:fd:35:4a: e5:64:6e:0c:23:c4:39:95:0e:17:72:25:e8:1f:eb: c1:d6:88:7e:67:36:00:48:5e:a9:b4:3d:4f:63:c0: 63:8f:60:63:80:b6:17:2a:4f:49:90:c8:b8:a1:73: e9:27:61:80:1c:85:db:e5:e2:59:ce:5a:8a:43:06: 1c:d2:b0:cc:a2:44:d6:ed:07:27:3d:39:a2:d5:0f: 28:29:3a:ec:7c:7e:06:81:55:ce:02:e0:ec:a6:c9: 48:6a:34:4d:10:4e:49:3b:b8:3c:9b:1e:d8:2b:77: a0:f9:a2:b2:61:4a:a2:e2:c2:11:cb:56:62:30:e3: e3:88:79:e6:e1:c2:bc:2c:88:6f:dc:3a:c8:38:65: 31:b8:67:40:a3:e4:a8:ef:68:19:18:c4:aa:a6:3f: e3:ef:72:54:4f:10:e9:39:56:aa:9a:c4:9b:75:4b: 6e:5b:04:05:f0:0d:fe:39:e0:9e:da:18:fd:5f:0e: b9:a0:2d:32:42:d4:67:50:c1:3b:d6:b2:f2:17:f2: 0d:81:e8:50:9a:63:80:f6:42:87:1e:76:11:f0:f7: 88:e9:fe:ca:0e:96:31:57:ec:89:28:f0:e6:af:33: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:57:47:9F:51:FF:9E:51:4E:5B:3D:34:78:E4:BC:58:23:AC:A1 X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1b:75:14:be:bd:10:c0:80:bd:01:41:00:27:f5:4a:7a:3e: 1b:e6:04:b6:34:40:d1:4b:e7:8e:0e:ea:71:8e:93:77:1e:7b: 96:30:ea:d8:38:73:70:c5:9a:4c:8c:58:f6:1e:f4:8c:0d:7c: d4:c9:d7:29:45:ba:95:1f:09:dc:c1:7c:fb:56:ac:ba:98:00: 64:c3:c2:06:d9:2f:06:c0:29:1b:f0:66:4a:da:a3:12:68:80: 36:dd:ae:ef:0e:ad:66:04:3b:06:a1:4a:20:12:5a:37:e4:dc: b0:22:89:93:fa:55:dd:57:56:f6:1a:e8:d3:68:3b:86:9d:36: 0c:8d:c7:09:af:e2:91:82:14:1a:33:30:8b:fe:3b:5b:9d:cd: d9:e4:f7:a6:b7:c2:22:2d:43:12:8c:54:51:af:02:50:65:28: 14:2d:3b:5a:30:54:32:c6:0a:cb:ac:81:bb:3f:08:62:61:e4: 1c:55:4a:5a:e2:01:5d:92:90:e3:17:ed:65:ab:c5:05:fc:e9: c2:f4:37:04:4d:14:d5:ad:53:6f:11:4f:34:40:bc:6f:67:7a: 84:7b:46:18:78:3a:38:ed:10:44:7b:a3:5e:6a:df:66:6d:9f: c7:a9:53:b5:6e:12:ed:f9:cd:de:fd:53:2c:85:fc:36:80:c9: a3:7a:dd:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUwNzAyMjIwNTI4WhcNMjUwNzA5MjIwNTI4WjAYMRYwFAYD VQQDEw02ODY1YWQyOC1mZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gSKXFzSjtRMz3hZWHUS9yT8gUq45RMh+7H9NUrlZG4MI8Q5lQ4XciXoH+vB 1oh+ZzYASF6ptD1PY8Bjj2BjgLYXKk9JkMi4oXPpJ2GAHIXb5eJZzlqKQwYc0rDM okTW7QcnPTmi1Q8oKTrsfH4GgVXOAuDspslIajRNEE5JO7g8mx7YK3eg+aKyYUqi 4sIRy1ZiMOPjiHnm4cK8LIhv3DrIOGUxuGdAo+So72gZGMSqpj/j73JUTxDpOVaq msSbdUtuWwQF8A3+OeCe2hj9Xw65oC0yQtRnUME71rLyF/INgehQmmOA9kKHHnYR 8PeI6f7KDpYxV+yJKPDmrzPdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcKV0ef Uf+eUU5bPTR45LxYI6yhMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkG3UUvr0QwIC9AUEAJ/VKej4b5gS2NEDRS+eODupxjpN3HnuWMOrY OHNwxZpMjFj2HvSMDXzUydcpRbqVHwncwXz7Vqy6mABkw8IG2S8GwCkb8GZK2qMS aIA23a7vDq1mBDsGoUogElo35NywIomT+lXdV1b2GujTaDuGnTYMjccJr+KRghQa MzCL/jtbnc3Z5Pemt8IiLUMSjFRRrwJQZSgULTtaMFQyxgrLrIG7PwhiYeQcVUpa 4gFdkpDjF+1lq8UF/OnC9DcETRTVrVNvEU80QLxvZ3qEe0YYeDo47RBEe6Neat9m bZ/HqVO1bhLt+c3e/VMshfw2gMmjet2N -----END CERTIFICATE-----Generated at Thu Jul 3 14:40:26 2025 by rpki-client