$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: BwLxd8xfMClt5qYwYa3zdmtzkcBOLdt4ckLJDcxHlSk= Subject key identifier: 5C:54:FD:86:4C:C8:8B:74:6F:1E:29:32:FD:1D:95:74:4D:3E:AB:A4 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0D88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0D80 Signing time: Wed 02 Jul 2025 18:09:31 +0000 Manifest this update: Wed 02 Jul 2025 18:09:31 +0000 Manifest next update: Wed 09 Jul 2025 18:09:31 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: PkAroPT4EY4rUzaOVu/nIZX07YLGGjwprvTI5kpq9bg=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: 27YGiOVHeYRZmfLChwQ0MVLlQEu8P+YtfErwSj+QIxo=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Jul 2 18:09:31 2025 GMT Not After : Jul 9 18:09:31 2025 GMT Subject: CN=686575db-5290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:29:80:92:0e:93:86:09:73:ab:e0:c9:b5: 00:d1:2a:66:48:c6:92:c8:10:f1:79:99:6a:95:bc: bf:89:23:82:61:6f:2d:73:b6:6b:61:02:d6:17:6a: 4b:99:30:aa:2d:fc:bd:28:da:d7:8d:46:d1:ff:c1: 4c:88:95:59:ae:07:26:2c:9b:8e:6a:a3:e8:29:fc: 1f:a3:ca:de:0e:e1:44:56:b9:33:c9:6c:6c:8a:4c: d6:86:f4:79:ab:ec:c1:74:d7:b4:89:e4:8b:28:db: 44:ec:72:4a:48:3e:5a:4f:35:7e:8a:17:77:ce:ed: 23:1a:24:af:b2:8b:b5:a5:e9:da:21:0e:f8:eb:28: 03:f1:46:3d:92:b1:24:07:c7:ec:ad:b6:9c:e6:16: 9c:f5:a3:2a:be:85:5e:25:07:ad:87:ef:ae:c8:a9: 5d:15:79:4f:55:76:8d:42:74:b9:e0:a9:e3:b0:45: 54:44:c2:c0:c1:b1:59:7f:ee:2d:37:f5:6a:87:88: f0:91:45:af:b6:77:4e:c3:fe:98:10:2e:df:b0:da: d1:41:ee:67:e6:5e:7b:01:b5:05:77:b8:a8:10:fd: 89:06:96:32:65:2f:83:92:1e:3e:2a:86:8c:45:21: 5f:a9:35:68:1d:22:73:1d:f7:58:84:09:6b:8a:c5: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:54:FD:86:4C:C8:8B:74:6F:1E:29:32:FD:1D:95:74:4D:3E:AB:A4 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9e:07:0f:5c:ba:ae:45:50:36:fc:ed:cc:be:90:d0:f8:0c: a4:d5:87:bd:61:59:dc:d2:96:a4:3a:d5:5c:31:50:56:84:4f: b9:31:a9:7e:16:db:fc:7e:5b:9e:2b:34:01:ce:a8:73:57:da: 62:35:d3:a0:f4:85:12:55:6b:40:23:6c:2c:13:c3:75:a6:41: f1:bf:63:90:76:fa:61:2d:b6:00:26:e2:fb:49:7e:1f:ee:f2: 95:3f:50:fe:c0:b1:a1:90:6a:4d:3d:b4:da:a9:4a:35:f0:7e: b3:0f:f3:52:19:e5:41:2e:3a:98:d0:2e:80:66:7d:f9:91:19: 87:74:fa:d4:73:0b:78:06:19:d8:de:9e:e3:06:30:71:8d:86: c6:bb:b8:67:5a:c8:97:da:63:56:04:51:11:9b:e8:01:3b:09: 2d:c2:d6:b2:e1:8a:98:4d:b8:51:8d:5e:e6:e0:3d:e6:6b:84: 47:7d:58:45:76:0e:f0:77:bf:af:0e:8d:9d:2a:a0:48:f2:75: d2:a3:12:e8:bf:72:89:03:5a:e7:85:5d:43:1d:2e:96:cd:9d: e4:d7:94:cf:76:65:73:9f:47:0d:5c:9f:a9:6f:04:d2:5e:ec: c6:27:55:1a:0e:e8:4b:c2:96:87:f2:05:ac:f2:f9:2c:b9:c3: 8b:d2:48:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwNzAyMTgwOTMxWhcNMjUwNzA5MTgwOTMxWjAYMRYwFAYD VQQDEw02ODY1NzVkYi01MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz68pgJIOk4YJc6vgybUA0SpmSMaSyBDxeZlqlby/iSOCYW8tc7ZrYQLWF2pL mTCqLfy9KNrXjUbR/8FMiJVZrgcmLJuOaqPoKfwfo8reDuFEVrkzyWxsikzWhvR5 q+zBdNe0ieSLKNtE7HJKSD5aTzV+ihd3zu0jGiSvsou1penaIQ746ygD8UY9krEk B8fsrbac5hac9aMqvoVeJQeth++uyKldFXlPVXaNQnS54KnjsEVURMLAwbFZf+4t N/Vqh4jwkUWvtndOw/6YEC7fsNrRQe5n5l57AbUFd7ioEP2JBpYyZS+Dkh4+KoaM RSFfqTVoHSJzHfdYhAlrisU1QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxU/YZM yIt0bx4pMv0dlXRNPqukMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsngcPXLquRVA2/O3MvpDQ+Ayk1Ye9YVnc0pakOtVcMVBWhE+5Mal+ Ftv8flueKzQBzqhzV9piNdOg9IUSVWtAI2wsE8N1pkHxv2OQdvphLbYAJuL7SX4f 7vKVP1D+wLGhkGpNPbTaqUo18H6zD/NSGeVBLjqY0C6AZn35kRmHdPrUcwt4BhnY 3p7jBjBxjYbGu7hnWsiX2mNWBFERm+gBOwktwtay4YqYTbhRjV7m4D3ma4RHfVhF dg7wd7+vDo2dKqBI8nXSoxLov3KJA1rnhV1DHS6WzZ3k15TPdmVzn0cNXJ+pbwTS XuzGJ1UaDuhLwpaH8gWs8vksucOL0kgj -----END CERTIFICATE-----Generated at Thu Jul 3 18:55:02 2025 by rpki-client