$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: WCRqgtwAT/4ByT7WS5T6RT64inmdBRa8TJ30QgITYmA= Subject key identifier: 90:5F:D8:CA:43:71:E5:80:BB:FF:79:4F:58:77:5E:3C:57:48:9D:29 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 0763 Signing time: Wed 02 Jul 2025 21:56:42 +0000 Manifest this update: Wed 02 Jul 2025 21:56:42 +0000 Manifest next update: Wed 09 Jul 2025 21:56:42 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: WfBJq2QdPqI+pSoru9yTzBxrbYlxI9A8owDNbPtUL4Y=) 2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: l3P+jzCX7aHklMXmE9uReg8fCRmiQ/j2jziDBZRRn4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Jul 2 21:56:42 2025 GMT Not After : Jul 9 21:56:42 2025 GMT Subject: CN=6865ab1a-7a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:76:b4:b8:a2:33:6b:41:dc:4b:32:af:0c: 0c:a4:60:9c:ed:54:e4:12:7f:54:68:72:3b:46:39: 07:b1:eb:f1:88:d1:50:92:17:f9:b8:da:19:d5:ed: c4:0a:35:20:0c:38:e2:3e:2c:28:f2:f0:2f:18:65: 4d:4f:86:60:63:fb:49:25:88:68:ad:19:ba:e4:2d: 2b:60:c5:04:d3:47:26:df:28:bb:9f:e1:24:79:e7: 52:38:fe:05:50:ed:94:ab:ef:15:43:3a:a3:91:22: 2d:55:20:c2:71:d2:83:f2:dd:b8:06:9f:62:32:aa: 60:a0:df:c2:9e:68:42:81:dc:87:08:7b:bb:0d:1d: fc:87:27:4d:3b:e6:47:96:c1:18:f8:ca:47:f7:42: fd:f1:90:65:d9:53:58:63:c5:bf:f0:35:3a:52:61: f7:17:73:4d:40:fd:b6:9e:15:3e:be:37:f6:60:68: c6:52:b0:76:3a:76:c9:f5:3c:9a:de:51:d1:9c:99: ae:67:5f:7f:4a:82:e4:11:91:8c:c8:a1:25:95:b0: 7f:e1:5e:16:e4:9c:2d:7e:01:47:de:22:8b:21:6f: bb:7f:c1:8a:25:73:80:30:93:5a:c7:dd:c7:a5:15: c2:a3:b9:3f:ae:63:4f:a5:7c:48:e5:a8:10:9e:d9: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:D8:CA:43:71:E5:80:BB:FF:79:4F:58:77:5E:3C:57:48:9D:29 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:0f:89:83:5b:30:a0:61:8d:f6:e1:c4:e0:3d:ac:13:f5: 4c:d8:31:55:21:60:23:65:01:cd:03:ed:25:b6:f6:d8:87:46: 5a:81:3b:6f:c2:e9:a0:b5:35:28:ba:ca:86:e0:67:10:96:d6: 9e:e2:8d:a1:55:46:91:d4:4c:4e:2b:92:c0:b1:62:f6:c3:02: cc:48:69:e7:2c:95:db:80:26:e2:2e:7b:6a:28:a3:ea:46:ed: d2:de:00:82:3d:2a:1a:64:b0:c9:35:94:a1:e4:61:c1:db:0f: e9:a5:83:f0:45:15:8e:d3:13:97:c3:60:f5:36:75:e9:1c:e8: 8b:3e:2b:59:3c:45:5e:e1:41:dc:47:83:6e:2a:8f:c6:a1:87: 69:b7:e0:d8:4a:28:c8:29:07:26:94:8f:52:da:2b:69:13:59: 6e:ff:a6:62:f5:5a:48:97:1c:11:ea:44:32:ab:26:08:b5:b3: e9:f2:98:18:90:90:f9:2e:c9:b3:a3:66:58:8d:99:83:40:49: 55:c8:4e:c0:f6:fb:79:05:15:b5:d6:cd:83:6b:41:27:e3:14: d7:20:8c:06:34:99:22:e4:49:11:13:f4:cf:b5:33:22:af:7f: b4:16:65:a8:a7:e6:ad:0b:35:f9:97:da:d7:e5:a6:af:6a:ee: fe:48:9c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwNzAyMjE1NjQyWhcNMjUwNzA5MjE1NjQyWjAYMRYwFAYD VQQDEw02ODY1YWIxYS03YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT52tLiiM2tB3EsyrwwMpGCc7VTkEn9UaHI7RjkHsevxiNFQkhf5uNoZ1e3E CjUgDDjiPiwo8vAvGGVNT4ZgY/tJJYhorRm65C0rYMUE00cm3yi7n+EkeedSOP4F UO2Uq+8VQzqjkSItVSDCcdKD8t24Bp9iMqpgoN/CnmhCgdyHCHu7DR38hydNO+ZH lsEY+MpH90L98ZBl2VNYY8W/8DU6UmH3F3NNQP22nhU+vjf2YGjGUrB2OnbJ9Tya 3lHRnJmuZ19/SoLkEZGMyKEllbB/4V4W5JwtfgFH3iKLIW+7f8GKJXOAMJNax93H pRXCo7k/rmNPpXxI5agQntm7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBf2MpD ceWAu/95T1h3XjxXSJ0pMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX1g+Jg1swoGGN9uHE4D2sE/VM2DFVIWAjZQHNA+0ltvbYh0ZagTtv wumgtTUousqG4GcQltae4o2hVUaR1ExOK5LAsWL2wwLMSGnnLJXbgCbiLntqKKPq Ru3S3gCCPSoaZLDJNZSh5GHB2w/ppYPwRRWO0xOXw2D1NnXpHOiLPitZPEVe4UHc R4NuKo/GoYdpt+DYSijIKQcmlI9S2itpE1lu/6Zi9VpIlxwR6kQyqyYItbPp8pgY kJD5Lsmzo2ZYjZmDQElVyE7A9vt5BRW11s2Da0En4xTXIIwGNJki5EkRE/TPtTMi r3+0FmWop+atCzX5l9rX5aavau7+SJxw -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:41 2025 by rpki-client