$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json) Hash identifier: TFgpr+faFrBR3y5LS+SRr8Eqv1vESGP1Nm8cln+nUEo= Subject key identifier: A1:7D:A2:2F:C6:91:EC:3C:3F:90:75:A3:40:E9:C5:0C:96:38:F2:A7 Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft Manifest number: 0968 Signing time: Wed 02 Jul 2025 20:25:18 +0000 Manifest this update: Wed 02 Jul 2025 20:25:17 +0000 Manifest next update: Wed 09 Jul 2025 20:25:17 +0000 Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: Gxs9mua/VYRUZhhxrHO0J8YVhrFrzsYhLdwjOx2MlUs=) 2: 55635E7C97B611EA97FDCB6EC4F9AE02.roa (hash: 6BVxpSYTkAPo8U4pjAw5TFAKXClJmtQxFqeUvCKmcYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Validity Not Before: Jul 2 20:25:17 2025 GMT Not After : Jul 9 20:25:17 2025 GMT Subject: CN=686595ae-5e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:e7:42:62:b5:a5:77:e1:cd:76:b6:9a:d7: 78:10:91:e3:5e:fb:42:60:2b:a0:9e:fd:13:dd:4a: dc:30:d1:cd:8d:c8:eb:c1:71:4c:81:61:0f:40:51: e4:0e:1c:9b:6a:c3:4d:d0:03:50:ad:71:ca:16:09: 17:6d:db:d5:9b:ab:d1:3a:8c:e5:35:f9:a2:2b:09: 98:25:81:b7:de:e6:be:ff:c4:ad:a7:b3:dc:e1:2d: a8:ca:49:6f:fa:46:cf:24:fd:8c:d6:af:f1:5a:3f: 79:28:db:e8:8c:4f:da:1f:c0:49:22:95:f9:59:87: 6b:aa:35:bf:58:53:96:96:22:2c:82:c5:e8:3c:c6: fa:4c:00:ef:50:21:d3:42:07:34:3c:ca:16:65:1f: 4c:bc:20:d1:d3:83:7a:ad:58:02:91:4e:c0:56:39: dd:a0:05:fb:cd:1a:1e:99:8b:68:07:7a:44:8c:2c: 92:63:1f:56:81:b8:95:06:bf:7f:07:e9:25:05:cb: ce:e8:84:db:3e:d6:53:92:12:8b:e2:0e:0a:c6:7a: bb:5e:35:e2:04:f4:09:f1:9d:78:ea:ce:0d:79:51: 35:34:38:2b:4e:73:12:95:73:6e:cb:b7:21:f1:4a: 42:ae:0f:bd:19:ef:85:99:62:64:bb:0f:f9:b7:61: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:A2:2F:C6:91:EC:3C:3F:90:75:A3:40:E9:C5:0C:96:38:F2:A7 X509v3 Authority Key Identifier: keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:48:26:e6:d3:53:99:88:ff:df:cf:ad:b7:78:2f:b3:23:4e: 18:80:64:1d:d0:08:e5:5e:2b:4b:9d:e1:65:99:a7:cd:a2:eb: 57:94:b6:56:27:3a:4e:65:63:7a:ea:b0:c0:2b:2c:2c:f7:f3: 5c:11:07:da:06:a1:fd:ee:d9:11:e2:cf:5f:d5:a6:73:34:f1: d0:f7:02:71:5f:cc:ed:db:a2:81:88:f7:45:c4:2a:32:b7:b3: d0:1b:71:8c:10:66:ea:3f:69:bd:fc:dc:59:99:21:4c:94:10: 78:91:b0:41:0f:c7:84:08:8b:6b:e1:02:65:30:be:30:89:14: c7:27:96:60:3e:ac:19:ea:31:76:cd:43:cd:67:b4:22:f4:90: ef:d1:d2:a4:c0:e5:f5:ad:30:07:ca:19:d8:26:25:37:bf:19: f9:de:e6:e4:78:0c:36:72:f5:52:b9:cd:c7:5f:75:1a:e6:b8: c5:73:b9:29:f7:dc:80:0c:48:eb:ee:f3:24:64:a2:c3:98:b0: 59:21:0a:a9:b2:71:cb:c6:cf:5e:14:0a:ae:48:48:17:02:00: 01:5e:13:6a:db:04:fb:3b:ee:11:a9:31:39:00:6d:37:87:80: 17:a1:a2:03:16:3f:e4:eb:16:ea:62:2c:ac:9e:ad:15:35:30: b2:ca:f3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE RkNBRENGRTYwHhcNMjUwNzAyMjAyNTE3WhcNMjUwNzA5MjAyNTE3WjAYMRYwFAYD VQQDEw02ODY1OTVhZS01ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4nnQmK1pXfhzXa2mtd4EJHjXvtCYCugnv0T3UrcMNHNjcjrwXFMgWEPQFHk DhybasNN0ANQrXHKFgkXbdvVm6vROozlNfmiKwmYJYG33ua+/8Stp7Pc4S2oyklv +kbPJP2M1q/xWj95KNvojE/aH8BJIpX5WYdrqjW/WFOWliIsgsXoPMb6TADvUCHT Qgc0PMoWZR9MvCDR04N6rVgCkU7AVjndoAX7zRoemYtoB3pEjCySYx9WgbiVBr9/ B+klBcvO6ITbPtZTkhKL4g4Kxnq7XjXiBPQJ8Z146s4NeVE1NDgrTnMSlXNuy7ch 8UpCrg+9Ge+FmWJkuw/5t2GIVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF9oi/G kew8P5B1o0DpxQyWOPKnMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3 QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwSCbm01OZiP/fz623eC+zI04YgGQd0AjlXitLneFlmafNoutXlLZW JzpOZWN66rDAKyws9/NcEQfaBqH97tkR4s9f1aZzNPHQ9wJxX8zt26KBiPdFxCoy t7PQG3GMEGbqP2m9/NxZmSFMlBB4kbBBD8eECItr4QJlML4wiRTHJ5ZgPqwZ6jF2 zUPNZ7Qi9JDv0dKkwOX1rTAHyhnYJiU3vxn53ubkeAw2cvVSuc3HX3Ua5rjFc7kp 99yADEjr7vMkZKLDmLBZIQqpsnHLxs9eFAquSEgXAgABXhNq2wT7O+4RqTE5AG03 h4AXoaIDFj/k6xbqYiysnq0VNTCyyvPy -----END CERTIFICATE-----Generated at Fri Jul 4 18:36:06 2025 by rpki-client