$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json) Hash identifier: XwcyE5BWsta7dbkVRASICDBX6r2IMJidxWj7ajFFsoI= Subject key identifier: 3C:68:88:D2:5F:50:6A:7C:14:BC:8F:F4:7D:F7:7F:04:60:27:75:49 Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft Manifest number: 012F Signing time: Wed 02 Jul 2025 17:59:54 +0000 Manifest this update: Wed 02 Jul 2025 17:59:54 +0000 Manifest next update: Wed 09 Jul 2025 17:59:54 +0000 Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: TMjOQcCKem3UilXQGxHBzANBJNG1ypW8EsiUP73/F4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Validity Not Before: Jul 2 17:59:54 2025 GMT Not After : Jul 9 17:59:54 2025 GMT Subject: CN=6865739a-e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:eb:97:85:88:37:5b:6b:18:5c:11:62:0b: ab:13:be:e5:9f:ae:c5:ee:8b:ff:fd:7e:1b:9d:cd: 60:c5:bf:88:0a:2f:2b:00:ce:54:3a:61:39:9b:13: 3f:53:94:32:e7:5c:50:4a:af:4a:88:08:0c:55:b1: 41:3d:1a:4f:1f:81:df:45:1e:42:aa:68:33:a6:96: 82:3c:4e:74:29:d8:9c:ea:7e:27:51:0d:5d:2f:b9: d0:69:83:a7:38:96:db:62:e4:8f:cf:00:ad:1a:35: 94:60:00:de:4c:b1:41:6e:a1:fa:d7:11:9f:14:a4: 80:9d:d3:6b:79:e0:3c:22:61:0e:ef:7b:b8:df:e0: 96:12:3f:0f:2a:61:cb:9d:e3:dd:46:d5:14:60:8b: 2c:94:42:a3:ec:b8:10:7c:f2:08:f8:05:ad:ae:90: 08:7b:56:f5:0d:dc:42:80:e7:7f:4b:f7:0c:25:3b: cc:67:a0:7e:83:c4:a5:4a:7b:77:86:a0:f8:49:2e: 89:b7:bf:e7:eb:13:2a:50:fb:6d:30:ee:5c:11:3e: fe:62:28:1a:dc:47:76:b3:d3:6f:17:e0:38:64:e0: e9:33:da:3f:15:3a:82:35:17:96:0d:5e:55:69:43: dc:4c:b1:85:d6:e5:68:53:22:c2:e2:f6:d8:ef:c4: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:88:D2:5F:50:6A:7C:14:BC:8F:F4:7D:F7:7F:04:60:27:75:49 X509v3 Authority Key Identifier: keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:4c:7a:a0:bf:76:50:40:56:10:e6:8c:c0:ed:16:f5:be: 22:e6:07:5d:0e:22:64:99:6d:26:c5:8b:2c:88:0d:3b:32:10: b3:c9:a5:9a:cc:f4:d5:8c:e2:7d:f6:ef:0e:28:68:08:d2:f0: 17:ec:84:fa:e8:97:ec:03:ca:8c:76:44:0d:42:44:90:e4:8c: a8:4e:1b:33:e2:17:b9:d7:c2:9e:ee:78:74:f7:4e:22:33:bd: db:84:58:c4:82:64:fa:2d:ff:d0:23:64:a9:65:12:11:8d:5c: da:13:c9:17:8e:e7:b2:86:5f:e4:f2:46:2c:6b:0f:8e:7c:ed: 98:85:b2:55:19:c1:9d:9b:9d:0f:19:f7:2b:4e:0f:6c:45:40: ce:8a:5b:d8:f4:8e:79:69:60:a4:d7:fa:c2:bf:a3:12:12:4a: 3e:5c:6d:42:5b:8c:9b:05:4d:ee:9e:20:be:bc:09:22:8e:d2: 35:a6:5f:1d:79:71:11:75:6e:5d:cf:57:91:ba:59:f2:95:da: 90:68:3b:80:09:ee:6a:c5:5e:e0:dd:26:54:b3:f6:cc:df:5e: 13:7f:fe:c2:63:cd:39:f6:04:89:a9:d5:cc:dd:68:bb:ea:5a: 43:49:35:df:83:ca:15:d8:b4:87:a4:3d:5b:95:c5:a6:85:7b: 2c:8e:65:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEExRTRGMDlEMkY0NzA3ODY3Q0ZBRTI3RThGMTMyMzY5 RkI5N0QwRUQwHhcNMjUwNzAyMTc1OTU0WhcNMjUwNzA5MTc1OTU0WjAYMRYwFAYD VQQDEw02ODY1NzM5YS1lNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34Hrl4WIN1trGFwRYgurE77ln67F7ov//X4bnc1gxb+ICi8rAM5UOmE5mxM/ U5Qy51xQSq9KiAgMVbFBPRpPH4HfRR5CqmgzppaCPE50Kdic6n4nUQ1dL7nQaYOn OJbbYuSPzwCtGjWUYADeTLFBbqH61xGfFKSAndNreeA8ImEO73u43+CWEj8PKmHL nePdRtUUYIsslEKj7LgQfPII+AWtrpAIe1b1DdxCgOd/S/cMJTvMZ6B+g8SlSnt3 hqD4SS6Jt7/n6xMqUPttMO5cET7+Yiga3Ed2s9NvF+A4ZODpM9o/FTqCNReWDV5V aUPcTLGF1uVoUyLC4vbY78S23QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxoiNJf UGp8FLyP9H33fwRgJ3VJMB8GA1UdIwQYMBaAFKHk8J0vRweGfPrifo8TI2n7l9Dt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81MDI5NTU0QzhB NzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0WjgtdUotanhNamFmdVgw TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81MDI5NTU0QzhBNzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0 WjgtdUotanhNamFmdVgwTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgtUx6oL92UEBWEOaMwO0W9b4i5gddDiJkmW0mxYssiA07MhCzyaWa zPTVjOJ99u8OKGgI0vAX7IT66JfsA8qMdkQNQkSQ5IyoThsz4he518Ke7nh0904i M73bhFjEgmT6Lf/QI2SpZRIRjVzaE8kXjueyhl/k8kYsaw+OfO2YhbJVGcGdm50P GfcrTg9sRUDOilvY9I55aWCk1/rCv6MSEko+XG1CW4ybBU3uniC+vAkijtI1pl8d eXERdW5dz1eRulnyldqQaDuACe5qxV7g3SZUs/bM314Tf/7CY8059gSJqdXM3Wi7 6lpDSTXfg8oV2LSHpD1blcWmhXssjmVV -----END CERTIFICATE-----Generated at Fri Jul 4 18:59:19 2025 by rpki-client