$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: uy6lJVLJCN2b5bEDxxBK629bXidgC3unyeJI4CIb5tM= Subject key identifier: AC:30:F3:6A:9A:22:4E:44:3B:DA:D9:C3:17:D7:8E:DC:E8:64:62:C5 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 076E Signing time: Wed 02 Jul 2025 21:51:19 +0000 Manifest this update: Wed 02 Jul 2025 21:51:19 +0000 Manifest next update: Wed 09 Jul 2025 21:51:19 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: Pfub47aGmi1RIavpDz5mTbwCeifAFT2+Thnde9q1jfU=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Jul 2 21:51:19 2025 GMT Not After : Jul 9 21:51:19 2025 GMT Subject: CN=6865a9d7-3a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:42:43:a5:68:82:6c:cc:c7:c8:79:a0:cb: 1e:ab:e0:57:45:06:f3:2f:c3:3d:03:eb:38:ea:a4: 29:dd:b2:ea:84:a3:a6:09:b0:8b:69:ca:7f:71:02: 55:d2:5e:5d:88:19:aa:aa:83:3f:3d:ea:03:9e:f8: 6a:5b:4d:a8:ee:74:76:c9:cd:05:56:10:f2:12:6b: 49:be:ec:9b:d0:f6:51:c4:61:60:63:f3:ec:94:44: 3c:3c:14:ae:ba:aa:dd:ff:83:29:36:da:1f:7e:e0: 3b:87:c7:a1:59:bf:17:0d:39:7a:42:01:d7:be:4e: c1:3c:8e:0e:be:2b:c0:5f:80:32:74:bd:c6:b8:37: 57:ce:a2:48:91:3d:4b:06:e8:fb:be:3a:a9:ce:09: c5:7a:7e:d6:92:bc:e6:b7:a2:02:73:d3:f9:34:2d: b9:a0:c5:ad:9f:b2:11:1d:6a:f8:e1:31:48:ee:9e: f9:81:e0:2b:d9:36:ba:32:73:1a:6a:a8:eb:ab:3b: 48:d0:da:bb:6e:5a:58:86:16:20:d0:c0:d7:e1:32: 16:a9:5a:70:f9:71:45:bd:f3:13:33:2e:ab:23:d5: d7:17:18:c5:15:11:a7:ce:10:c2:ab:de:d2:38:48: 3b:13:16:5d:71:35:95:a4:22:a8:45:ad:99:f9:76: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:F3:6A:9A:22:4E:44:3B:DA:D9:C3:17:D7:8E:DC:E8:64:62:C5 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:0d:91:70:87:9d:e5:69:c8:6b:54:e7:7e:f8:fc:0e:5a: d4:27:42:ae:e2:e5:32:44:ed:11:a2:fc:b5:da:4c:8b:4f:7c: fe:14:18:9a:1b:87:f0:6f:f1:72:c7:ac:99:98:6b:0e:2d:ad: 17:d8:76:04:f5:3e:fa:3d:0b:c0:17:ea:4b:a6:db:4e:dc:4c: fa:6d:d6:9c:3c:4a:db:62:78:66:72:7d:0b:6a:6b:87:64:b9: 37:25:91:f4:24:ab:0a:90:bf:f7:ec:c7:a4:f1:3d:d2:6a:4d: fb:29:dd:d5:2d:f3:a8:87:2a:df:09:21:bf:1a:22:31:6a:11: 69:47:b2:df:8f:d6:46:18:99:53:04:61:bf:ad:ea:b2:28:62: 29:b4:87:68:c5:b9:49:f6:14:83:08:e6:b5:7c:39:f0:c3:e6: 8a:f3:b5:44:83:1f:6d:88:30:0c:ad:14:4e:29:f1:64:fa:73: 35:82:b1:b3:b6:02:05:b9:d0:27:2b:6a:be:b2:f5:6f:29:25: a4:a8:d2:fa:f3:3f:78:04:8e:7c:16:d0:1c:d5:d3:90:c3:ee: d4:f4:93:d0:45:94:d6:c4:bb:9f:ab:98:f2:58:21:77:2c:23: d2:c9:c5:ae:40:44:93:0a:e3:43:2e:58:a6:3c:70:94:38:c6: 38:59:5c:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwNzAyMjE1MTE5WhcNMjUwNzA5MjE1MTE5WjAYMRYwFAYD VQQDEw02ODY1YTlkNy0zYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYZCQ6VogmzMx8h5oMseq+BXRQbzL8M9A+s46qQp3bLqhKOmCbCLacp/cQJV 0l5diBmqqoM/PeoDnvhqW02o7nR2yc0FVhDyEmtJvuyb0PZRxGFgY/PslEQ8PBSu uqrd/4MpNtoffuA7h8ehWb8XDTl6QgHXvk7BPI4OvivAX4AydL3GuDdXzqJIkT1L Buj7vjqpzgnFen7Wkrzmt6ICc9P5NC25oMWtn7IRHWr44TFI7p75geAr2Ta6MnMa aqjrqztI0Nq7blpYhhYg0MDX4TIWqVpw+XFFvfMTMy6rI9XXFxjFFRGnzhDCq97S OEg7ExZdcTWVpCKoRa2Z+XYhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKww82qa Ik5EO9rZwxfXjtzoZGLFMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKg2RcIed5WnIa1Tnfvj8DlrUJ0Ku4uUyRO0Rovy12kyLT3z+FBia G4fwb/Fyx6yZmGsOLa0X2HYE9T76PQvAF+pLpttO3Ez6bdacPErbYnhmcn0LamuH ZLk3JZH0JKsKkL/37Mek8T3Sak37Kd3VLfOohyrfCSG/GiIxahFpR7Lfj9ZGGJlT BGG/reqyKGIptIdoxblJ9hSDCOa1fDnww+aK87VEgx9tiDAMrRROKfFk+nM1grGz tgIFudAnK2q+svVvKSWkqNL68z94BI58FtAc1dOQw+7U9JPQRZTWxLufq5jyWCF3 LCPSycWuQESTCuNDLlimPHCUOMY4WVw1 -----END CERTIFICATE-----Generated at Thu Jul 3 23:59:24 2025 by rpki-client