$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: VIUBoKKsnhytUQeHwhmhLNhpjGADaJvc5otFb09ueOg= Subject key identifier: 0E:E1:2C:C3:5C:5B:72:A0:71:0F:42:09:B8:E3:F9:97:94:B4:02:FC Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 360C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 3562 Signing time: Wed 02 Jul 2025 14:24:18 +0000 Manifest this update: Wed 02 Jul 2025 14:24:18 +0000 Manifest next update: Wed 09 Jul 2025 14:24:18 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: /SzDTktsYx1PfdwDkPfLz5LyQRH7bbos7OG3aNMFsKQ=) 2: 608B0526308511F0AD5E7760C4F9AE02.roa (hash: vLE1ive57Bl66BXPQleXFbzJWKlXtTM6jQsjzKxDkyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13836 (0x360c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Jul 2 14:24:18 2025 GMT Not After : Jul 9 14:24:18 2025 GMT Subject: CN=68654112-e106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:0f:2f:ca:0d:27:e2:cd:20:f9:2e:3a:42: 39:99:b7:f0:0e:5f:c9:45:d0:7d:2e:05:bb:3c:fd: 2b:95:e6:a5:38:16:c1:0a:f5:99:ab:c7:c1:3f:bd: 4a:ea:c6:9a:b3:e6:31:1e:b0:8b:19:a7:80:06:83: 62:8f:29:87:c6:6e:0c:59:a8:ef:eb:b3:51:0b:72: ec:be:c6:e4:97:54:5a:3c:72:e7:67:1e:5f:76:45: c9:51:59:5d:05:a1:e9:8b:25:60:53:2a:af:95:71: 92:f7:fb:6b:a1:c3:2b:32:fa:3c:95:54:e0:64:0b: 41:b5:bc:f2:b1:96:ad:6f:ec:33:e5:aa:8f:f1:3b: 5a:a0:44:ea:f6:e8:f9:55:cc:53:fa:2c:cb:ce:54: a1:ac:14:6e:fa:cc:93:fb:64:38:94:91:05:a8:19: a9:5e:5b:9f:c0:7e:ad:75:26:92:8c:a3:96:8e:ee: b4:8f:38:19:f2:09:a0:37:d2:fc:dc:18:e1:b8:c9: 72:ae:26:ff:04:5d:6c:bd:e3:bb:dc:96:aa:da:0d: 84:89:3e:ad:02:23:e1:4f:70:6b:5a:ef:05:fe:db: 4c:e7:83:6b:75:75:0c:0d:96:e8:df:3f:d2:e7:74: 42:3b:c7:50:42:9c:be:3a:c6:ed:76:c2:53:9b:59: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:2C:C3:5C:5B:72:A0:71:0F:42:09:B8:E3:F9:97:94:B4:02:FC X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:95:8b:bb:b2:18:be:5c:85:2e:30:55:c0:ca:21:c7:df: 1b:5d:a1:34:f3:4b:37:f9:c0:8a:7f:2e:00:4b:ef:21:ab:0d: ab:03:24:94:f8:a2:73:21:48:c9:44:26:0d:05:56:ad:4a:61: 8f:ba:d0:d0:5f:ea:dc:71:30:31:07:45:ae:ef:fd:b1:7c:30: 61:21:0d:8d:53:6e:eb:ce:ce:bb:b1:0a:6f:4b:40:99:29:63: e6:30:96:ee:ee:1e:39:15:8e:2c:a3:fa:b9:61:3c:90:f9:b4: 69:bf:e9:21:5f:04:15:6e:32:c9:c3:a6:d5:0d:54:f2:6b:9f: 45:6f:ec:55:e4:64:dc:e4:3d:ed:cc:56:23:be:1b:5e:51:86: a8:79:00:eb:0d:c5:47:27:e6:f0:38:2d:e0:b2:c6:c8:fa:e6: 48:21:cf:f0:71:d4:d1:3b:29:5f:90:86:50:14:65:d7:a2:18: ba:0c:04:d5:c0:46:e7:cb:ef:b6:ff:6a:8e:3d:ed:bf:12:d8: 02:f2:02:f9:72:1f:d3:f9:1b:a0:c2:c1:51:0f:25:be:da:71: d0:03:0f:2e:79:e1:f2:f5:52:32:6e:5a:98:7e:f6:31:09:c4: bc:3a:d8:ab:99:fc:8b:6d:2a:61:22:7e:e8:84:e2:43:ea:30: 09:93:3a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwNzAyMTQyNDE4WhcNMjUwNzA5MTQyNDE4WjAYMRYwFAYD VQQDEw02ODY1NDExMi1lMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8YPL8oNJ+LNIPkuOkI5mbfwDl/JRdB9LgW7PP0rlealOBbBCvWZq8fBP71K 6saas+YxHrCLGaeABoNijymHxm4MWajv67NRC3Lsvsbkl1RaPHLnZx5fdkXJUVld BaHpiyVgUyqvlXGS9/trocMrMvo8lVTgZAtBtbzysZatb+wz5aqP8TtaoETq9uj5 VcxT+izLzlShrBRu+syT+2Q4lJEFqBmpXlufwH6tdSaSjKOWju60jzgZ8gmgN9L8 3BjhuMlyrib/BF1sveO73Jaq2g2EiT6tAiPhT3BrWu8F/ttM54NrdXUMDZbo3z/S 53RCO8dQQpy+OsbtdsJTm1lleQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7hLMNc W3KgcQ9CCbjj+ZeUtAL8MB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1g5WLu7IYvlyFLjBVwMohx98bXaE080s3+cCKfy4AS+8hqw2rAySU +KJzIUjJRCYNBVatSmGPutDQX+rccTAxB0Wu7/2xfDBhIQ2NU27rzs67sQpvS0CZ KWPmMJbu7h45FY4so/q5YTyQ+bRpv+khXwQVbjLJw6bVDVTya59Fb+xV5GTc5D3t zFYjvhteUYaoeQDrDcVHJ+bwOC3gssbI+uZIIc/wcdTROylfkIZQFGXXohi6DATV wEbny++2/2qOPe2/EtgC8gL5ch/T+RugwsFRDyW+2nHQAw8ueeHy9VIyblqYfvYx CcS8OtirmfyLbSphIn7ohOJD6jAJkzr2 -----END CERTIFICATE-----Generated at Wed Jul 2 20:54:17 2025 by rpki-client