$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: KEXyV5jGVpDToD2i5aXv9+7Id1h9wSb4b+PC9k0cbC4= Subject key identifier: C8:B6:19:11:7F:41:A2:C6:C1:D9:B1:90:58:1A:04:FE:62:F1:3C:57 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 1F Signing time: Thu 07 Aug 2025 08:31:58 +0000 Manifest this update: Thu 07 Aug 2025 08:31:58 +0000 Manifest next update: Thu 14 Aug 2025 08:31:58 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: +aaHAuu0BHcMh0rhXgrkpEU1cvXbD8/VC93hm4NHm7k=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Aug 7 08:31:58 2025 GMT Not After : Aug 14 08:31:58 2025 GMT Subject: CN=6894647e-207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:ae:d8:ce:96:84:f7:eb:43:34:f1:47:5e: 44:b3:42:a8:61:a4:f0:da:4b:14:58:be:c4:6a:27: 55:65:3c:03:c6:29:6b:20:6b:8f:67:14:36:fe:0b: 68:d9:92:c9:3b:90:55:db:9a:9a:ef:2a:2d:85:f9: ae:13:d6:5d:17:e9:8d:e3:a9:b8:fa:82:ab:b9:db: a6:63:3b:7e:72:75:0b:06:61:22:30:82:43:74:02: f4:1b:33:c7:eb:1b:8a:ea:ab:fb:73:ea:8f:63:c1: a1:43:d4:e3:5f:17:ad:ad:37:52:2e:76:c5:2a:42: b6:4a:d1:4c:14:6e:a7:6b:3d:2d:57:32:be:67:69: 32:4a:fb:7a:68:00:ca:4e:a8:38:e6:d7:c2:7c:60: ee:94:5a:bd:d7:90:99:1f:f7:08:7d:d8:b6:e2:83: 49:86:13:22:39:2a:80:9a:22:d4:83:e9:a7:48:a8: 59:e6:db:6f:64:6c:09:54:6f:6f:65:40:87:86:4c: a3:c2:78:a9:80:5e:5c:54:43:99:39:1c:53:25:e2: 30:50:68:bf:ac:06:8d:45:7f:6a:e5:ed:2e:f5:a0: 9d:30:5c:26:bf:89:58:93:3b:22:bd:14:41:03:3a: e2:17:f5:91:6a:33:87:23:84:c9:b9:e7:c7:ab:db: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B6:19:11:7F:41:A2:C6:C1:D9:B1:90:58:1A:04:FE:62:F1:3C:57 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2e:1b:f5:28:d1:28:44:9a:d6:58:88:51:4a:ca:1e:28:63: 19:57:91:34:06:89:eb:5f:b2:42:69:4d:ee:a8:43:20:63:4b: 09:e9:4b:0e:1d:59:0a:40:03:32:c5:fb:f9:82:c5:ce:c2:d8: 1f:f6:dd:6c:cf:80:91:f3:9a:07:7c:42:7b:e6:6f:5e:36:be: bd:40:ed:31:d3:ae:45:90:8e:44:32:a7:dd:14:00:f6:1e:ed: 11:72:c0:5a:a9:11:6b:7e:be:71:7e:6c:72:ae:4e:21:a3:58: ca:5c:75:da:c2:0a:ab:77:01:7a:6f:1f:1b:1a:92:0b:57:39: 94:47:cc:e6:0f:4a:2b:24:ca:72:55:57:39:6f:c9:e4:1a:ec: 59:3b:85:fd:94:b4:4f:a8:44:f3:ab:10:77:a9:de:db:23:8a: b3:35:a4:0d:4a:af:03:2f:b5:31:10:a5:45:13:44:8c:41:7f: a2:bd:e1:85:88:4c:db:d7:48:02:81:08:fe:d5:1e:ca:65:8c: 1f:2c:a8:9b:7b:9f:ca:52:e5:7b:d5:eb:6f:cb:2a:3e:5b:6e: 66:b0:40:77:27:0a:f4:17:8e:bf:7e:2a:e4:40:02:23:ad:2f: be:2b:c7:36:0d:bf:a0:ea:f4:d3:29:f8:cf:0d:5d:c8:39:d8: 3d:75:c4:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTA4MDcwODMxNThaFw0yNTA4MTQwODMxNThaMBgxFjAUBgNV BAMTDTY4OTQ2NDdlLTIwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWc67YzpaE9+tDNPFHXkSzQqhhpPDaSxRYvsRqJ1VlPAPGKWsga49nFDb+C2jZ ksk7kFXbmprvKi2F+a4T1l0X6Y3jqbj6gqu526ZjO35ydQsGYSIwgkN0AvQbM8fr G4rqq/tz6o9jwaFD1ONfF62tN1IudsUqQrZK0UwUbqdrPS1XMr5naTJK+3poAMpO qDjm18J8YO6UWr3XkJkf9wh92Lbig0mGEyI5KoCaItSD6adIqFnm229kbAlUb29l QIeGTKPCeKmAXlxUQ5k5HFMl4jBQaL+sBo1Ff2rl7S71oJ0wXCa/iViTOyK9FEED OuIX9ZFqM4cjhMm558er2+0DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyLYZEX9B osbB2bGQWBoE/mLxPFcwHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcuG/Uo0ShEmtZYiFFKyh4oYxlXkTQGietfskJpTe6oQyBjSwnpSw4d WQpAAzLF+/mCxc7C2B/23WzPgJHzmgd8Qnvmb142vr1A7THTrkWQjkQyp90UAPYe 7RFywFqpEWt+vnF+bHKuTiGjWMpcddrCCqt3AXpvHxsakgtXOZRHzOYPSiskynJV VzlvyeQa7Fk7hf2UtE+oRPOrEHep3tsjirM1pA1KrwMvtTEQpUUTRIxBf6K94YWI TNvXSAKBCP7VHspljB8sqJt7n8pS5XvV62/LKj5bbmawQHcnCvQXjr9+KuRAAiOt L74rxzYNv6Dq9NMp+M8NXcg52D11xD4= -----END CERTIFICATE-----Generated at Fri Aug 8 00:38:46 2025 by rpki-client