$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: v88+qKo1PFgtV/tjf2fo+PXvVlASWNvawVXvGGL0FrE= Subject key identifier: C3:9C:84:9A:14:D9:5B:74:B5:8B:61:2B:1E:B6:2B:93:BD:CE:F9:A4 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0BD4 Signing time: Fri 08 Aug 2025 19:09:45 +0000 Manifest this update: Fri 08 Aug 2025 19:09:45 +0000 Manifest next update: Fri 15 Aug 2025 19:09:45 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: hyKQPKcE2yKZiWvDxxoOT+uoVkh4uvgST+3ddzv/Xbc=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: r+qQMJg9WeT3dBS1G2eddJkWAZzyHZW7YUPhUNiXmvc=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 78NzvvcCG2D0+YLHvm0WI7AAwqsj2ir6ZRecAq/XKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Aug 8 19:09:45 2025 GMT Not After : Aug 15 19:09:45 2025 GMT Subject: CN=68964b79-5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:00:54:d8:19:e1:39:6b:79:8d:aa:da:6a: cb:bb:a9:df:29:b5:e2:f7:68:b3:09:7d:27:5b:fc: d7:cc:51:7d:3c:ad:0c:e6:bd:33:39:4a:25:36:13: 27:6c:61:6a:47:6e:a4:f5:aa:ef:96:7c:7d:0d:c5: dd:e1:33:bc:9d:84:e8:d7:c9:49:7a:b3:61:ac:15: 9d:ea:8a:e6:ed:65:c4:d3:c2:32:1e:05:b4:ad:6f: 72:91:cd:dc:3e:c1:08:85:91:89:cc:15:7b:9b:11: 86:f4:41:03:fa:b5:41:94:74:af:fe:2a:86:71:04: 5e:1a:bb:b7:41:b2:f3:be:21:b3:f2:fc:47:39:37: d5:6f:da:86:01:dd:4c:12:14:69:6e:0e:f3:02:4e: 83:f9:5e:36:92:f8:9a:df:1c:7a:55:5f:f7:94:ce: 63:81:58:7e:44:49:07:3a:7f:c1:2a:65:6f:5d:a4: 01:62:82:72:6c:85:fc:a6:ab:89:db:c3:43:bd:14: 75:af:25:e8:3d:33:83:af:04:f8:41:46:97:25:d6: 0d:1f:ab:86:34:0c:2f:0b:12:44:f9:24:3d:fa:05: 08:95:7c:f5:af:58:77:e5:88:75:0b:2d:8a:56:de: f4:2b:e5:01:40:ea:b3:4a:c5:7f:5c:96:90:04:4a: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9C:84:9A:14:D9:5B:74:B5:8B:61:2B:1E:B6:2B:93:BD:CE:F9:A4 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7b:c0:bd:a2:07:af:18:a7:10:1b:08:cf:55:9b:32:a7:39: c3:6c:fc:aa:5e:9a:89:48:e4:92:a9:da:93:73:01:68:7c:1c: ba:4f:db:da:83:7c:68:59:6c:53:91:f1:81:20:6a:d5:1b:6c: 45:47:74:2c:8a:5c:c6:b7:6f:ef:ae:aa:6d:23:fc:3d:2a:e3: 9a:e6:e2:23:03:d9:d3:b5:f8:2f:44:1f:43:7b:69:14:1d:b6: 0e:9c:10:68:33:13:48:c3:07:4f:20:a5:92:cf:61:7f:29:f4: 11:b5:a9:63:c6:d1:fb:fc:a1:1a:19:14:46:05:c2:91:1d:f6: c8:fd:df:15:c3:19:1b:40:aa:da:31:f0:93:60:db:4d:6b:86: ce:ea:02:ef:e7:6a:11:45:71:c9:60:fe:ea:30:9e:41:ef:d7: a4:39:b8:df:5e:22:1e:b4:b1:f1:c4:a5:2c:9d:ad:fc:3c:3f: b6:0b:a8:e0:7a:de:4c:76:d9:59:3e:9e:2b:e8:00:02:f0:4b: 5b:01:0f:c8:ca:ba:a6:82:c1:b6:d1:ac:12:7c:ff:ef:16:ce: 69:a8:95:31:50:5f:a0:5f:b1:df:3e:88:d8:3e:8f:46:a7:b5: 14:28:18:a9:0e:f0:e9:6a:c6:9c:14:6f:c9:9e:58:16:ff:36: e2:d4:4b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUwODA4MTkwOTQ1WhcNMjUwODE1MTkwOTQ1WjAYMRYwFAYD VQQDEw02ODk2NGI3OS01YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDMAVNgZ4TlreY2q2mrLu6nfKbXi92izCX0nW/zXzFF9PK0M5r0zOUolNhMn bGFqR26k9arvlnx9DcXd4TO8nYTo18lJerNhrBWd6orm7WXE08IyHgW0rW9ykc3c PsEIhZGJzBV7mxGG9EED+rVBlHSv/iqGcQReGru3QbLzviGz8vxHOTfVb9qGAd1M EhRpbg7zAk6D+V42kvia3xx6VV/3lM5jgVh+REkHOn/BKmVvXaQBYoJybIX8pquJ 28NDvRR1ryXoPTODrwT4QUaXJdYNH6uGNAwvCxJE+SQ9+gUIlXz1r1h35Yh1Cy2K Vt70K+UBQOqzSsV/XJaQBErFHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOchJoU 2Vt0tYthKx62K5O9zvmkMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7e8C9ogevGKcQGwjPVZsypznDbPyqXpqJSOSSqdqTcwFofBy6T9va g3xoWWxTkfGBIGrVG2xFR3QsilzGt2/vrqptI/w9KuOa5uIjA9nTtfgvRB9De2kU HbYOnBBoMxNIwwdPIKWSz2F/KfQRtaljxtH7/KEaGRRGBcKRHfbI/d8VwxkbQKra MfCTYNtNa4bO6gLv52oRRXHJYP7qMJ5B79ekObjfXiIetLHxxKUsna38PD+2C6jg et5MdtlZPp4r6AAC8EtbAQ/IyrqmgsG20awSfP/vFs5pqJUxUF+gX7HfPojYPo9G p7UUKBipDvDpasacFG/JnlgW/zbi1Ev8 -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:36 2025 by rpki-client