$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: GU25j8pcYx/UvvQ3yQxsc/45kcv7vfZFF2657QNy9lg= Subject key identifier: 54:B3:F6:A0:00:54:26:75:F6:4F:3D:6A:65:9C:E3:25:E8:5B:21:1F Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 073A Signing time: Sun 10 Aug 2025 21:47:59 +0000 Manifest this update: Sun 10 Aug 2025 21:47:59 +0000 Manifest next update: Sun 17 Aug 2025 21:47:59 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: rn899n6pMeCizFuxfdKfOGaqS51uhGzEJ682bX4ZVaM=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: P6M32s9N/Ait6pG90TBg5gFRqcz9Jw3z+OITkwygUn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Aug 10 21:47:59 2025 GMT Not After : Aug 17 21:47:59 2025 GMT Subject: CN=6899138f-64e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:6b:dc:ba:3a:98:53:74:e7:f9:94:03:9b: bd:1a:b0:b1:51:7d:48:e2:0d:4f:e1:4f:0a:24:a1: 43:c3:12:04:ec:36:b6:9c:6a:e9:3d:a5:3d:13:23: 8a:6f:75:6f:56:8e:7d:79:92:b7:10:0d:6e:f4:32: 71:5f:3c:c8:54:c3:15:63:01:f4:73:67:41:a8:ec: e2:ac:17:9f:4e:18:68:70:0e:03:a7:18:e8:82:be: 03:26:5d:bd:d4:dd:0f:ea:ba:b7:36:b5:eb:3f:4f: b9:ab:3e:c8:22:4d:35:03:b4:35:32:bb:de:ae:e1: 4a:7c:32:3f:0f:6c:b5:2f:3f:65:73:8a:3b:38:f8: 77:16:35:8c:e4:1b:0d:c7:44:15:26:7d:04:d3:7e: e3:93:a3:ed:2b:ee:95:b7:14:be:f3:69:3b:56:54: b8:10:8d:9f:3c:2c:20:12:7b:8b:d2:e9:14:26:9d: da:ad:ec:4c:7a:32:b3:7e:38:95:30:94:86:5c:8a: 12:07:ba:e9:0d:5a:57:be:23:60:73:f8:5a:c9:af: 1e:02:dc:7b:6d:f2:6a:01:0e:70:a0:b8:20:d5:91: ad:c8:35:04:de:49:0f:15:ad:a9:89:2e:2a:c0:46: fb:52:a7:a2:d9:e4:c6:a9:b1:66:54:24:16:e9:8f: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B3:F6:A0:00:54:26:75:F6:4F:3D:6A:65:9C:E3:25:E8:5B:21:1F X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7c:ad:50:6c:2f:d7:65:c4:76:1d:0e:ca:35:a9:5f:cb:2f: 06:67:33:3c:5a:8c:4d:55:e0:0e:b9:93:bd:a4:09:77:b3:e1: ba:81:26:16:8a:1b:db:e2:74:9f:ab:4b:66:6f:79:78:40:06: 4b:e8:1e:15:32:c7:b5:a6:2b:d1:91:0e:5b:4a:18:22:09:89: 13:33:93:94:62:15:97:8d:fa:82:2d:a9:cb:a7:83:a3:83:cd: ce:da:52:20:85:37:4f:10:a4:74:8f:b9:14:cf:82:86:da:7e: b2:69:c7:b8:ed:c3:01:a3:73:4f:d0:4c:a3:73:7f:a4:de:9e: 9c:d6:60:bd:b7:9c:87:da:65:3d:bc:8a:ff:e2:e9:92:48:29: 4c:03:21:3f:93:ab:fb:24:b7:2e:96:44:a8:8e:1b:09:1b:90: 67:3f:38:75:c0:c7:c0:83:83:31:04:69:c5:fe:54:ff:e0:a7: f6:99:0a:43:45:de:b7:68:c5:4d:a6:98:39:7f:21:3d:7b:e8: 93:a0:24:f9:96:59:49:01:63:8b:3a:5c:1c:77:83:27:86:bf: 93:29:ed:62:84:5f:c7:6a:ea:48:6b:f5:90:5c:81:d4:b4:50: fd:23:92:48:e6:c2:6b:fd:a8:24:df:7c:38:58:ef:3b:fa:7e: e1:6e:1e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUwODEwMjE0NzU5WhcNMjUwODE3MjE0NzU5WjAYMRYwFAYD VQQDEw02ODk5MTM4Zi02NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PBr3Lo6mFN05/mUA5u9GrCxUX1I4g1P4U8KJKFDwxIE7Da2nGrpPaU9EyOK b3VvVo59eZK3EA1u9DJxXzzIVMMVYwH0c2dBqOzirBefThhocA4Dpxjogr4DJl29 1N0P6rq3NrXrP0+5qz7IIk01A7Q1MrveruFKfDI/D2y1Lz9lc4o7OPh3FjWM5BsN x0QVJn0E037jk6PtK+6VtxS+82k7VlS4EI2fPCwgEnuL0ukUJp3arexMejKzfjiV MJSGXIoSB7rpDVpXviNgc/haya8eAtx7bfJqAQ5woLgg1ZGtyDUE3kkPFa2piS4q wEb7Uqei2eTGqbFmVCQW6Y9XkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSz9qAA VCZ19k89amWc4yXoWyEfMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+fK1QbC/XZcR2HQ7KNalfyy8GZzM8WoxNVeAOuZO9pAl3s+G6gSYW ihvb4nSfq0tmb3l4QAZL6B4VMse1pivRkQ5bShgiCYkTM5OUYhWXjfqCLanLp4Oj g83O2lIghTdPEKR0j7kUz4KG2n6yace47cMBo3NP0Eyjc3+k3p6c1mC9t5yH2mU9 vIr/4umSSClMAyE/k6v7JLculkSojhsJG5BnPzh1wMfAg4MxBGnF/lT/4Kf2mQpD Rd63aMVNppg5fyE9e+iToCT5lllJAWOLOlwcd4Mnhr+TKe1ihF/HaupIa/WQXIHU tFD9I5JI5sJr/agk33w4WO87+n7hbh7h -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:20 2025 by rpki-client