$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft File: oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json) Hash identifier: 2M4WR490rpm+3sxDqYgdCcmCaa7n/mkhjqO29Wk0Bu0= Subject key identifier: 24:1C:75:B7:B8:7C:E0:C8:9B:78:3B:53:10:36:A5:79:F4:35:A7:19 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft Manifest number: 0352 Signing time: Thu 07 Aug 2025 01:34:25 +0000 Manifest this update: Thu 07 Aug 2025 01:34:25 +0000 Manifest next update: Thu 14 Aug 2025 01:34:25 +0000 Files and hashes: 1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: ZdpOSiL7wqdQVW78exieuF/RbRZ4J76iC5ey05ZNgFE=) 2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI=) 3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: UriRXIOaFvm5u1qncQTi3IERwvU0QHA/1gyCNIPeCng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Aug 7 01:34:25 2025 GMT Not After : Aug 14 01:34:25 2025 GMT Subject: CN=689402a1-fcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:3a:4b:9d:4b:38:dc:c9:76:09:e3:4d:db: 83:fb:73:40:9c:0e:95:aa:d9:46:ce:da:63:e0:95: a4:4b:75:dd:07:81:d9:a0:8e:31:d2:02:72:16:b9: e2:fc:45:c2:26:e3:0e:38:83:23:3b:09:bd:9e:d4: 71:e9:db:38:a8:a1:9c:59:c2:35:7e:5f:11:80:a1: d3:2d:1c:a6:23:fb:c2:1f:dd:ce:26:ab:a5:3c:03: df:15:3b:4d:04:8c:6d:41:91:29:d4:24:f2:1d:80: 51:38:ec:e3:87:6c:f3:e4:98:ad:dc:49:15:3e:db: fe:45:00:29:30:05:c6:8f:a2:15:eb:c4:c2:aa:91: 77:06:f3:5a:ec:6a:75:18:8f:c1:9d:e3:97:12:6f: fd:61:ab:94:89:44:12:27:f3:45:e4:a3:b1:af:d8: 5f:14:b7:40:fd:65:c9:8b:56:58:c3:44:4c:6e:e2: f3:22:9e:8e:a6:12:d9:28:9a:0e:5a:20:14:77:44: 21:f4:25:ea:9f:3f:36:e0:e5:22:79:9a:e5:44:a1: 34:1e:48:54:f3:32:00:65:6a:8f:41:6c:7f:45:f0: 98:fc:72:d7:64:7b:4d:8a:97:b9:14:b1:fe:a7:d8: bd:20:3e:8d:6c:c3:db:68:79:a3:6e:21:9a:0e:38: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1C:75:B7:B8:7C:E0:C8:9B:78:3B:53:10:36:A5:79:F4:35:A7:19 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c2:02:1a:eb:8a:1a:5c:65:31:b4:53:2b:69:bd:fd:f4:ff: db:8e:85:6f:37:88:b4:6f:8c:19:6e:39:fc:52:8d:0f:7b:c7: 60:4b:78:f2:53:4c:85:22:4b:b9:99:08:c1:44:7d:82:d2:43: 1d:33:5a:3a:ec:32:f5:c0:b0:28:4f:7b:00:b4:58:c3:35:a3: b3:36:38:7f:f8:f2:e9:3f:bc:f9:20:1f:b2:5f:16:60:16:50: cf:4c:4f:92:c5:96:e7:5f:f3:9d:27:b5:c2:2a:4b:03:f1:36: 66:20:e8:fd:2a:78:ed:52:b6:59:6b:af:6c:2c:19:1a:7c:f8: 3e:73:4e:26:f1:04:18:6d:be:e7:e9:fc:4b:15:5f:dd:e9:d5: 7c:44:51:bc:e7:6e:48:9f:91:40:50:1d:e4:82:1a:31:5a:0c: c1:74:1a:19:fa:fa:24:80:da:22:68:e7:d0:64:85:16:29:05: d8:32:d5:1f:f3:46:45:92:2b:52:e1:97:a3:f8:c7:90:ed:56: d0:b8:3e:fa:9a:bb:38:4e:cf:c0:ee:11:89:48:9f:c6:ec:c7: f7:fd:51:26:17:15:0b:1d:64:5b:1e:42:47:3b:7f:81:db:4c: f4:26:6d:a2:b8:a2:33:80:77:9e:bf:8e:30:ba:00:a3:bd:f4: b4:d4:30:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUwODA3MDEzNDI1WhcNMjUwODE0MDEzNDI1WjAYMRYwFAYD VQQDEw02ODk0MDJhMS1mY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiI6S51LONzJdgnjTduD+3NAnA6VqtlGztpj4JWkS3XdB4HZoI4x0gJyFrni /EXCJuMOOIMjOwm9ntRx6ds4qKGcWcI1fl8RgKHTLRymI/vCH93OJqulPAPfFTtN BIxtQZEp1CTyHYBROOzjh2zz5Jit3EkVPtv+RQApMAXGj6IV68TCqpF3BvNa7Gp1 GI/BneOXEm/9YauUiUQSJ/NF5KOxr9hfFLdA/WXJi1ZYw0RMbuLzIp6OphLZKJoO WiAUd0Qh9CXqnz824OUieZrlRKE0HkhU8zIAZWqPQWx/RfCY/HLXZHtNipe5FLH+ p9i9ID6NbMPbaHmjbiGaDjg3vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQcdbe4 fODIm3g7UxA2pXn0NacZMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEU1NS83RDMyQTc0RUM2MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0 RXdFeDE0Z3BjTDhXTGREV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8wgIa64oaXGUxtFMrab399P/bjoVvN4i0b4wZbjn8Uo0Pe8dgS3jy U0yFIku5mQjBRH2C0kMdM1o67DL1wLAoT3sAtFjDNaOzNjh/+PLpP7z5IB+yXxZg FlDPTE+SxZbnX/OdJ7XCKksD8TZmIOj9KnjtUrZZa69sLBkafPg+c04m8QQYbb7n 6fxLFV/d6dV8RFG8525In5FAUB3kghoxWgzBdBoZ+vokgNoiaOfQZIUWKQXYMtUf 80ZFkitS4Zej+MeQ7VbQuD76mrs4Ts/A7hGJSJ/G7Mf3/VEmFxULHWRbHkJHO3+B 20z0Jm2iuKIzgHeev44wugCjvfS01DDc -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:25 2025 by rpki-client