$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: Y/Y9fiFA+otErKWTwibDzpZgUOLNOW7OcEImX8a+t2I= Subject key identifier: 45:7E:58:6C:71:8D:9B:0D:21:EB:82:8F:BB:CC:99:F2:66:3C:B5:DF Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 01B2 Signing time: Sat 09 Aug 2025 03:29:26 +0000 Manifest this update: Sat 09 Aug 2025 03:29:26 +0000 Manifest next update: Sat 16 Aug 2025 03:29:26 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: IQnDECs7UgWk1KWd9caPmfoadx8SIRthQ8grOF93XZU=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Aug 9 03:29:26 2025 GMT Not After : Aug 16 03:29:26 2025 GMT Subject: CN=6896c096-7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cd:97:33:74:8c:79:d1:5a:ba:8e:1a:9a:96: 1a:de:63:b9:e2:50:d8:ce:71:d8:d6:bb:b1:89:dc: 76:6e:65:d3:b3:37:0b:d7:b8:7c:1b:21:aa:0f:7f: 7c:e9:e5:44:3e:c4:b4:2b:f3:36:da:e7:ca:3e:e3: 18:55:f0:43:a5:6e:64:47:64:41:84:6a:bc:3c:cd: 88:e1:0f:2e:f6:8e:a7:9c:74:72:fd:c8:74:83:2c: 1b:94:56:62:f4:ec:4c:0e:ff:f4:6d:25:48:c6:bc: 27:31:a0:65:4b:e3:5c:7e:9a:35:38:00:6e:67:e7: 1d:f8:d6:1e:b1:d7:60:f6:28:d9:41:07:ab:d6:cd: a9:2a:4b:6d:13:37:c2:69:11:1b:19:a8:cf:a5:36: 7c:3f:36:57:dd:50:58:8d:48:1f:3e:94:c3:0e:c9: 58:19:83:be:90:c2:31:f9:11:09:33:f5:6a:07:79: a9:e3:c8:9b:c8:14:bd:57:d7:80:6d:b1:e1:d2:fa: 20:a9:31:e8:d7:eb:12:9f:70:d0:2c:dc:37:d7:41: 77:6d:22:b3:32:ea:a0:19:fb:f3:79:31:3e:10:49: 1a:e6:b9:b6:d3:25:55:85:a6:f6:8a:9b:e3:5d:ae: ac:48:84:87:27:24:2e:c0:c0:4e:a2:f4:a3:89:82: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:58:6C:71:8D:9B:0D:21:EB:82:8F:BB:CC:99:F2:66:3C:B5:DF X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a8:f3:88:5e:26:dd:82:07:39:cf:7a:dd:4e:cf:5f:b4:5a: 08:f0:a5:13:78:11:c9:de:75:35:4c:0e:e2:e9:bf:47:ef:b3: 23:e6:1b:2d:10:0e:ce:59:cc:56:d7:9b:21:c3:6a:c8:7c:63: 01:01:ae:74:d0:94:21:8c:b6:28:0d:3a:91:bc:f0:aa:8f:76: af:b0:42:46:e8:49:68:c2:e9:f2:cb:78:98:ea:29:84:ac:10: 5d:e5:eb:4d:aa:7d:21:ba:89:d1:23:45:f4:ed:49:8f:71:b2: 3d:ca:f8:9c:bc:3d:5e:03:23:e3:7d:bc:6b:e3:36:df:7d:56: 2e:f3:ec:f6:bd:41:38:ab:f2:61:95:59:bc:18:d0:44:d2:a4: ba:02:26:c3:f8:af:84:74:7b:0f:df:9a:25:69:1f:04:e7:29: 63:6f:aa:42:a7:80:24:84:ae:d8:76:21:fa:19:d9:01:17:28: 8c:3c:81:94:8f:30:3e:c7:93:bc:ef:70:64:13:69:60:d4:02: e9:af:74:db:58:4f:6b:5d:8a:63:0e:bb:a3:5a:6e:c1:ba:27: e3:eb:27:2c:73:03:f0:97:d2:ad:d1:4b:50:25:16:51:09:6c: 73:e7:55:85:1e:21:2e:c6:ad:1e:12:70:97:24:1d:03:e6:f0: 4e:5c:11:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUwODA5MDMyOTI2WhcNMjUwODE2MDMyOTI2WjAYMRYwFAYD VQQDEw02ODk2YzA5Ni03NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA782XM3SMedFauo4ampYa3mO54lDYznHY1ruxidx2bmXTszcL17h8GyGqD398 6eVEPsS0K/M22ufKPuMYVfBDpW5kR2RBhGq8PM2I4Q8u9o6nnHRy/ch0gywblFZi 9OxMDv/0bSVIxrwnMaBlS+Ncfpo1OABuZ+cd+NYesddg9ijZQQer1s2pKkttEzfC aREbGajPpTZ8PzZX3VBYjUgfPpTDDslYGYO+kMIx+REJM/VqB3mp48ibyBS9V9eA bbHh0vogqTHo1+sSn3DQLNw310F3bSKzMuqgGfvzeTE+EEka5rm20yVVhab2ipvj Xa6sSISHJyQuwMBOovSjiYIquwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV+WGxx jZsNIeuCj7vMmfJmPLXfMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqPOIXibdggc5z3rdTs9ftFoI8KUTeBHJ3nU1TA7i6b9H77Mj5hst EA7OWcxW15shw2rIfGMBAa500JQhjLYoDTqRvPCqj3avsEJG6Elowunyy3iY6imE rBBd5etNqn0huonRI0X07UmPcbI9yvicvD1eAyPjfbxr4zbffVYu8+z2vUE4q/Jh lVm8GNBE0qS6AibD+K+EdHsP35olaR8E5yljb6pCp4AkhK7YdiH6GdkBFyiMPIGU jzA+x5O873BkE2lg1ALpr3TbWE9rXYpjDrujWm7Buifj6ycscwPwl9Kt0UtQJRZR CWxz51WFHiEuxq0eEnCXJB0D5vBOXBHK -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:40 2025 by rpki-client