$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: zG+IQGAc1hCa1jCCdkYXEKFVCM+3ddxobVOYua7DLkk= Subject key identifier: 49:DF:C6:8F:9B:A9:53:41:0F:AF:76:5A:9E:15:E6:FC:5F:B5:D6:F2 Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 66 Signing time: Sat 09 Aug 2025 07:30:20 +0000 Manifest this update: Sat 09 Aug 2025 07:30:19 +0000 Manifest next update: Sat 16 Aug 2025 07:30:19 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: sxLcHl5Z0JAp1zBsFvjCnQeD9soojAd8/AtWpOzpyN4=) 2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Aug 9 07:30:19 2025 GMT Not After : Aug 16 07:30:19 2025 GMT Subject: CN=6896f90c-4070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:6c:3c:7b:8a:14:cc:79:47:f3:20:12:cf: ad:05:59:4c:e5:2b:15:fd:2a:16:0e:3a:fc:b4:7c: e5:26:17:64:32:30:d3:0d:42:6b:0f:53:97:3f:9d: fb:6d:85:c9:b8:17:73:5c:ee:32:ff:59:12:65:0c: a7:e9:48:ac:d6:35:72:54:54:2c:10:e2:f3:95:cd: 3e:c1:5f:32:3f:dd:df:60:a0:07:ec:d5:78:0d:30: 7b:19:bc:60:c4:58:fe:08:f9:c0:fc:4e:6a:c1:ce: 38:4a:58:62:5b:ca:ed:22:b6:a2:96:90:20:74:fa: 54:e9:11:eb:b7:c6:2e:8c:d7:d3:81:99:83:1f:5d: 8d:a3:63:d1:c6:3e:0f:63:4b:30:fd:d3:2c:4c:d6: 59:c1:ab:ae:cb:ba:ab:4b:e1:f6:fb:aa:06:77:3d: 86:ac:71:13:ce:a7:8e:5b:4f:82:c1:10:90:6e:fc: 89:60:90:37:5c:54:d6:b1:a5:83:01:42:42:5d:84: 22:de:3b:9c:e1:52:9d:4a:d9:6f:16:bd:b1:01:4d: 0c:65:40:ff:cd:dc:59:f8:89:9b:20:cd:72:ca:e8: de:8b:da:77:b0:63:db:4c:1c:16:cb:31:13:9e:b1: 4e:26:6a:d3:9a:61:a1:15:6b:22:8a:f6:0a:87:a2: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:C6:8F:9B:A9:53:41:0F:AF:76:5A:9E:15:E6:FC:5F:B5:D6:F2 X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:87:ea:d2:8e:55:85:2a:11:7b:9c:34:1a:77:ca:4e:39: a1:74:db:54:11:c4:04:6d:7f:86:63:79:20:76:2f:2a:56:3b: cf:ce:ee:4c:a2:5a:fc:2a:10:cd:8b:54:68:4a:ea:ae:d9:19: 9a:c9:fb:53:68:16:0a:e1:51:ef:97:ed:a1:4f:8c:28:a0:e2: 0e:f2:3c:35:c6:cb:ac:87:04:05:6c:15:48:8d:43:a6:21:31: 82:b1:7d:2d:1b:88:89:f4:30:92:ed:a0:ae:9e:b2:36:90:94: 89:12:55:05:5b:63:1c:c2:1d:ad:5e:7e:ab:c0:41:7c:ee:25: 89:12:58:40:b8:df:27:dd:48:e8:02:93:00:c7:02:98:91:7e: 42:99:0f:99:05:3d:c5:18:8d:57:74:f4:e9:56:74:8a:43:b9: c7:6a:93:00:3a:3f:ef:75:00:f3:21:23:0c:83:33:57:e0:e2: 3d:21:61:73:a8:7c:5e:40:09:63:f0:a5:be:13:d4:29:85:d1: 40:5b:08:46:05:ae:c2:1c:be:bb:25:b9:5e:9b:cb:e0:9a:73: 26:95:5c:28:89:b3:94:e1:d3:a9:df:35:88:8e:8a:ef:22:91: 29:82:c2:84:d4:67:45:a6:23:4d:4a:19:70:7b:c8:9b:18:4d: c0:80:9e:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEVDNTExMC8GA1UEBRMoM0E1RTEwMjlFNjVDNjM2ODEyMzJEQjY3RDgwNTNERDJG Njk0RTYxRjAeFw0yNTA4MDkwNzMwMTlaFw0yNTA4MTYwNzMwMTlaMBgxFjAUBgNV BAMTDTY4OTZmOTBjLTQwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3Gw8e4oUzHlH8yASz60FWUzlKxX9KhYOOvy0fOUmF2QyMNMNQmsPU5c/nftt hcm4F3Nc7jL/WRJlDKfpSKzWNXJUVCwQ4vOVzT7BXzI/3d9goAfs1XgNMHsZvGDE WP4I+cD8TmrBzjhKWGJbyu0itqKWkCB0+lTpEeu3xi6M19OBmYMfXY2jY9HGPg9j SzD90yxM1lnBq67LuqtL4fb7qgZ3PYascRPOp45bT4LBEJBu/IlgkDdcVNaxpYMB QkJdhCLeO5zhUp1K2W8WvbEBTQxlQP/N3Fn4iZsgzXLK6N6L2newY9tMHBbLMROe sU4matOaYaEVayKK9gqHokSbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSd/Gj5up U0EPr3ZanhXm/F+11vIwHwYDVR0jBBgwFoAUOl4QKeZcY2gSMttn2AU90vaU5h8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RUM1LzgyMzM1QTIwRDk1 QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVo OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2w0UUtlWmNZMmdTTXR0bjJBVTkwdmFVNWg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RUM1LzgyMzM1QTIwRDk1QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJn U010dG4yQVU5MHZhVTVoOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABE9h+rSjlWFKhF7nDQad8pOOaF021QRxARtf4ZjeSB2LypWO8/O7kyi WvwqEM2LVGhK6q7ZGZrJ+1NoFgrhUe+X7aFPjCig4g7yPDXGy6yHBAVsFUiNQ6Yh MYKxfS0biIn0MJLtoK6esjaQlIkSVQVbYxzCHa1efqvAQXzuJYkSWEC43yfdSOgC kwDHApiRfkKZD5kFPcUYjVd09OlWdIpDucdqkwA6P+91APMhIwyDM1fg4j0hYXOo fF5ACWPwpb4T1CmF0UBbCEYFrsIcvrsluV6by+CacyaVXCiJs5Th06nfNYiOiu8i kSmCwoTUZ0WmI01KGXB7yJsYTcCAnio= -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:35 2025 by rpki-client