$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: qha2eeWd2H71WyapJRN74MMqamh5RBfUHbmAh1dW8Oc= Subject key identifier: 81:58:90:D6:39:D2:DE:4F:64:44:E7:C3:A0:CE:2B:ED:44:E5:00:F5 Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0A28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0A6B Signing time: Wed 06 Aug 2025 20:10:14 +0000 Manifest this update: Wed 06 Aug 2025 20:10:14 +0000 Manifest next update: Wed 13 Aug 2025 20:10:14 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: +ZAJjM168EGirvpj33wcBg1HGCJA8ZS98+pjX3EJi4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2600 (0xa28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Aug 6 20:10:14 2025 GMT Not After : Aug 13 20:10:14 2025 GMT Subject: CN=6893b6a6-dc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:84:43:d5:cf:ec:6f:f0:64:00:5f:f3:4e: 6f:39:2c:eb:8a:d8:21:fb:c6:d8:6e:c1:36:36:d7: b5:e0:9c:ad:1c:04:b5:12:77:02:85:dc:ae:5b:88: 22:da:89:87:9a:c2:21:82:14:26:2c:95:ae:f3:55: 38:c3:19:cf:11:fb:7f:cc:4c:34:ca:30:96:8d:83: 95:3c:af:20:fb:23:06:6b:dc:54:49:e2:26:cf:48: e4:1f:73:cf:fe:bf:f1:77:b4:48:f7:93:36:48:3a: 27:72:1a:d3:77:8d:44:01:e2:b6:7e:57:fb:a7:83: c9:7b:3c:e5:5a:a6:26:54:44:e5:60:19:de:9b:ff: bb:99:e3:66:48:ad:0b:dc:d2:16:a6:61:23:b6:01: f4:4b:dd:3f:93:f8:5c:a8:f4:49:cb:a9:ad:01:08: 78:16:74:cc:31:4d:91:f1:1f:c3:57:65:d1:21:3e: b2:5c:0c:b3:7b:01:f5:51:e9:01:30:a3:52:06:9e: 32:6d:27:56:21:a5:74:8f:12:3c:9d:df:33:af:68: f9:05:a2:c1:a1:ad:d7:4c:b1:81:7c:fa:f4:81:48: 89:5b:6e:e1:83:3b:a9:69:54:5d:f5:48:6b:a9:df: 51:df:f2:18:84:9d:6b:4b:96:ce:6f:fc:02:b8:d9: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:90:D6:39:D2:DE:4F:64:44:E7:C3:A0:CE:2B:ED:44:E5:00:F5 X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:29:de:47:3d:97:ba:ff:4f:7d:50:e9:0c:24:62:8e:1e:a0: 6e:71:75:ce:fa:b0:7a:91:1d:8b:e4:02:2b:5a:6c:2b:2f:0a: 59:20:71:e7:13:09:4e:d5:29:59:d2:1b:67:6c:78:9f:47:d0: 67:c6:c1:3e:25:c1:9c:7d:f0:77:e5:6c:8f:d4:24:42:35:c0: a9:4a:3f:17:ca:93:cf:c6:2f:81:e2:4e:21:b3:a8:b7:8d:3d: 35:72:7f:e6:c5:cc:63:41:43:f9:94:9c:b2:79:0f:96:dc:b9: 91:fb:35:81:ec:45:63:24:99:55:66:f2:99:da:41:4a:36:94: 81:ec:d1:e6:c9:93:6b:fa:f9:ab:07:f0:8f:28:a3:9f:6e:f6: c2:c9:e8:39:66:ae:9f:5d:46:3d:14:18:19:4d:8b:2f:30:db: 13:0b:a2:e3:9c:5b:0d:d5:e0:22:31:08:12:7c:c2:08:63:6d: 39:b8:ae:82:dc:ec:99:7e:43:99:c1:bb:ee:24:66:13:73:5e: 4e:a1:1f:0e:b2:30:b3:cf:87:e0:86:b7:ba:ad:d9:a9:35:20: 1e:a4:a0:41:2b:8d:91:36:d9:47:e7:d1:c9:c0:0b:71:9e:e4: 89:76:c5:eb:8a:2b:b5:4b:bc:df:ac:32:a8:27:89:72:c9:6a: 64:3f:be:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjUwODA2MjAxMDE0WhcNMjUwODEzMjAxMDE0WjAYMRYwFAYD VQQDEw02ODkzYjZhNi1kYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz16EQ9XP7G/wZABf805vOSzritgh+8bYbsE2Nte14JytHAS1EncChdyuW4gi 2omHmsIhghQmLJWu81U4wxnPEft/zEw0yjCWjYOVPK8g+yMGa9xUSeImz0jkH3PP /r/xd7RI95M2SDonchrTd41EAeK2flf7p4PJezzlWqYmVETlYBnem/+7meNmSK0L 3NIWpmEjtgH0S90/k/hcqPRJy6mtAQh4FnTMMU2R8R/DV2XRIT6yXAyzewH1UekB MKNSBp4ybSdWIaV0jxI8nd8zr2j5BaLBoa3XTLGBfPr0gUiJW27hgzupaVRd9Uhr qd9R3/IYhJ1rS5bOb/wCuNl+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFYkNY5 0t5PZETnw6DOK+1E5QD1MB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCKd5HPZe6/099UOkMJGKOHqBucXXO+rB6kR2L5AIrWmwrLwpZIHHn EwlO1SlZ0htnbHifR9BnxsE+JcGcffB35WyP1CRCNcCpSj8XypPPxi+B4k4hs6i3 jT01cn/mxcxjQUP5lJyyeQ+W3LmR+zWB7EVjJJlVZvKZ2kFKNpSB7NHmyZNr+vmr B/CPKKOfbvbCyeg5Zq6fXUY9FBgZTYsvMNsTC6LjnFsN1eAiMQgSfMIIY205uK6C 3OyZfkOZwbvuJGYTc15OoR8OsjCzz4fghre6rdmpNSAepKBBK42RNtlH59HJwAtx nuSJdsXriiu1S7zfrDKoJ4lyyWpkP76w -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:58 2025 by rpki-client