$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: LnBuvIKgGai5iD+IK2AZ6u4ONPHX09Y1YWqxFTTkc3o= Subject key identifier: 87:C4:74:45:9F:1D:7A:21:4A:9A:94:A2:45:8B:89:92:6B:1E:E2:B5 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0782 Signing time: Sun 10 Aug 2025 21:34:13 +0000 Manifest this update: Sun 10 Aug 2025 21:34:13 +0000 Manifest next update: Sun 17 Aug 2025 21:34:13 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: qcASU+hVtJts3U3aBvmFryZ9xJj1DzofgsRhirLu5xs=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Aug 10 21:34:13 2025 GMT Not After : Aug 17 21:34:13 2025 GMT Subject: CN=68991055-fe3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:a9:7b:94:18:ad:53:38:f8:24:02:29:14: 8c:6a:13:b3:c0:4b:c2:8b:35:44:4d:09:56:18:70: a7:8f:03:b1:10:15:64:fa:d9:af:46:29:2b:9e:f4: 7c:0b:53:4b:e5:93:4e:d6:e5:cf:f8:d1:3d:f3:90: 36:2b:5b:93:5c:30:0c:38:2d:d2:8e:eb:63:07:05: 2f:bc:75:01:5a:ef:96:c7:05:60:23:42:22:f3:2f: 50:88:18:b5:b4:15:72:a6:5d:a1:0c:23:82:2b:83: de:fe:cc:54:70:86:50:69:7f:1d:54:62:2a:ac:82: 18:76:92:59:88:07:ab:8c:e8:b1:1d:9e:1e:a2:5c: dc:a2:78:0a:0a:a8:ed:20:a0:c2:2f:59:2b:9d:6f: 71:2b:20:4c:2d:4b:6e:d3:c7:1e:d8:c7:82:bb:08: b4:19:55:b7:12:0b:42:69:1c:fb:48:31:66:8b:f9: fd:a6:80:08:b3:36:94:b9:c1:b9:94:8f:7c:c1:30: d8:a8:6b:db:28:f7:66:9e:7c:ea:65:87:3e:69:83: 03:5d:3e:f2:b4:c7:7d:e2:a9:04:2a:71:31:c1:dd: 20:39:da:72:70:50:5e:75:90:78:b9:e1:33:55:4a: 58:d1:8f:e2:86:2d:cf:ef:3e:fc:ca:8a:37:bb:ac: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C4:74:45:9F:1D:7A:21:4A:9A:94:A2:45:8B:89:92:6B:1E:E2:B5 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:7b:0b:f8:01:f9:96:7d:cb:35:c0:43:63:55:68:af:1f: 83:7a:0b:4f:88:4c:94:8a:14:52:9b:f0:0e:c3:04:c5:12:93: bb:36:31:8a:21:aa:d4:9c:f0:2b:b0:a6:e2:7b:04:f9:ac:ea: b0:c9:f4:43:27:ab:f1:1f:54:c4:bc:53:3f:77:9b:ae:c7:2f: a2:fa:ed:88:40:a6:51:7c:3b:7c:8c:62:36:d7:9e:73:85:3d: de:11:cf:ac:a0:b3:21:c1:90:27:a7:83:54:d0:cb:df:d7:8f: 52:6c:2e:d1:34:c8:ed:48:e8:9c:fe:35:98:1a:04:10:0b:a2: be:ad:9b:1f:00:19:1f:0a:b2:dc:61:12:90:d3:82:03:6d:e1: 06:a0:78:1b:18:a7:f5:c7:32:d0:a0:1c:4e:a9:6d:98:fd:db: f2:ed:44:1f:f3:70:08:d9:37:7e:d1:5d:2d:51:29:c9:03:1d: 5c:ba:4a:1f:64:c2:10:de:34:65:61:78:97:4c:09:dc:c3:73: b3:c7:50:e2:5a:06:13:ca:dc:d2:cb:44:4d:48:39:0d:5e:f0: 00:db:21:2c:12:ae:ea:0a:06:8a:81:66:a3:42:e2:e8:f5:4e: 32:5a:32:2a:32:63:1a:56:15:a7:ba:ee:d1:09:0b:a8:a2:34: a9:7b:68:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwODEwMjEzNDEzWhcNMjUwODE3MjEzNDEzWjAYMRYwFAYD VQQDEw02ODk5MTA1NS1mZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jape5QYrVM4+CQCKRSMahOzwEvCizVETQlWGHCnjwOxEBVk+tmvRikrnvR8 C1NL5ZNO1uXP+NE985A2K1uTXDAMOC3SjutjBwUvvHUBWu+WxwVgI0Ii8y9QiBi1 tBVypl2hDCOCK4Pe/sxUcIZQaX8dVGIqrIIYdpJZiAerjOixHZ4eolzcongKCqjt IKDCL1krnW9xKyBMLUtu08ce2MeCuwi0GVW3EgtCaRz7SDFmi/n9poAIszaUucG5 lI98wTDYqGvbKPdmnnzqZYc+aYMDXT7ytMd94qkEKnExwd0gOdpycFBedZB4ueEz VUpY0Y/ihi3P7z78yoo3u6xkWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfEdEWf HXohSpqUokWLiZJrHuK1MB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFi3sL+AH5ln3LNcBDY1Vorx+DegtPiEyUihRSm/AOwwTFEpO7NjGK IarUnPArsKbiewT5rOqwyfRDJ6vxH1TEvFM/d5uuxy+i+u2IQKZRfDt8jGI2155z hT3eEc+soLMhwZAnp4NU0Mvf149SbC7RNMjtSOic/jWYGgQQC6K+rZsfABkfCrLc YRKQ04IDbeEGoHgbGKf1xzLQoBxOqW2Y/dvy7UQf83AI2Td+0V0tUSnJAx1cukof ZMIQ3jRlYXiXTAncw3Ozx1DiWgYTytzSy0RNSDkNXvAA2yEsEq7qCgaKgWajQuLo 9U4yWjIqMmMaVhWnuu7RCQuoojSpe2hC -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:59 2025 by rpki-client