$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: r6HoLjO9FAuqLNm+qDBAnZGbBdn4a+7LYqf9PbpJ5Go= Subject key identifier: 48:EA:45:30:BB:CC:1F:16:6F:D1:FC:C2:54:F7:61:B5:BB:12:EA:52 Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 1D Signing time: Wed 03 Sep 2025 08:35:58 +0000 Manifest this update: Wed 03 Sep 2025 08:35:58 +0000 Manifest next update: Wed 10 Sep 2025 08:35:58 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: 0vVRSfLuhQvie4hxgqe22OWoLGQEerG9qhCQrBG78VM=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Sep 3 08:35:58 2025 GMT Not After : Sep 10 08:35:58 2025 GMT Subject: CN=68b7fdee-f78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:fd:b7:58:42:c6:b0:5e:e4:74:74:b8:e1: 63:9e:5c:6f:86:9b:42:a4:51:70:ba:1d:62:c1:7d: ee:75:28:ee:0a:21:9a:72:71:9b:2e:d3:5d:fe:4e: 98:a3:58:8f:02:62:a1:d3:6d:e0:31:d7:93:87:bb: 12:83:a9:9a:d0:f8:22:81:a6:8e:3a:5b:1a:ca:1a: 76:87:29:ad:21:fb:49:12:e8:59:15:38:f0:a6:54: 8a:84:48:bd:ce:3d:23:c2:19:87:aa:d9:34:98:47: b1:85:4c:90:90:1f:bc:54:74:d1:0c:1f:d2:dc:6e: bd:40:31:55:fd:10:32:ab:26:d1:1e:4d:2f:34:d5: 5d:c2:22:c8:9a:85:3a:76:8b:9c:6e:3a:47:cd:36: c5:7b:8f:91:0e:c6:cb:ca:42:41:71:64:08:05:55: 37:ab:cf:a9:09:4c:db:c5:27:82:db:4a:7c:8d:49: e2:a9:ef:0c:44:fc:58:70:3f:01:1e:16:96:00:05: b7:ea:ec:78:7c:21:0b:ed:3c:53:de:a9:6e:9b:98: 75:19:d3:29:93:7c:6a:14:3f:bc:e6:6e:41:cc:01: d9:20:b3:c4:d3:78:79:1c:d4:04:73:32:c7:82:0c: 8d:5e:6a:98:af:5d:69:1c:87:6c:32:59:56:74:23: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:45:30:BB:CC:1F:16:6F:D1:FC:C2:54:F7:61:B5:BB:12:EA:52 X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:99:d1:ce:81:5c:2e:4b:46:fe:5c:5b:21:fc:26:cb:d1:50: 7b:2d:b5:bf:5b:a3:f0:b5:93:fa:a8:b2:2d:18:06:53:66:ec: b5:bb:3d:10:55:fb:d5:24:f8:4a:01:bb:63:14:4e:3d:f8:17: 05:50:3d:f6:f0:fe:2f:95:3e:cf:2a:00:49:79:1c:28:0e:8e: f9:48:cc:33:d3:52:da:43:a6:50:06:38:aa:90:c4:9d:08:25: d4:5c:c7:cf:99:a0:1e:4b:20:bc:c5:23:5d:15:81:4d:8a:a7: 3d:44:80:f5:d5:c2:52:eb:da:d1:d0:97:c3:8a:83:ff:2b:90: f9:df:5d:d3:0b:ca:5a:6b:4b:4c:ac:26:77:d7:7f:55:d2:cb: 66:65:99:27:2c:84:c6:d4:d8:38:68:9e:be:c2:4a:8d:53:00: c0:b2:65:9d:16:35:02:f4:f5:9c:7d:0e:b6:eb:b3:cd:c0:34: 35:f6:90:1a:39:b7:d1:d2:a0:f9:a9:d6:db:a0:c5:65:78:48: 68:59:cb:8f:72:17:d3:db:ef:3c:dd:5d:05:ca:86:c7:67:d6: e2:73:24:86:44:0e:e2:79:72:7e:5e:2b:53:1e:eb:8c:2a:69: d4:fd:a4:b5:7d:87:8b:c6:90:99:51:03:2c:b6:83:38:7f:4a: d9:04:6f:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTA5MDMwODM1NThaFw0yNTA5MTAwODM1NThaMBgxFjAUBgNV BAMTDTY4YjdmZGVlLWY3OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM6P23WELGsF7kdHS44WOeXG+Gm0KkUXC6HWLBfe51KO4KIZpycZsu013+Tpij WI8CYqHTbeAx15OHuxKDqZrQ+CKBpo46WxrKGnaHKa0h+0kS6FkVOPCmVIqESL3O PSPCGYeq2TSYR7GFTJCQH7xUdNEMH9Lcbr1AMVX9EDKrJtEeTS801V3CIsiahTp2 i5xuOkfNNsV7j5EOxsvKQkFxZAgFVTerz6kJTNvFJ4LbSnyNSeKp7wxE/FhwPwEe FpYABbfq7Hh8IQvtPFPeqW6bmHUZ0ymTfGoUP7zmbkHMAdkgs8TTeHkc1ARzMseC DI1eapivXWkch2wyWVZ0IzSdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSOpFMLvM HxZv0fzCVPdhtbsS6lIwHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGZ0c6BXC5LRv5cWyH8JsvRUHsttb9bo/C1k/qosi0YBlNm7LW7PRBV +9Uk+EoBu2MUTj34FwVQPfbw/i+VPs8qAEl5HCgOjvlIzDPTUtpDplAGOKqQxJ0I JdRcx8+ZoB5LILzFI10VgU2Kpz1EgPXVwlLr2tHQl8OKg/8rkPnfXdMLylprS0ys JnfXf1XSy2ZlmScshMbU2Dhonr7CSo1TAMCyZZ0WNQL09Zx9Drbrs83ANDX2kBo5 t9HSoPmp1tugxWV4SGhZy49yF9Pb7zzdXQXKhsdn1uJzJIZEDuJ5cn5eK1Me64wq adT9pLV9h4vGkJlRAyy2gzh/StkEb9s= -----END CERTIFICATE-----Generated at Thu Sep 4 13:59:04 2025 by rpki-client