$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: LYEFS0G4sU2eyTHznIjeANmxgP05qYGo/Hq1RMV3Om8= Subject key identifier: 1A:B8:37:33:40:DD:DA:3C:91:42:D0:53:80:9A:83:AF:D6:B3:2B:31 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C76 Signing time: Thu 18 Sep 2025 18:43:51 +0000 Manifest this update: Thu 18 Sep 2025 18:43:51 +0000 Manifest next update: Thu 25 Sep 2025 18:43:51 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: W4pxvNu8bo0oEZR/kcvzQralYg5TYqqrspqNpVgQ2k4=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Sep 18 18:43:51 2025 GMT Not After : Sep 25 18:43:51 2025 GMT Subject: CN=68cc52e7-4650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:97:2d:ef:de:74:c1:1e:1f:5c:69:74:54: 99:83:b8:a4:32:9f:6a:ca:06:e2:1e:8e:a0:64:31: 97:cc:48:e1:77:81:c5:52:a5:5e:4e:46:34:1c:3a: d8:34:63:c7:65:9a:e6:14:9f:25:6a:4f:59:fc:5c: 78:0c:26:99:89:1c:9a:95:88:5e:08:07:e1:71:0a: 8c:52:a3:f3:51:64:c6:3b:7f:d8:d7:c5:08:44:9a: 40:20:73:4c:b1:7a:cf:a3:b3:b2:6e:0e:65:b1:1b: 29:a4:d8:f5:9d:e6:9b:05:ae:46:80:3a:2b:41:cc: 52:3b:d6:1e:1c:19:04:f9:dd:f5:47:b1:2f:fd:0d: 9d:75:91:86:13:03:09:88:38:bb:72:16:80:5f:4f: 7b:74:78:c0:45:b8:23:1b:9f:28:6f:19:bc:61:4f: b5:d8:ba:85:55:c9:96:e2:77:90:68:f9:b2:1a:82: 90:f8:e1:b3:22:90:b9:38:d0:76:97:e4:f6:6d:96: 2c:f1:ae:ee:44:5b:db:18:77:a4:a0:65:12:2e:20: 96:37:55:61:b7:99:d7:8f:2b:55:71:d0:83:d7:7b: f8:f0:c6:fc:71:9e:72:d3:47:15:15:c0:45:a5:f7: b3:3f:bc:77:c2:61:6a:79:f9:f7:c5:a2:af:a0:24: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:37:33:40:DD:DA:3C:91:42:D0:53:80:9A:83:AF:D6:B3:2B:31 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ed:4c:19:6f:4a:d1:26:5d:34:f5:06:1e:fa:f7:b8:ee:67: 5d:df:0e:7e:ca:5d:3e:42:63:f7:67:ec:f1:51:89:34:cf:9a: 3e:60:8d:31:5e:b4:02:94:0e:e3:ac:51:ce:cb:6e:d5:ed:73: 23:6d:45:a9:b5:0e:5b:96:d5:45:3b:f9:f8:cd:d7:0d:0e:3e: 70:3d:a7:e2:58:27:e7:0c:1a:c9:85:28:8c:76:bc:5d:db:9f: d7:71:a3:bc:e8:97:ef:65:2a:8e:78:25:d9:15:ee:67:fa:b2: 28:d8:d9:20:45:d2:d4:31:0e:3e:98:04:7d:e7:4d:4d:bb:f5: fd:07:61:b7:10:8b:2a:42:7b:18:1d:4d:d7:40:ea:95:af:bb: 88:45:0d:80:9c:78:64:9e:1b:21:81:c9:25:30:7d:1c:c3:b4: 21:82:c6:d8:ab:2c:73:83:87:75:af:b5:86:21:8d:fa:57:38: 9d:0c:c7:af:ad:6b:ea:73:33:ae:a3:b6:1b:09:b3:0c:ca:8e: df:99:ed:15:f0:ca:97:17:00:e8:24:1e:02:84:ce:b7:a2:bd: 14:ea:65:7c:a1:b6:a9:8f:c8:af:46:24:8d:a0:6e:79:c9:36: 27:89:b8:46:78:a3:3a:e7:01:c0:75:2e:23:a4:d4:65:51:fe: 49:ac:52:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUwOTE4MTg0MzUxWhcNMjUwOTI1MTg0MzUxWjAYMRYwFAYD VQQDEw02OGNjNTJlNy00NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf6XLe/edMEeH1xpdFSZg7ikMp9qygbiHo6gZDGXzEjhd4HFUqVeTkY0HDrY NGPHZZrmFJ8lak9Z/Fx4DCaZiRyalYheCAfhcQqMUqPzUWTGO3/Y18UIRJpAIHNM sXrPo7Oybg5lsRsppNj1neabBa5GgDorQcxSO9YeHBkE+d31R7Ev/Q2ddZGGEwMJ iDi7chaAX097dHjARbgjG58obxm8YU+12LqFVcmW4neQaPmyGoKQ+OGzIpC5ONB2 l+T2bZYs8a7uRFvbGHekoGUSLiCWN1Vht5nXjytVcdCD13v48Mb8cZ5y00cVFcBF pfezP7x3wmFqefn3xaKvoCRU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq4NzNA 3do8kULQU4Cag6/WsysxMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm7UwZb0rRJl009QYe+ve47mdd3w5+yl0+QmP3Z+zxUYk0z5o+YI0x XrQClA7jrFHOy27V7XMjbUWptQ5bltVFO/n4zdcNDj5wPafiWCfnDBrJhSiMdrxd 25/XcaO86JfvZSqOeCXZFe5n+rIo2NkgRdLUMQ4+mAR9501Nu/X9B2G3EIsqQnsY HU3XQOqVr7uIRQ2AnHhknhshgcklMH0cw7QhgsbYqyxzg4d1r7WGIY36VzidDMev rWvqczOuo7YbCbMMyo7fme0V8MqXFwDoJB4ChM63or0U6mV8obapj8ivRiSNoG55 yTYnibhGeKM65wHAdS4jpNRlUf5JrFI2 -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:29 2025 by rpki-client