$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: Kf8HoxzcmSH2FmxPY+L29luNNDyTCDO7JusciGl1NdY= Subject key identifier: 43:7D:29:19:54:F0:5F:93:86:05:50:B8:03:2C:37:F8:A6:37:E0:EE Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D68 Signing time: Mon 08 Sep 2025 16:07:51 +0000 Manifest this update: Mon 08 Sep 2025 16:07:51 +0000 Manifest next update: Mon 15 Sep 2025 16:07:51 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: TTLrv4xFApdkCe3ni2Z7jJgjnjHVL1FoOG3YbVWOEG4=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7543 (0x1d77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Sep 8 16:07:51 2025 GMT Not After : Sep 15 16:07:51 2025 GMT Subject: CN=68beff57-9d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:72:90:3f:83:c4:18:24:21:9b:21:92:0b: 15:c0:9d:e4:72:fd:b5:e5:25:b6:b0:ea:06:35:4d: 3d:05:30:37:cc:2a:1c:a3:08:c8:83:6f:70:0f:a7: 71:2e:e4:bb:23:5a:0f:c5:a9:cd:9f:65:d8:ef:3d: 50:f5:7f:ea:5c:25:4d:a9:05:46:91:c1:25:5f:0e: 79:91:0f:78:61:b2:16:1b:61:c7:ca:d4:13:dd:6d: a4:95:c1:e1:6c:b0:29:96:76:1f:40:cc:11:6b:89: 2e:a1:19:05:e5:40:d4:74:90:6d:56:cc:e9:58:1a: d1:59:a4:2a:67:a7:53:d1:1c:47:de:2c:e4:60:b9: da:d9:ed:3d:b2:90:5a:2d:3b:0b:b0:94:c3:12:5d: 85:78:00:09:e4:30:c1:f3:0c:57:7b:c3:aa:b8:ec: 86:4e:78:b0:26:cf:5e:aa:c7:7a:c9:89:78:9c:3d: 19:84:b2:a4:4f:1a:cd:10:06:72:bd:32:f7:84:53: fc:1f:19:52:19:cc:d1:de:43:ad:64:fc:1a:e3:13: 67:75:a2:f2:01:01:05:1d:bb:c0:e9:33:7d:39:d8: 5e:9e:e0:7b:ed:da:45:3d:8e:3b:db:e6:19:66:3d: 40:9d:a7:65:0f:f7:1a:17:d2:5e:c4:0d:f3:17:89: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7D:29:19:54:F0:5F:93:86:05:50:B8:03:2C:37:F8:A6:37:E0:EE X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1b:83:79:58:c3:75:24:64:a0:85:92:a7:a8:96:57:4b:ed: 05:f3:68:79:7f:e0:a8:25:d5:7c:40:71:58:a7:69:6e:ad:e2: 02:53:9b:10:01:29:61:62:2e:e2:73:21:c2:9d:80:83:29:22: 1f:77:22:1a:96:cc:56:b5:73:e4:0a:74:45:10:aa:57:77:5e: 78:2b:53:f0:b9:4b:8e:3b:07:97:e1:82:a7:7f:33:92:ae:a1: 1c:68:39:fb:80:bd:d4:69:cd:6d:6b:5c:36:c0:9e:f8:3a:a7: 72:64:a5:a7:85:99:ab:8a:a9:68:9f:9d:b9:0b:a6:2a:56:3e: 47:52:bd:76:c2:73:d0:0c:ab:9a:78:44:a7:76:65:46:25:20: b4:65:ca:0d:b7:a2:a0:ed:31:17:ce:c6:9c:92:9b:e4:6e:46: d4:45:ca:81:10:86:70:ab:e4:57:57:f7:82:12:2e:75:0c:b8: 23:d3:40:26:de:be:43:92:f6:bb:4f:8e:42:a3:08:21:5a:6e: 9d:c5:38:2c:38:e0:a3:42:58:e9:9d:25:f5:3f:a5:07:2f:f0: 60:8b:a1:32:9e:5e:c5:4a:01:6f:ea:ab:93:3d:f1:f4:8c:aa: ec:ce:b1:a9:55:2c:89:b4:6e:96:37:7a:b3:1b:4e:21:7b:50: 4f:4f:b0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwOTA4MTYwNzUxWhcNMjUwOTE1MTYwNzUxWjAYMRYwFAYD VQQDEw02OGJlZmY1Ny05ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscZykD+DxBgkIZshkgsVwJ3kcv215SW2sOoGNU09BTA3zCocowjIg29wD6dx LuS7I1oPxanNn2XY7z1Q9X/qXCVNqQVGkcElXw55kQ94YbIWG2HHytQT3W2klcHh bLAplnYfQMwRa4kuoRkF5UDUdJBtVszpWBrRWaQqZ6dT0RxH3izkYLna2e09spBa LTsLsJTDEl2FeAAJ5DDB8wxXe8OquOyGTniwJs9eqsd6yYl4nD0ZhLKkTxrNEAZy vTL3hFP8HxlSGczR3kOtZPwa4xNndaLyAQEFHbvA6TN9OdhenuB77dpFPY472+YZ Zj1AnadlD/caF9JexA3zF4mSTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN9KRlU 8F+ThgVQuAMsN/imN+DuMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfG4N5WMN1JGSghZKnqJZXS+0F82h5f+CoJdV8QHFYp2lureICU5sQ ASlhYi7icyHCnYCDKSIfdyIalsxWtXPkCnRFEKpXd154K1PwuUuOOweX4YKnfzOS rqEcaDn7gL3Uac1ta1w2wJ74OqdyZKWnhZmriqlon525C6YqVj5HUr12wnPQDKua eESndmVGJSC0ZcoNt6Kg7TEXzsackpvkbkbURcqBEIZwq+RXV/eCEi51DLgj00Am 3r5Dkva7T45CowghWm6dxTgsOOCjQljpnSX1P6UHL/Bgi6Eynl7FSgFv6quTPfH0 jKrszrGpVSyJtG6WN3qzG04he1BPT7DF -----END CERTIFICATE-----Generated at Tue Sep 9 19:26:18 2025 by rpki-client