$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: pf9pCvI5FKOjvr9r20kuBIoiJDB8ig/P4xyLPyUi0q0= Subject key identifier: 53:FD:2D:7D:1B:12:E4:76:9C:29:A1:56:C8:B9:BC:68:B8:8F:F0:0C Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 34C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 34C5 Signing time: Thu 18 Sep 2025 14:32:05 +0000 Manifest this update: Thu 18 Sep 2025 14:32:05 +0000 Manifest next update: Thu 25 Sep 2025 14:32:05 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: UlYqc/K00AdUYYz8V73+p4CpTVEOOoToiSa3T2dx+w4=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Sep 18 14:32:05 2025 GMT Not After : Sep 25 14:32:05 2025 GMT Subject: CN=68cc17e5-7865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a1:c7:f8:04:8e:70:91:7c:a4:e7:51:6f:eb: 45:63:0b:89:48:da:52:0e:0b:97:25:66:f7:ed:82: 7a:e2:a2:c3:74:12:1a:bc:39:09:8e:e3:a4:7c:49: d1:5f:73:56:27:30:b7:5b:36:f8:50:85:dd:86:e4: 99:90:a7:87:dd:64:f0:0a:94:37:67:f7:0e:25:a1: 7c:fb:ba:2a:a6:ce:a3:fa:83:92:41:94:e5:4c:39: fa:48:66:00:6b:c0:f2:a7:42:63:8a:67:a2:65:0b: b2:60:a1:c0:39:0f:47:df:2d:b4:20:85:e8:72:12: fd:97:e0:5c:a3:25:91:47:d2:65:0e:43:9d:0e:4d: fd:fe:de:10:34:cf:b4:9e:e0:52:74:65:13:52:b3: 1c:e5:36:ae:12:e9:be:88:89:a9:18:ba:ef:81:2d: ba:75:4b:b5:3c:3c:f0:13:4f:f5:03:ff:7f:13:2d: dd:20:0b:d1:4f:93:d5:d1:02:40:bc:3b:f4:76:e8: 9c:b3:22:30:eb:f5:75:bd:9a:45:39:2c:9e:ff:82: 85:c1:58:c2:97:0d:9b:3f:45:7e:a6:c3:f6:47:cb: 4c:39:62:b9:90:03:56:77:8f:61:f8:34:d3:16:b4: 1c:fc:d3:fb:c2:85:af:8f:e2:df:13:13:49:ba:46: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FD:2D:7D:1B:12:E4:76:9C:29:A1:56:C8:B9:BC:68:B8:8F:F0:0C X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:8f:dc:16:46:67:cb:c0:13:6b:ea:5c:e8:fb:bc:de:13:f3: e9:7e:94:ee:63:a5:28:64:40:5a:42:fb:c9:16:37:de:b3:1b: f7:75:72:a0:dc:f5:aa:4a:8f:b7:0c:8b:ff:aa:a4:11:db:9c: 56:fc:c3:3f:76:6d:09:22:a1:e4:b1:61:2e:f1:b2:1d:5d:ab: 1e:dc:47:29:b2:84:9a:3f:c0:5c:1c:66:5a:59:06:6c:b8:c3: a1:76:9a:8e:3f:55:21:c8:12:c5:9e:94:a0:8d:48:7f:9c:e2: 80:e1:a0:41:cb:43:31:c1:41:30:1d:46:ca:51:93:51:c4:fe: 2a:01:11:42:ea:9d:1a:ac:ca:46:93:e1:08:8f:76:5d:83:93: 6c:1f:4b:ba:25:f0:dc:eb:14:a9:f3:e6:20:99:2f:97:0f:2d: 5a:55:58:e2:d4:c7:7f:15:63:72:22:83:a9:61:9a:e5:29:72: 2c:71:22:0b:96:ac:d2:e0:28:63:a3:db:fe:5e:54:2c:f7:86: 30:fa:00:39:44:14:26:c4:68:57:3e:b5:66:2a:17:e6:1a:4e: e9:aa:8b:d0:e8:4c:7b:3d:7a:b0:2d:12:c1:61:f1:5c:19:65: 97:8d:cf:02:c4:2c:d3:ec:dd:40:db:63:d3:c6:c1:06:44:cc: bb:7d:ab:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUwOTE4MTQzMjA1WhcNMjUwOTI1MTQzMjA1WjAYMRYwFAYD VQQDEw02OGNjMTdlNS03ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qHH+ASOcJF8pOdRb+tFYwuJSNpSDguXJWb37YJ64qLDdBIavDkJjuOkfEnR X3NWJzC3Wzb4UIXdhuSZkKeH3WTwCpQ3Z/cOJaF8+7oqps6j+oOSQZTlTDn6SGYA a8Dyp0JjimeiZQuyYKHAOQ9H3y20IIXochL9l+BcoyWRR9JlDkOdDk39/t4QNM+0 nuBSdGUTUrMc5TauEum+iImpGLrvgS26dUu1PDzwE0/1A/9/Ey3dIAvRT5PV0QJA vDv0duicsyIw6/V1vZpFOSye/4KFwVjClw2bP0V+psP2R8tMOWK5kANWd49h+DTT FrQc/NP7woWvj+LfExNJukZqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP9LX0b EuR2nCmhVsi5vGi4j/AMMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGj9wWRmfLwBNr6lzo+7zeE/PpfpTuY6UoZEBaQvvJFjfesxv3dXKg 3PWqSo+3DIv/qqQR25xW/MM/dm0JIqHksWEu8bIdXase3EcpsoSaP8BcHGZaWQZs uMOhdpqOP1UhyBLFnpSgjUh/nOKA4aBBy0MxwUEwHUbKUZNRxP4qARFC6p0arMpG k+EIj3Zdg5NsH0u6JfDc6xSp8+YgmS+XDy1aVVji1Md/FWNyIoOpYZrlKXIscSIL lqzS4Chjo9v+XlQs94Yw+gA5RBQmxGhXPrVmKhfmGk7pqovQ6Ex7PXqwLRLBYfFc GWWXjc8CxCzT7N1A22PTxsEGRMy7favq -----END CERTIFICATE-----Generated at Fri Sep 19 03:30:33 2025 by rpki-client