$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: dURL9C9jRFpU+Z4E+8GKBLa2FRqGmEj0ZdcT4YBJNrE= Subject key identifier: 34:67:2A:54:67:E8:17:D8:8B:16:CC:B5:0B:CE:55:C9:04:A9:95:32 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 098B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0982 Signing time: Thu 18 Sep 2025 20:21:06 +0000 Manifest this update: Thu 18 Sep 2025 20:21:05 +0000 Manifest next update: Thu 25 Sep 2025 20:21:05 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: jHGj7oBlX1FxqfuOH0oB0W5dKeBbGM2q7jFK0UNv+tE=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Sep 18 20:21:05 2025 GMT Not After : Sep 25 20:21:05 2025 GMT Subject: CN=68cc69b1-bc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:e7:bb:ca:68:16:f2:37:5d:36:47:60:bd: 1e:e9:39:fc:9e:b1:b1:9d:05:df:12:a1:3d:d6:f0: a9:28:ef:42:be:a4:59:ef:bf:52:3e:24:57:cd:b0: f5:c1:6e:81:a8:94:63:4b:a3:d6:f8:fd:04:31:b7: 4a:eb:86:e2:6e:0f:1e:a0:9b:84:db:22:c9:09:5f: a5:8b:b2:4c:23:a7:5d:32:33:47:65:1a:59:c4:79: 85:84:4d:e0:18:b8:4c:1f:d1:97:6f:09:1a:0b:37: 1b:6b:3e:27:9c:7c:45:e1:eb:81:fb:53:ba:a0:e5: 57:5b:49:df:a5:3b:71:81:2a:8b:d5:49:81:75:2f: ae:ed:f7:c6:bf:19:20:24:f3:7b:7d:b9:9f:47:2a: ce:dc:ff:4c:10:c8:5c:14:2d:09:24:3e:69:44:ec: 19:3c:a4:19:3a:d6:73:b6:f9:f1:41:23:23:ff:d6: 19:ba:04:61:20:08:18:3a:ff:76:6b:3e:09:ce:43: 4e:38:7b:68:46:92:56:49:13:1a:de:4a:09:27:95: 37:24:49:6b:4d:eb:26:64:fb:27:03:1c:86:95:ed: 19:e6:93:52:de:08:76:45:a6:2c:59:71:6c:ca:73: 14:f9:f9:e5:9f:c9:8a:82:fd:cc:e4:27:a7:2c:7f: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:67:2A:54:67:E8:17:D8:8B:16:CC:B5:0B:CE:55:C9:04:A9:95:32 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:af:52:1b:48:29:f1:45:7a:a7:81:92:e5:aa:f0:02:ac:11: 98:f5:eb:3b:24:95:cc:8b:ad:b7:45:e1:47:e5:39:76:81:6b: 42:b4:10:df:20:9b:ef:bc:be:c1:5a:20:c9:32:45:8f:ab:76: 2a:c1:69:14:b5:42:23:4a:a0:2f:2f:c0:8b:17:20:ba:76:43: 76:63:40:7e:b0:47:13:ea:4b:a1:73:5e:f9:a3:9a:37:b1:a6: e8:25:00:fc:87:d4:01:1c:95:5c:e6:a3:cf:a0:c9:18:d3:d3: 0b:f0:25:6e:dd:a9:68:36:87:23:89:94:50:5f:59:61:40:56: 88:bd:b9:5d:40:1c:70:9f:d9:40:63:31:01:6a:a2:aa:7e:19: 58:bc:48:07:5b:f0:05:cc:6f:a6:ae:cd:e1:8b:b2:8f:74:75: 19:1b:a3:96:1b:65:bb:80:58:09:ee:a0:0c:21:34:96:36:59: 90:0e:ca:a5:f2:87:d2:82:e1:99:9d:e7:15:68:57:ae:38:b8: f0:ee:05:30:cf:08:ca:28:be:d4:f9:0c:b3:97:99:ad:57:b8: 86:b0:14:d5:93:e7:ef:e6:01:c3:94:10:f9:50:00:41:b1:4a: c0:17:4a:1c:8c:d2:08:b9:b9:0e:3a:4a:5d:99:d1:cc:52:e9: 9f:b1:9d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUwOTE4MjAyMTA1WhcNMjUwOTI1MjAyMTA1WjAYMRYwFAYD VQQDEw02OGNjNjliMS1iYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArejnu8poFvI3XTZHYL0e6Tn8nrGxnQXfEqE91vCpKO9CvqRZ779SPiRXzbD1 wW6BqJRjS6PW+P0EMbdK64bibg8eoJuE2yLJCV+li7JMI6ddMjNHZRpZxHmFhE3g GLhMH9GXbwkaCzcbaz4nnHxF4euB+1O6oOVXW0nfpTtxgSqL1UmBdS+u7ffGvxkg JPN7fbmfRyrO3P9MEMhcFC0JJD5pROwZPKQZOtZztvnxQSMj/9YZugRhIAgYOv92 az4JzkNOOHtoRpJWSRMa3koJJ5U3JElrTesmZPsnAxyGle0Z5pNS3gh2RaYsWXFs ynMU+fnln8mKgv3M5CenLH8IvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRnKlRn 6BfYixbMtQvOVckEqZUyMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXr1IbSCnxRXqngZLlqvACrBGY9es7JJXMi623ReFH5Tl2gWtCtBDf IJvvvL7BWiDJMkWPq3YqwWkUtUIjSqAvL8CLFyC6dkN2Y0B+sEcT6kuhc175o5o3 saboJQD8h9QBHJVc5qPPoMkY09ML8CVu3aloNocjiZRQX1lhQFaIvbldQBxwn9lA YzEBaqKqfhlYvEgHW/AFzG+mrs3hi7KPdHUZG6OWG2W7gFgJ7qAMITSWNlmQDsql 8ofSguGZnecVaFeuOLjw7gUwzwjKKL7U+Qyzl5mtV7iGsBTVk+fv5gHDlBD5UABB sUrAF0ocjNIIubkOOkpdmdHMUumfsZ0H -----END CERTIFICATE-----Generated at Fri Sep 19 07:12:54 2025 by rpki-client