$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: hMhtEn3KzJvPEH5v9Xfi/60+xa8bk3Rxdn07SA6mAHI= Subject key identifier: A1:0A:D0:49:3F:A0:C8:1F:4A:F9:23:EA:30:93:34:60:2E:49:E7:D3 Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 0975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 20BD Signing time: Thu 18 Sep 2025 16:44:10 +0000 Manifest this update: Thu 18 Sep 2025 16:44:10 +0000 Manifest next update: Thu 25 Sep 2025 16:44:10 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: xaB+FKzhHBIdS7FVFCHh4iExcQ79Lgx6TljNcHFBLM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: Sep 18 16:44:10 2025 GMT Not After : Sep 25 16:44:10 2025 GMT Subject: CN=68cc36da-5b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:bb:75:25:c8:c5:7f:9b:e7:fc:58:27:51: 05:75:b0:f0:cc:c0:06:ea:db:33:25:d8:3e:93:8b: 8a:60:e3:5a:54:67:de:44:1c:a4:b9:ae:e2:06:e1: 54:cf:ea:82:65:8f:b0:f5:5a:ff:23:44:20:4f:11: c9:d3:8d:71:c3:53:aa:09:7d:39:94:26:91:8c:ac: c6:95:0f:00:bb:c3:b7:02:a8:9e:71:97:28:25:0f: 96:97:cc:91:45:71:38:ab:72:07:01:ee:47:9c:ff: ec:a5:33:e0:b8:45:8a:25:8a:fb:58:7a:84:43:7e: e0:c7:c4:f2:c7:fa:6b:d4:50:81:f6:d2:06:99:c6: b8:11:ae:a7:04:74:2a:c4:14:57:a4:7e:71:54:23: 4b:86:53:83:9c:00:f1:be:b5:75:11:6e:0c:09:f5: c9:70:32:67:ae:a8:cb:16:80:b3:cb:5d:af:5e:a0: d7:e8:bd:33:cc:25:ab:06:8b:24:70:67:79:fd:6e: 44:12:83:c3:6a:93:14:0e:a6:b8:de:3d:64:36:2d: 65:6f:d0:96:56:a8:18:e6:1f:54:20:0d:f0:c0:49: 72:74:06:c9:1d:89:8d:af:88:9a:0e:7f:ba:a5:7c: 66:96:55:6b:c9:12:33:8c:83:05:f4:36:e1:c4:3a: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:D0:49:3F:A0:C8:1F:4A:F9:23:EA:30:93:34:60:2E:49:E7:D3 X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:58:2d:27:c4:c3:53:31:82:fc:2c:b8:5c:62:88:fb:7b:42: ca:79:31:16:34:7e:31:d1:87:3d:00:9e:ff:14:78:f5:26:48: d5:d8:c2:f1:6c:8d:87:08:b4:f0:a2:80:5d:73:9a:6a:4b:50: 6b:da:24:b8:e1:39:f1:81:9a:40:5c:d9:3a:65:ed:12:c9:68: 5a:f9:e5:74:fa:82:24:87:22:ac:d7:94:86:cd:82:d4:16:7e: 04:3c:9d:2b:86:99:81:00:68:2c:e3:d8:45:c7:c2:b0:e5:ab: 49:9c:01:ad:98:28:13:56:45:98:52:5a:68:a0:e3:88:d2:12: 80:50:88:ec:c1:33:80:a2:dd:1d:5b:cb:c7:80:00:8e:67:2a: 9e:e4:cf:8f:0f:88:02:e4:d3:ad:e4:ec:24:9c:ad:15:03:92: 8f:2a:c8:94:1b:28:cc:48:ab:aa:19:73:83:8f:89:05:31:df: 8e:eb:bf:af:26:67:27:32:9d:46:ed:03:0b:6a:06:83:cb:b1: 06:f9:25:a7:17:c7:31:67:a0:d8:d1:de:b8:64:70:c4:a8:21: 1e:f8:f2:97:1b:49:b5:cc:11:36:6c:27:71:1f:d4:f3:8f:38: 33:b2:0e:b4:93:83:b9:0e:f4:9c:ff:0b:dc:ad:2a:c5:df:48: 8a:a8:0c:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjUwOTE4MTY0NDEwWhcNMjUwOTI1MTY0NDEwWjAYMRYwFAYD VQQDEw02OGNjMzZkYS01YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2S7dSXIxX+b5/xYJ1EFdbDwzMAG6tszJdg+k4uKYONaVGfeRBykua7iBuFU z+qCZY+w9Vr/I0QgTxHJ041xw1OqCX05lCaRjKzGlQ8Au8O3AqiecZcoJQ+Wl8yR RXE4q3IHAe5HnP/spTPguEWKJYr7WHqEQ37gx8Tyx/pr1FCB9tIGmca4Ea6nBHQq xBRXpH5xVCNLhlODnADxvrV1EW4MCfXJcDJnrqjLFoCzy12vXqDX6L0zzCWrBosk cGd5/W5EEoPDapMUDqa43j1kNi1lb9CWVqgY5h9UIA3wwElydAbJHYmNr4iaDn+6 pXxmllVryRIzjIMF9DbhxDq0iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEK0Ek/ oMgfSvkj6jCTNGAuSefTMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAWC0nxMNTMYL8LLhcYoj7e0LKeTEWNH4x0Yc9AJ7/FHj1JkjV2MLx bI2HCLTwooBdc5pqS1Br2iS44TnxgZpAXNk6Ze0SyWha+eV0+oIkhyKs15SGzYLU Fn4EPJ0rhpmBAGgs49hFx8Kw5atJnAGtmCgTVkWYUlpooOOI0hKAUIjswTOAot0d W8vHgACOZyqe5M+PD4gC5NOt5OwknK0VA5KPKsiUGyjMSKuqGXODj4kFMd+O67+v JmcnMp1G7QMLagaDy7EG+SWnF8cxZ6DY0d64ZHDEqCEe+PKXG0m1zBE2bCdxH9Tz jzgzsg60k4O5DvSc/wvcrSrF30iKqAw2 -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:01 2025 by rpki-client