$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: WZzPs1OxS2penu2o2O08MQk0buAfw7Ki2R54QMbE36k= Subject key identifier: 8F:EA:8B:10:44:E2:D5:3C:11:F2:F1:95:5F:29:DE:45:5A:A5:02:F7 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01CC Signing time: Tue 09 Sep 2025 02:57:55 +0000 Manifest this update: Tue 09 Sep 2025 02:57:55 +0000 Manifest next update: Tue 16 Sep 2025 02:57:55 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: Ck+x2d2brIgsUzuPul3eAJwcZ4l6P7p1JH3bLrpNOVc=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Sep 9 02:57:55 2025 GMT Not After : Sep 16 02:57:55 2025 GMT Subject: CN=68bf97b3-7cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:b3:07:9f:7c:9b:5d:8f:cd:d8:7e:88:a3: e8:31:03:c1:8c:b2:6f:69:ac:df:34:63:2e:08:33: d2:f7:7c:01:63:6b:74:58:a8:e3:ce:88:18:6f:44: 11:fc:c6:ae:87:57:9a:d9:1b:bc:46:8d:1b:41:36: 46:3c:c8:6d:3e:49:6d:bd:74:be:83:41:d9:14:a0: 5b:1a:ad:c4:22:f5:28:9f:38:28:56:b1:f4:0d:70: 25:d3:82:00:ac:44:45:3c:b7:84:12:05:ba:a4:2e: 7d:ba:95:33:05:e2:06:ed:87:1a:d0:07:51:05:92: cf:e9:be:fb:a1:d2:b4:64:cb:45:31:c9:f3:71:70: 09:21:29:78:53:13:9e:c1:3a:e8:66:d0:e4:64:a6: 3b:8a:03:c9:f7:7e:5f:12:6a:3b:bb:dd:e5:b7:5b: 6f:b3:ce:c7:1b:61:c1:59:63:87:ca:0a:f7:7b:f4: a6:1b:ae:df:2c:c4:49:9b:bd:1e:5f:b5:46:82:11: b6:e5:ed:46:34:93:ad:72:03:71:69:8e:28:94:93: 74:3a:50:5b:9e:02:42:0a:f6:d0:3b:58:67:5d:ed: b6:6a:b4:e1:21:7f:c0:ec:70:46:ae:cd:76:d8:29: 80:5e:8e:97:46:fa:2d:be:76:93:34:8a:2d:67:03: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EA:8B:10:44:E2:D5:3C:11:F2:F1:95:5F:29:DE:45:5A:A5:02:F7 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:a1:06:d8:8f:5b:92:96:b8:0a:cf:7c:85:43:09:a2:09: 38:99:7f:4f:e9:2f:79:2e:a6:ba:d1:e8:eb:e6:90:9b:d8:9d: c6:8a:c4:1d:57:12:87:ae:44:0c:fa:a1:6a:6d:86:e9:a3:3d: f6:88:ec:e9:b7:61:1c:c5:71:e4:b6:67:10:18:e7:5c:82:90: 12:85:e0:06:12:7a:d6:68:f4:f6:01:dd:81:4c:12:35:54:40: 84:d7:bb:80:2c:5a:4b:ec:64:a9:51:31:d2:5d:9e:86:62:09: ee:f8:f1:e6:0f:c9:45:c5:87:2c:7f:0f:43:7b:50:f1:93:61: c4:56:25:40:24:ec:64:a4:3f:2d:f8:3e:83:b9:85:4f:00:49: bf:c4:32:88:fd:08:a1:4a:df:ac:44:5f:29:08:3a:c4:94:f6: a1:31:a0:0a:d1:0d:8f:b6:a5:3d:23:31:98:33:e8:d0:48:84: d2:ab:89:83:6f:27:e1:e0:9b:66:f1:b2:ab:1a:bb:1d:6c:af: b5:5d:95:82:c4:87:ee:87:e0:12:21:83:ff:44:1a:b7:11:a7: 48:8f:3f:2e:5a:75:5b:9c:92:7b:0e:d8:22:14:5a:40:40:7a: 9c:04:3c:ef:4e:b5:49:c1:6e:33:e0:2a:90:96:14:ee:5e:14: 32:80:d4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwOTA5MDI1NzU1WhcNMjUwOTE2MDI1NzU1WjAYMRYwFAYD VQQDEw02OGJmOTdiMy03Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i2zB598m12Pzdh+iKPoMQPBjLJvaazfNGMuCDPS93wBY2t0WKjjzogYb0QR /Mauh1ea2Ru8Ro0bQTZGPMhtPkltvXS+g0HZFKBbGq3EIvUonzgoVrH0DXAl04IA rERFPLeEEgW6pC59upUzBeIG7Yca0AdRBZLP6b77odK0ZMtFMcnzcXAJISl4UxOe wTroZtDkZKY7igPJ935fEmo7u93lt1tvs87HG2HBWWOHygr3e/SmG67fLMRJm70e X7VGghG25e1GNJOtcgNxaY4olJN0OlBbngJCCvbQO1hnXe22arThIX/A7HBGrs12 2CmAXo6XRvotvnaTNIotZwM6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/qixBE 4tU8EfLxlV8p3kVapQL3MB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJJaEG2I9bkpa4Cs98hUMJogk4mX9P6S95Lqa60ejr5pCb2J3GisQd VxKHrkQM+qFqbYbpoz32iOzpt2EcxXHktmcQGOdcgpASheAGEnrWaPT2Ad2BTBI1 VECE17uALFpL7GSpUTHSXZ6GYgnu+PHmD8lFxYcsfw9De1Dxk2HEViVAJOxkpD8t +D6DuYVPAEm/xDKI/QihSt+sRF8pCDrElPahMaAK0Q2PtqU9IzGYM+jQSITSq4mD byfh4Jtm8bKrGrsdbK+1XZWCxIfuh+ASIYP/RBq3EadIjz8uWnVbnJJ7DtgiFFpA QHqcBDzvTrVJwW4z4CqQlhTuXhQygNTg -----END CERTIFICATE-----Generated at Tue Sep 9 20:00:14 2025 by rpki-client