$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: SW1iG9tfaQWe484Z9gRdtJRafF6W+QK+Uy96aZvLbd4= Subject key identifier: D1:E8:F2:CF:63:93:9D:7C:94:59:15:30:66:D4:1E:5C:4A:ED:09:9F Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 0172 Signing time: Tue 09 Sep 2025 04:20:27 +0000 Manifest this update: Tue 09 Sep 2025 04:20:27 +0000 Manifest next update: Tue 16 Sep 2025 04:20:27 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: wNaLKB7oTDCR6mXoJWIGusgjJ+IUAb2VBJYQKrAThCY=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: 1LEVeAmiTE8mfugUrgZ7PXJTh3jzct433M4/pCSC1j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Sep 9 04:20:27 2025 GMT Not After : Sep 16 04:20:27 2025 GMT Subject: CN=68bfab0b-c757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:1b:cb:9c:2c:54:16:8b:a2:8c:3f:f1:15: af:a2:2f:55:25:89:75:ed:e9:76:b3:5d:34:15:cd: 7a:67:c3:e2:fe:03:5b:a2:cc:6a:84:2a:d9:5a:72: 3e:24:2d:d9:21:04:39:43:32:fd:5e:f6:51:62:04: 19:3d:33:d8:9c:ad:4c:b5:ec:28:86:c3:eb:53:d5: 68:42:ff:92:0f:5b:2b:a5:47:4a:d7:b4:8f:76:f1: 8c:4a:ad:04:72:5f:fc:93:6f:45:72:1c:83:e7:57: 7e:39:0e:6c:62:94:c3:7b:ec:b9:9d:72:80:c8:65: 5a:fb:9d:74:5f:78:2d:52:37:7b:44:be:a7:96:f1: e8:fa:51:96:d4:54:6c:4e:cc:0c:01:b1:92:a5:4c: 5a:06:5f:d7:e2:11:b5:78:03:ef:6f:ea:26:6a:71: 8c:f3:97:27:f3:ff:99:00:c6:0e:7d:26:47:63:88: e2:9e:9c:e2:dd:99:85:24:0e:f3:a3:e2:b0:8f:74: a4:c5:fc:f8:4e:b8:0c:df:ce:7c:aa:84:59:23:57: 0b:22:4e:2e:91:3a:35:f4:23:b5:af:3c:47:59:85: 21:1b:38:c4:41:89:88:00:82:b2:da:e4:d6:f4:54: 22:c1:5d:59:33:7c:e1:ff:a2:a2:81:81:1a:9c:9c: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E8:F2:CF:63:93:9D:7C:94:59:15:30:66:D4:1E:5C:4A:ED:09:9F X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:fe:c1:91:cd:31:df:36:aa:89:e8:25:ee:63:40:6b:fe:f8: 2d:08:99:d2:f3:32:65:2f:85:1d:f2:41:75:cb:60:75:44:10: 9b:08:91:f5:e9:97:36:31:66:ea:47:98:af:66:ad:bb:e2:aa: f9:87:e0:45:88:03:54:45:a1:cc:2a:e3:c0:e3:ca:a1:b9:f2: 0c:2d:1f:e4:fd:f7:ab:62:d1:b5:29:91:c3:61:3a:51:48:01: 70:07:83:88:db:6a:1d:06:70:ff:11:97:3a:9b:86:f3:b6:ff: ba:84:9d:a5:75:18:6d:11:50:e5:85:9b:9c:3c:c6:71:bf:e8: d7:45:66:93:b7:a4:97:dc:3c:a7:23:88:ba:9d:0e:11:29:41: 27:b8:9b:50:99:8d:88:16:80:33:11:40:1c:cb:e3:f2:9d:7c: 16:5c:7d:1f:08:1e:0c:15:a3:27:2e:b5:b0:0f:45:4d:d2:41: 53:4a:4a:14:d7:86:af:1b:18:a1:e8:17:43:e4:94:30:7c:d2: d8:99:62:43:ed:f9:4a:fa:0f:4a:5e:4f:f1:cd:3b:3e:b1:d5: 45:32:4a:89:35:ee:47:76:57:5c:d4:72:c1:3a:14:6b:ba:d2: 18:c4:a6:56:ce:20:10:96:d7:b3:ed:9b:8f:58:4e:4f:44:84: 03:d1:c4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUwOTA5MDQyMDI3WhcNMjUwOTE2MDQyMDI3WjAYMRYwFAYD VQQDEw02OGJmYWIwYi1jNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVIby5wsVBaLoow/8RWvoi9VJYl17el2s100Fc16Z8Pi/gNbosxqhCrZWnI+ JC3ZIQQ5QzL9XvZRYgQZPTPYnK1MtewohsPrU9VoQv+SD1srpUdK17SPdvGMSq0E cl/8k29FchyD51d+OQ5sYpTDe+y5nXKAyGVa+510X3gtUjd7RL6nlvHo+lGW1FRs TswMAbGSpUxaBl/X4hG1eAPvb+omanGM85cn8/+ZAMYOfSZHY4jinpzi3ZmFJA7z o+Kwj3Skxfz4TrgM3858qoRZI1cLIk4ukTo19CO1rzxHWYUhGzjEQYmIAIKy2uTW 9FQiwV1ZM3zh/6KigYEanJwtXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHo8s9j k518lFkVMGbUHlxK7QmfMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5/sGRzTHfNqqJ6CXuY0Br/vgtCJnS8zJlL4Ud8kF1y2B1RBCbCJH1 6Zc2MWbqR5ivZq274qr5h+BFiANURaHMKuPA48qhufIMLR/k/ferYtG1KZHDYTpR SAFwB4OI22odBnD/EZc6m4bztv+6hJ2ldRhtEVDlhZucPMZxv+jXRWaTt6SX3Dyn I4i6nQ4RKUEnuJtQmY2IFoAzEUAcy+PynXwWXH0fCB4MFaMnLrWwD0VN0kFTSkoU 14avGxih6BdD5JQwfNLYmWJD7flK+g9KXk/xzTs+sdVFMkqJNe5Hdldc1HLBOhRr utIYxKZWziAQltez7ZuPWE5PRIQD0cSA -----END CERTIFICATE-----Generated at Tue Sep 9 10:20:00 2025 by rpki-client