$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: 6gtbQXrAFFlvV79whmEvE/YWuMl+dftgC45RO8ZEnHE= Subject key identifier: A5:15:1B:C6:BE:D2:27:5F:C9:0F:5F:A2:C4:36:7B:E3:1B:20:E9:D4 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 1709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 16FF Signing time: Thu 18 Sep 2025 16:46:08 +0000 Manifest this update: Thu 18 Sep 2025 16:46:07 +0000 Manifest next update: Thu 25 Sep 2025 16:46:07 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: zTF7K1JStLGBSbGb9wmEM3+Mye2RifmRYiHuscY9Kc0=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: aM0yH97r/h3xu615cUuk5zwsCFMLHVQ8whXpoG1e1kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5897 (0x1709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Sep 18 16:46:07 2025 GMT Not After : Sep 25 16:46:07 2025 GMT Subject: CN=68cc374f-0f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:fd:1a:65:fd:13:c5:2f:a2:95:42:93:28: 77:f2:cf:c8:aa:07:37:c9:77:4d:7f:ad:91:d5:1a: a1:c9:db:65:a9:b7:f2:fc:38:ee:e9:b1:04:1e:08: b2:65:5d:36:72:6a:ed:d7:d3:43:37:b9:d0:4d:de: ff:70:ff:1d:ef:6f:b8:c1:79:a3:73:a8:b2:84:b2: 29:68:5e:90:a3:a4:f8:17:df:fa:3b:8b:9f:48:81: 8b:26:72:51:e5:42:fe:74:12:5b:08:f9:11:66:58: 8f:be:d9:4d:b2:22:85:f2:25:47:97:80:af:70:fc: 1c:a2:fa:9d:39:d3:cc:7f:fc:e3:1a:cc:e5:0a:02: 94:d2:cb:70:f4:f9:6b:b4:ed:2f:3a:fa:8d:c8:f3: 60:19:5a:16:0a:b9:52:ee:0f:fe:cd:5e:ba:12:bb: 87:9b:8b:d9:83:3f:bf:f1:39:a7:69:00:df:5e:71: 5f:dc:ee:88:5d:ae:94:ec:2f:c5:ee:f8:0b:35:0a: f2:cb:18:96:88:c9:dc:cb:ce:74:33:49:63:b1:41: 39:35:f5:5b:20:06:e8:57:c1:4e:3d:42:a1:c1:f6: b0:69:87:0b:3a:c5:9c:90:6f:94:18:cf:b7:0c:2e: c6:b9:2d:f5:c7:a6:6d:d1:b6:90:f2:1b:f6:d8:a3: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:1B:C6:BE:D2:27:5F:C9:0F:5F:A2:C4:36:7B:E3:1B:20:E9:D4 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ed:53:90:20:9a:16:81:fc:5c:fe:bc:d1:06:f4:fb:8c:cc: ff:a4:e9:34:d4:e1:04:97:57:e8:6b:bf:ba:b1:e1:ed:b1:d4: 7d:8b:ce:6d:f4:64:e5:cc:cf:ce:f3:bd:96:5d:5c:a7:ab:99: a9:c6:e5:4e:ae:d1:39:0b:4e:3f:e1:38:ee:e2:6f:67:bc:ee: c7:67:8c:60:39:22:bc:d1:93:d2:c2:a3:92:f9:88:09:af:9f: 45:84:2b:8e:cf:d5:b5:93:a8:61:36:b5:b6:fe:57:86:4b:67: d5:09:67:5c:e5:af:a1:5c:bc:61:90:36:24:31:dd:c7:b0:4e: af:a6:8a:9b:7d:d8:52:54:f7:06:f6:e8:ae:0b:30:ad:5c:d0: c9:cc:5f:bc:0b:bd:9f:6a:c9:73:14:da:b4:42:a1:73:33:bd: 98:66:fa:2d:d1:c8:a8:2a:c4:85:a7:ad:c7:db:65:d6:5d:3a: eb:d1:c6:e5:eb:2a:07:46:f9:55:ba:d2:6b:83:72:92:37:a7: 53:4d:6d:c1:e7:72:96:1e:31:22:98:ae:19:dd:92:1f:1c:91: 6d:8b:a1:2c:da:b0:11:2c:9b:3c:5e:3c:0a:03:83:87:b8:d7: f5:2d:b5:3c:28:c6:a9:8a:a1:85:5b:f9:d2:0f:cf:47:7a:7c: 97:39:bd:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUwOTE4MTY0NjA3WhcNMjUwOTI1MTY0NjA3WjAYMRYwFAYD VQQDEw02OGNjMzc0Zi0wZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vD9GmX9E8UvopVCkyh38s/Iqgc3yXdNf62R1Rqhydtlqbfy/Dju6bEEHgiy ZV02cmrt19NDN7nQTd7/cP8d72+4wXmjc6iyhLIpaF6Qo6T4F9/6O4ufSIGLJnJR 5UL+dBJbCPkRZliPvtlNsiKF8iVHl4CvcPwcovqdOdPMf/zjGszlCgKU0stw9Plr tO0vOvqNyPNgGVoWCrlS7g/+zV66EruHm4vZgz+/8TmnaQDfXnFf3O6IXa6U7C/F 7vgLNQryyxiWiMncy850M0ljsUE5NfVbIAboV8FOPUKhwfawaYcLOsWckG+UGM+3 DC7GuS31x6Zt0baQ8hv22KN+1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUVG8a+ 0idfyQ9fosQ2e+MbIOnUMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb7VOQIJoWgfxc/rzRBvT7jMz/pOk01OEEl1foa7+6seHtsdR9i85t 9GTlzM/O872WXVynq5mpxuVOrtE5C04/4Tju4m9nvO7HZ4xgOSK80ZPSwqOS+YgJ r59FhCuOz9W1k6hhNrW2/leGS2fVCWdc5a+hXLxhkDYkMd3HsE6vpoqbfdhSVPcG 9uiuCzCtXNDJzF+8C72faslzFNq0QqFzM72YZvot0cioKsSFp63H22XWXTrr0cbl 6yoHRvlVutJrg3KSN6dTTW3B53KWHjEimK4Z3ZIfHJFti6Es2rARLJs8XjwKA4OH uNf1LbU8KMapiqGFW/nSD89HenyXOb0b -----END CERTIFICATE-----Generated at Thu Sep 18 20:23:22 2025 by rpki-client