$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: j28olyXLT80g0HCTzdeYyGetO76ajuvFA1yxKAaC6n4= Subject key identifier: 3A:24:87:12:A7:C9:93:17:AE:52:03:2F:A7:57:61:8E:38:66:FB:FD Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0DA9 Signing time: Tue 16 Sep 2025 18:01:05 +0000 Manifest this update: Tue 16 Sep 2025 18:01:04 +0000 Manifest next update: Tue 23 Sep 2025 18:01:04 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: 4raxrzlJZnQJCJ9hW0fsLXHUQvUk7xwXaI1eXQoofUA=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Sep 16 18:01:04 2025 GMT Not After : Sep 23 18:01:04 2025 GMT Subject: CN=68c9a5e0-560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:73:a0:22:06:7c:7b:2d:df:4a:51:d9:8b: 88:ff:17:8c:8f:0e:38:04:41:24:f6:c0:a2:ae:b3: 2e:32:d7:3d:14:a2:99:01:ce:e8:1a:5a:ed:da:57: 80:bb:15:f9:3f:33:11:3a:01:0b:13:4a:a2:72:b9: 19:22:d6:e5:1b:ae:fd:48:aa:91:e8:87:1f:7c:fe: 19:4d:7b:38:71:31:b6:80:d5:dd:7d:91:ce:f6:83: 34:6a:a9:88:3e:0a:0e:bb:96:68:ef:e8:68:5c:aa: e7:b5:da:4d:ad:a6:2b:02:d9:1c:09:fe:aa:d8:24: 90:29:26:1f:2e:7a:70:8a:d5:d5:46:6b:54:21:21: c9:4c:d6:af:a3:07:a9:fb:21:f3:b8:5d:81:67:70: 97:e9:76:04:f6:af:48:fa:8c:81:a1:23:29:73:8b: 4d:00:11:d7:68:e2:99:89:c4:38:64:3d:a0:70:87: 5f:35:a9:86:61:8b:39:02:eb:a0:36:8d:8b:d0:d7: 0f:60:fc:ea:ce:27:60:8e:bc:45:42:0c:e2:a9:60: df:d1:b4:39:9c:7d:bf:a4:d6:08:89:c2:17:7c:23: e2:1f:e5:fb:3a:9e:de:f0:f0:8b:86:ef:19:f8:a9: c0:87:e4:46:57:9a:e8:3d:91:83:c5:44:db:6d:4d: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:24:87:12:A7:C9:93:17:AE:52:03:2F:A7:57:61:8E:38:66:FB:FD X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a4:60:84:6e:a9:67:6a:97:bb:80:58:b7:25:90:bd:39:bd: 7a:4c:9c:ec:6a:96:5b:aa:f8:7c:21:ed:13:b9:c8:f2:1e:8e: c8:b2:c2:7f:51:7b:56:f2:1a:b8:88:2a:74:7c:cb:8e:a0:a3: 24:85:73:15:c3:52:47:20:6e:c5:1b:d8:d9:bd:51:51:82:2c: a0:58:60:e1:c4:cd:ab:61:40:e7:27:81:67:54:e8:a8:f4:46: e1:88:3d:1d:8d:b9:36:21:9a:68:ec:4b:c6:1e:99:74:70:f7: 69:f2:3b:9c:89:15:67:fe:20:c9:b4:13:3e:03:40:d9:02:ce: 09:30:3d:46:04:74:13:77:11:ef:f3:69:4a:58:67:04:76:3f: 31:44:e6:8b:d5:00:30:63:cf:5b:f6:1a:6d:97:96:26:6a:a1: a7:5b:39:45:c3:d2:e9:b8:46:98:53:39:c3:d9:72:f7:2a:31: 94:0b:d3:6b:80:e9:9c:e7:43:41:d9:58:8c:e6:99:a4:1a:83: a4:15:d1:d7:96:8b:c9:16:01:2b:4b:3b:8b:2a:3c:88:33:f4: 77:ab:37:c1:05:0a:4b:4a:0b:39:6e:a0:47:43:7e:17:ea:5d: 24:62:21:88:79:7e:2c:87:34:56:d1:c1:2c:f8:3f:b9:8f:0c: 0a:da:27:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUwOTE2MTgwMTA0WhcNMjUwOTIzMTgwMTA0WjAYMRYwFAYD VQQDEw02OGM5YTVlMC01NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9BzoCIGfHst30pR2YuI/xeMjw44BEEk9sCirrMuMtc9FKKZAc7oGlrt2leA uxX5PzMROgELE0qicrkZItblG679SKqR6IcffP4ZTXs4cTG2gNXdfZHO9oM0aqmI PgoOu5Zo7+hoXKrntdpNraYrAtkcCf6q2CSQKSYfLnpwitXVRmtUISHJTNavowep +yHzuF2BZ3CX6XYE9q9I+oyBoSMpc4tNABHXaOKZicQ4ZD2gcIdfNamGYYs5Auug No2L0NcPYPzqzidgjrxFQgziqWDf0bQ5nH2/pNYIicIXfCPiH+X7Op7e8PCLhu8Z +KnAh+RGV5roPZGDxUTbbU3yAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDokhxKn yZMXrlIDL6dXYY44Zvv9MB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFpGCEbqlnape7gFi3JZC9Ob16TJzsapZbqvh8Ie0TucjyHo7IssJ/ UXtW8hq4iCp0fMuOoKMkhXMVw1JHIG7FG9jZvVFRgiygWGDhxM2rYUDnJ4FnVOio 9EbhiD0djbk2IZpo7EvGHpl0cPdp8juciRVn/iDJtBM+A0DZAs4JMD1GBHQTdxHv 82lKWGcEdj8xROaL1QAwY89b9hptl5YmaqGnWzlFw9LpuEaYUznD2XL3KjGUC9Nr gOmc50NB2ViM5pmkGoOkFdHXlovJFgErSzuLKjyIM/R3qzfBBQpLSgs5bqBHQ34X 6l0kYiGIeX4shzRW0cEs+D+5jwwK2ifn -----END CERTIFICATE-----Generated at Thu Sep 18 01:40:02 2025 by rpki-client