$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: J4H+h2gc2uWR2KInVlRL/F+CVmV4PTu0cbYoDkwyDgA= Subject key identifier: 7A:07:48:B4:6B:FD:13:D4:05:EC:0C:7D:E1:D6:3D:5C:61:15:13:E3 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 078B Signing time: Thu 18 Sep 2025 21:48:55 +0000 Manifest this update: Thu 18 Sep 2025 21:48:55 +0000 Manifest next update: Thu 25 Sep 2025 21:48:55 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: Sg2DO7yRLLyZ4O10DpQ0SWy+SqxMZp9floHf0PgLDaA=) 2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: l3P+jzCX7aHklMXmE9uReg8fCRmiQ/j2jziDBZRRn4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Sep 18 21:48:55 2025 GMT Not After : Sep 25 21:48:55 2025 GMT Subject: CN=68cc7e47-a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:ae:86:64:45:d0:7e:60:5d:e2:d1:71:fb: 4f:4f:41:1f:34:ab:65:e3:e6:eb:a4:70:75:4e:9a: ac:8e:8b:9b:44:bf:6c:a0:ad:31:c0:07:1c:89:e9: cb:46:43:fb:60:25:87:95:77:3b:87:5f:d1:0d:1f: 17:93:c9:b0:3f:6e:99:34:af:29:3b:b3:6c:62:5d: d3:bd:10:95:69:d5:d1:26:2c:ea:ef:ca:d1:76:4f: e5:05:11:e6:3b:68:e0:2a:31:be:18:19:df:2b:93: 09:5f:28:8c:57:6d:1e:4c:6d:c1:5c:bb:9e:36:5f: 14:34:12:ae:8d:d8:17:20:c0:b4:75:69:f5:e7:22: c1:f8:87:98:12:16:cc:c2:f6:08:f1:6b:55:cc:c0: 87:2f:05:e0:f0:d3:72:48:ef:83:ef:e6:3b:49:22: c2:81:50:86:11:73:6b:d7:be:96:25:3e:b0:eb:ae: e2:19:f1:bf:ca:0a:32:b5:a6:62:3e:24:ac:fd:ce: 98:09:9f:4b:8f:e6:ff:69:a9:d8:c7:08:04:25:3a: ed:3f:37:9c:96:37:2e:cf:28:ef:fd:cf:5d:1c:b0: 0a:d9:6e:fb:39:7e:87:dd:a5:aa:01:77:a2:ae:ee: f1:a9:89:ab:8e:9f:e9:b6:77:60:1f:d9:a9:1a:26: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:07:48:B4:6B:FD:13:D4:05:EC:0C:7D:E1:D6:3D:5C:61:15:13:E3 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:ff:e3:2a:90:b6:40:de:a9:88:fc:48:43:08:91:eb:d0: 61:7c:2b:fa:97:b4:f4:a5:04:53:8c:6d:27:61:dd:b8:1e:c3: 58:f5:57:31:90:8f:05:df:7c:5d:62:bc:95:fb:ed:a5:d5:5f: be:c8:1b:4c:34:b4:8e:50:0d:d4:14:1a:98:1e:7a:ba:ab:e1: a6:62:20:ec:e8:f5:ad:28:83:ab:a9:cc:68:f9:0f:3d:ef:94: d6:64:da:bd:38:f8:ee:95:6d:89:76:d0:3a:58:42:ad:2d:6c: 38:9f:cb:5d:7f:ed:a0:dc:9f:98:c3:7b:87:61:1b:e8:b1:39: 6d:a9:61:b4:50:66:2b:e6:0e:14:fa:03:3a:ae:63:a0:45:6a: 91:69:0c:cb:7b:39:27:9b:84:6a:4a:61:34:99:94:c0:89:8d: e1:aa:5a:9f:fc:12:da:6e:a4:ff:72:6a:db:30:ec:ec:c8:92: f3:0d:8c:bf:9a:10:bc:20:55:7a:1e:5f:1b:d8:4e:2d:97:7c: 90:50:3e:8b:6b:7d:da:98:35:79:cc:91:61:28:e1:05:b6:bb: 07:88:c8:9e:72:b5:ce:56:b6:83:74:bf:ac:98:b9:99:d7:7c: 41:cd:fd:a6:2e:76:f7:be:22:21:bb:1b:89:f9:ed:bd:24:c7: 21:b9:51:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUwOTE4MjE0ODU1WhcNMjUwOTI1MjE0ODU1WjAYMRYwFAYD VQQDEw02OGNjN2U0Ny1hMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gWuhmRF0H5gXeLRcftPT0EfNKtl4+brpHB1TpqsjoubRL9soK0xwAccienL RkP7YCWHlXc7h1/RDR8Xk8mwP26ZNK8pO7NsYl3TvRCVadXRJizq78rRdk/lBRHm O2jgKjG+GBnfK5MJXyiMV20eTG3BXLueNl8UNBKujdgXIMC0dWn15yLB+IeYEhbM wvYI8WtVzMCHLwXg8NNySO+D7+Y7SSLCgVCGEXNr176WJT6w667iGfG/ygoytaZi PiSs/c6YCZ9Lj+b/aanYxwgEJTrtPzecljcuzyjv/c9dHLAK2W77OX6H3aWqAXei ru7xqYmrjp/ptndgH9mpGiZbJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoHSLRr /RPUBewMfeHWPVxhFRPjMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpB//jKpC2QN6piPxIQwiR69BhfCv6l7T0pQRTjG0nYd24HsNY9Vcx kI8F33xdYryV++2l1V++yBtMNLSOUA3UFBqYHnq6q+GmYiDs6PWtKIOrqcxo+Q89 75TWZNq9OPjulW2JdtA6WEKtLWw4n8tdf+2g3J+Yw3uHYRvosTltqWG0UGYr5g4U +gM6rmOgRWqRaQzLezknm4RqSmE0mZTAiY3hqlqf/BLabqT/cmrbMOzsyJLzDYy/ mhC8IFV6Hl8b2E4tl3yQUD6La33amDV5zJFhKOEFtrsHiMiecrXOVraDdL+smLmZ 13xBzf2mLnb3viIhuxuJ+e29JMchuVEU -----END CERTIFICATE-----Generated at Fri Sep 19 07:34:40 2025 by rpki-client