$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: 6hRE0hrnmxkDqJWR+VIpt1DviCvBk+9XnJD8QAyd7dc= Subject key identifier: 06:3B:8A:04:E4:74:B8:5D:94:FB:63:D3:86:8A:F0:88:CE:7F:95:31 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 050A Signing time: Thu 04 Sep 2025 23:59:46 +0000 Manifest this update: Thu 04 Sep 2025 23:59:45 +0000 Manifest next update: Thu 11 Sep 2025 23:59:45 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: Xwlxd8u84O79Bu+ICK+UNqG7n0mHnQmMzsKh8D6DruA=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Sep 4 23:59:45 2025 GMT Not After : Sep 11 23:59:45 2025 GMT Subject: CN=68ba27f2-33d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:78:84:ca:7f:33:de:9e:28:e9:eb:b2:0c:ee: 27:a9:79:d1:90:32:11:bc:6a:06:eb:a3:0a:ba:46: fc:6d:d5:a2:28:a9:f8:b5:67:09:e8:27:a8:5e:69: 32:b7:71:85:f1:59:10:51:9a:ac:8e:13:4e:d6:9e: 85:b5:d7:a0:67:dd:6a:0e:07:71:0c:7a:3b:9e:f6: 45:cc:f1:88:b2:c1:e5:97:5d:a6:0a:74:e1:fe:c9: e7:cb:15:7b:f6:9a:3e:05:bc:61:9f:b8:87:28:b5: a3:d9:06:83:34:cf:de:f7:ac:34:51:25:3e:7d:6e: 35:b2:18:6a:5a:6f:3a:c4:97:4e:4c:1d:81:2d:35: 28:c1:6c:c2:26:87:a2:77:ad:cc:3a:25:2d:09:dd: 6f:cd:1f:19:39:5a:bc:84:93:89:39:47:da:a2:8b: 3f:d1:3b:73:4f:f8:5b:31:e9:83:82:33:ba:f0:38: 44:3b:0b:d3:21:92:f7:a3:3e:6f:95:9d:62:16:77: 8b:dd:90:ab:08:93:9d:ac:24:c3:c2:98:cd:be:8b: a1:03:ce:b4:13:6e:8c:55:d8:71:a2:aa:72:36:83: d6:84:63:0b:78:75:49:56:34:dc:f5:22:29:89:42: a8:57:4d:9e:04:23:ff:94:12:ec:ab:e6:bd:26:df: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:8A:04:E4:74:B8:5D:94:FB:63:D3:86:8A:F0:88:CE:7F:95:31 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:30:e3:cc:03:2a:92:38:0d:0a:a1:94:82:b4:9d:4e:34:f4: 94:52:d1:f7:a4:cf:2c:18:89:9f:28:ca:be:8c:3e:9c:ec:39: 63:37:69:37:77:1e:e4:41:72:11:23:53:6c:6c:30:c2:23:6a: 61:d0:79:e1:e0:dc:76:03:3f:ee:27:18:2e:88:70:8a:56:19: 43:1d:57:e2:44:3f:11:78:63:71:f9:92:b1:01:fe:82:88:25: f2:e2:d6:2d:83:69:6a:c5:b6:97:70:b2:ca:ee:e7:10:06:3e: d0:29:ee:3d:12:b9:2b:c3:e0:84:33:bf:b2:5b:11:63:66:40: d4:c5:fb:6c:bf:f5:cc:89:06:a0:40:6a:19:29:77:b1:05:d6: c3:77:c2:8b:7f:91:0c:98:2e:97:d2:0e:51:e0:e3:bb:59:c9: ef:ad:59:80:78:7b:7e:57:33:cf:49:31:87:d2:62:7d:ce:9b: e1:c3:b0:30:29:fc:e2:79:7b:3a:b6:ca:de:67:0e:42:8f:3a: ef:cb:b2:dc:b2:78:ec:2e:5d:31:c4:67:86:0e:71:30:43:77: 87:6f:3b:50:56:e0:a4:f5:31:6a:07:e0:fc:ef:b6:a9:72:e6: bd:9b:43:2b:a1:53:6c:c3:92:2f:b4:17:7b:c2:3f:cc:35:ad: d8:15:7e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwOTA0MjM1OTQ1WhcNMjUwOTExMjM1OTQ1WjAYMRYwFAYD VQQDEw02OGJhMjdmMi0zM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5niEyn8z3p4o6euyDO4nqXnRkDIRvGoG66MKukb8bdWiKKn4tWcJ6CeoXmky t3GF8VkQUZqsjhNO1p6FtdegZ91qDgdxDHo7nvZFzPGIssHll12mCnTh/snnyxV7 9po+Bbxhn7iHKLWj2QaDNM/e96w0USU+fW41shhqWm86xJdOTB2BLTUowWzCJoei d63MOiUtCd1vzR8ZOVq8hJOJOUfaoos/0TtzT/hbMemDgjO68DhEOwvTIZL3oz5v lZ1iFneL3ZCrCJOdrCTDwpjNvouhA860E26MVdhxoqpyNoPWhGMLeHVJVjTc9SIp iUKoV02eBCP/lBLsq+a9Jt+rywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY7igTk dLhdlPtj04aK8IjOf5UxMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuMOPMAyqSOA0KoZSCtJ1ONPSUUtH3pM8sGImfKMq+jD6c7DljN2k3 dx7kQXIRI1NsbDDCI2ph0Hnh4Nx2Az/uJxguiHCKVhlDHVfiRD8ReGNx+ZKxAf6C iCXy4tYtg2lqxbaXcLLK7ucQBj7QKe49Erkrw+CEM7+yWxFjZkDUxftsv/XMiQag QGoZKXexBdbDd8KLf5EMmC6X0g5R4OO7WcnvrVmAeHt+VzPPSTGH0mJ9zpvhw7Aw KfzieXs6tsreZw5Cjzrvy7LcsnjsLl0xxGeGDnEwQ3eHbztQVuCk9TFqB+D877ap cua9m0MroVNsw5IvtBd7wj/MNa3YFX67 -----END CERTIFICATE-----Generated at Fri Sep 5 10:53:07 2025 by rpki-client