$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: TJH3A4Sasgng3yr+Mc4FvMqgaxAN4wUHmRRhbadqGuA= Subject key identifier: BD:5A:7D:AE:59:C8:83:7B:2A:A1:62:96:9B:12:6F:FB:5D:BE:3F:67 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B85 Signing time: Thu 18 Sep 2025 19:14:27 +0000 Manifest this update: Thu 18 Sep 2025 19:14:27 +0000 Manifest next update: Thu 25 Sep 2025 19:14:27 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: hosLbnKR99mwUIpfhA6iPn3Xvd9iVxlrWHb6v2u/WM8=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Sep 18 19:14:27 2025 GMT Not After : Sep 25 19:14:27 2025 GMT Subject: CN=68cc5a13-2fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:eb:1f:28:32:91:95:48:ae:98:8b:8e:f1: da:a9:24:e2:ea:62:5d:5f:6f:ee:10:26:44:02:c1: 99:aa:ca:b2:16:b6:da:d8:83:1d:c9:b0:e3:59:e3: 59:36:0f:7e:f0:ce:90:b0:df:f2:0f:09:f6:cd:1f: 1c:89:70:4e:be:64:b7:10:4e:4a:ab:9b:a7:33:f1: 96:fe:e1:0e:dd:41:24:ca:79:2a:72:b0:30:d4:45: f5:45:45:b3:de:73:4a:e8:5f:06:36:33:46:7e:96: 6c:ad:a6:59:5f:8f:92:83:49:35:66:c9:be:7a:6e: 19:fb:1a:ab:9b:50:08:a0:70:8a:8b:63:d1:14:e6: d8:4b:70:78:e9:a9:50:82:f7:ad:14:3c:45:ab:96: e3:c0:d3:6c:15:d2:39:3f:40:ce:43:8d:01:a6:02: 19:c9:8f:01:1c:e6:69:1a:c0:aa:49:91:ff:ee:04: 4a:53:d3:65:76:4e:23:44:c8:3a:1f:69:dc:12:a2: 1f:63:06:13:0c:a3:50:c0:97:c0:ad:32:6a:dc:94: 07:23:c4:a4:3b:96:97:c2:85:f3:06:7c:9f:5f:9f: dc:a8:90:bd:fc:8d:cf:05:88:bd:53:c7:8c:d0:85: 08:eb:5c:9b:82:ad:1d:e2:a5:a3:2d:61:f3:b3:b8: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5A:7D:AE:59:C8:83:7B:2A:A1:62:96:9B:12:6F:FB:5D:BE:3F:67 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ff:70:3a:f2:f5:50:39:19:16:18:6a:c4:be:9c:e2:e6:22: 01:9c:83:56:8f:6f:45:8a:1b:fb:4b:ae:9e:c4:80:1a:f5:ab: 22:b9:52:f9:51:50:85:87:47:05:7e:8e:19:0c:c4:80:60:53: ca:eb:92:d7:b3:60:4d:c3:32:b8:75:ad:b3:27:06:4e:82:3a: 65:89:92:e4:4b:48:30:49:29:95:26:8a:f6:d4:0f:ac:24:58: c1:01:a2:b3:77:81:ed:db:d3:e5:c6:0b:8f:5f:26:d4:62:60: 35:3b:36:48:60:0a:e0:d1:17:62:72:20:b2:e6:4e:d7:35:9e: ea:4e:48:55:d3:21:59:ea:a3:52:f0:8e:57:1a:c0:32:04:62: 4a:ef:48:e1:26:bc:d8:2a:97:bd:73:7f:c8:f3:7d:df:b6:a5: 06:97:da:84:18:e0:5f:36:ff:89:4b:05:9e:f9:c6:e8:82:17: 18:c4:bf:e0:ed:4a:52:72:9f:21:78:09:3d:1d:b4:85:ee:a2: 26:5f:2b:8c:f8:13:09:40:64:9d:24:38:63:07:ea:69:2d:ab: 2a:74:7d:7a:20:55:1d:74:ed:50:a0:7e:21:53:24:4a:11:9e: 6e:03:40:d0:88:e3:09:e7:46:9f:8f:44:e2:eb:80:15:e9:e7: 4f:be:0b:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwOTE4MTkxNDI3WhcNMjUwOTI1MTkxNDI3WjAYMRYwFAYD VQQDEw02OGNjNWExMy0yZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBTrHygykZVIrpiLjvHaqSTi6mJdX2/uECZEAsGZqsqyFrba2IMdybDjWeNZ Ng9+8M6QsN/yDwn2zR8ciXBOvmS3EE5Kq5unM/GW/uEO3UEkynkqcrAw1EX1RUWz 3nNK6F8GNjNGfpZsraZZX4+Sg0k1Zsm+em4Z+xqrm1AIoHCKi2PRFObYS3B46alQ gvetFDxFq5bjwNNsFdI5P0DOQ40BpgIZyY8BHOZpGsCqSZH/7gRKU9Nldk4jRMg6 H2ncEqIfYwYTDKNQwJfArTJq3JQHI8SkO5aXwoXzBnyfX5/cqJC9/I3PBYi9U8eM 0IUI61ybgq0d4qWjLWHzs7gt4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1afa5Z yIN7KqFilpsSb/tdvj9nMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy/3A68vVQORkWGGrEvpzi5iIBnINWj29Fihv7S66exIAa9asiuVL5 UVCFh0cFfo4ZDMSAYFPK65LXs2BNwzK4da2zJwZOgjpliZLkS0gwSSmVJor21A+s JFjBAaKzd4Ht29PlxguPXybUYmA1OzZIYArg0RdiciCy5k7XNZ7qTkhV0yFZ6qNS 8I5XGsAyBGJK70jhJrzYKpe9c3/I833ftqUGl9qEGOBfNv+JSwWe+cboghcYxL/g 7UpScp8heAk9HbSF7qImXyuM+BMJQGSdJDhjB+ppLasqdH16IFUddO1QoH4hUyRK EZ5uA0DQiOMJ50afj0Ti64AV6edPvguV -----END CERTIFICATE-----Generated at Fri Sep 19 06:20:07 2025 by rpki-client