$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: UNeQgksaOFUMZHCozZ9ImUt9oowQENCExtynxfx2ABk= Subject key identifier: 0C:AB:98:B8:E1:BF:AF:89:9B:64:E7:B9:40:01:C4:D2:11:D4:0A:19 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 9E Signing time: Fri 19 Sep 2025 06:59:06 +0000 Manifest this update: Fri 19 Sep 2025 06:59:05 +0000 Manifest next update: Fri 26 Sep 2025 06:59:05 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: mDdeL7dVoVGqKGkIoxuY9GnY0ksVHlvGbQaNgxSASXY=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Sep 19 06:59:05 2025 GMT Not After : Sep 26 06:59:05 2025 GMT Subject: CN=68ccff39-f120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:b3:41:30:0e:13:1b:49:77:5c:cf:0a:e4: dd:e0:42:2a:a9:5d:ad:51:b0:3f:2e:c9:7d:98:9d: 31:2c:fd:97:7a:fc:03:bb:3d:74:02:cd:56:8e:24: 50:2c:26:aa:0c:5a:4d:42:d0:1d:fc:96:9b:3c:09: 89:81:c0:ab:dc:a2:df:4c:44:d0:44:57:91:5a:d1: a3:ce:c7:3e:75:9c:46:29:12:e4:17:1d:bf:3e:2a: 31:c4:4b:45:fb:5a:ef:44:40:0c:99:04:8b:c9:be: 42:c4:a1:fc:02:da:92:31:2b:cb:43:53:a6:12:f9: f5:17:1b:35:9f:b2:cc:7b:de:13:20:55:67:ae:7f: 6b:58:66:53:e8:f1:3e:55:25:23:98:51:2f:1d:41: c7:34:7b:95:f6:a4:7a:2c:eb:0c:19:c7:4d:59:bc: 46:80:83:9f:23:69:db:67:ea:12:4f:c5:e9:9e:8a: fa:9a:e9:07:64:04:20:18:f3:c2:49:37:d2:27:2a: 21:d2:fc:6b:87:d3:55:74:fd:15:29:bf:86:31:3c: b3:cb:6c:33:d2:16:9f:2a:8a:51:db:1d:0c:49:25: 8c:b4:bb:b8:8b:1d:49:fd:4e:8e:99:3c:0b:c3:79: 25:aa:01:8c:63:b3:28:b7:ce:f4:7c:1a:24:cc:af: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:98:B8:E1:BF:AF:89:9B:64:E7:B9:40:01:C4:D2:11:D4:0A:19 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8f:88:81:43:dc:b5:9a:42:05:31:fb:9d:05:d2:25:15:24: 0f:74:08:26:d8:f9:44:fd:23:f6:63:30:91:c4:80:c9:0a:8f: b0:26:55:e8:27:cb:2a:45:33:bb:f5:ae:40:06:96:93:28:77: 36:f5:63:6b:5c:2d:07:f7:c0:6f:0b:38:5d:99:b2:df:ab:a1: e5:c0:5e:d5:dc:84:5d:d2:34:3f:72:2e:49:fb:51:20:44:3a: 4b:c7:8e:43:fd:1a:ef:1b:35:8a:88:47:33:32:0f:16:31:d5: f5:43:f3:fc:b0:58:6e:22:4a:30:ad:79:cc:30:f6:65:75:d6: 4d:a7:dc:a1:6f:20:54:fb:1d:13:f8:a3:75:69:72:97:b4:56: 57:ca:17:0f:e8:a1:b6:6e:d6:75:94:e8:26:89:27:29:2f:b3: 56:1d:68:1e:89:22:0b:63:83:6b:be:6e:f2:1d:7b:fd:6b:a0: f6:9b:1f:2d:b2:fe:c5:7f:e7:25:9a:c9:5b:5c:54:2d:1f:b1: 2b:d0:f1:2c:b9:cc:ee:82:68:f5:52:6a:0c:2c:54:89:25:2a: 94:08:01:61:6c:ce:24:ca:55:0a:d1:53:f9:07:36:25:e6:70: e1:1f:c1:60:6f:18:f0:41:a9:1a:44:c0:25:25:2b:9b:9e:6a: 6d:f9:c0:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjUwOTE5MDY1OTA1WhcNMjUwOTI2MDY1OTA1WjAYMRYwFAYD VQQDEw02OGNjZmYzOS1mMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotezQTAOExtJd1zPCuTd4EIqqV2tUbA/Lsl9mJ0xLP2XevwDuz10As1WjiRQ LCaqDFpNQtAd/JabPAmJgcCr3KLfTETQRFeRWtGjzsc+dZxGKRLkFx2/PioxxEtF +1rvREAMmQSLyb5CxKH8AtqSMSvLQ1OmEvn1Fxs1n7LMe94TIFVnrn9rWGZT6PE+ VSUjmFEvHUHHNHuV9qR6LOsMGcdNWbxGgIOfI2nbZ+oST8Xpnor6mukHZAQgGPPC STfSJyoh0vxrh9NVdP0VKb+GMTyzy2wz0hafKopR2x0MSSWMtLu4ix1J/U6OmTwL w3klqgGMY7Mot870fBokzK+OPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyrmLjh v6+Jm2TnuUABxNIR1AoZMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxj4iBQ9y1mkIFMfudBdIlFSQPdAgm2PlE/SP2YzCRxIDJCo+wJlXo J8sqRTO79a5ABpaTKHc29WNrXC0H98BvCzhdmbLfq6HlwF7V3IRd0jQ/ci5J+1Eg RDpLx45D/RrvGzWKiEczMg8WMdX1Q/P8sFhuIkowrXnMMPZlddZNp9yhbyBU+x0T +KN1aXKXtFZXyhcP6KG2btZ1lOgmiScpL7NWHWgeiSILY4Nrvm7yHXv9a6D2mx8t sv7Ff+clmslbXFQtH7Er0PEsuczugmj1UmoMLFSJJSqUCAFhbM4kylUK0VP5BzYl 5nDhH8FgbxjwQakaRMAlJSubnmpt+cDZ -----END CERTIFICATE-----Generated at Fri Sep 19 16:23:02 2025 by rpki-client