$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: FvyG+g9BJRZmWmfehZ3YzOtzZsVXhKG0AlY9/KB7ieg= Subject key identifier: C1:68:0B:77:A9:5E:03:B7:C4:3B:E7:3E:B1:E2:AE:EF:60:35:A6:9B Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 75 Signing time: Sun 07 Sep 2025 07:19:45 +0000 Manifest this update: Sun 07 Sep 2025 07:19:44 +0000 Manifest next update: Sun 14 Sep 2025 07:19:44 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: Mxso4I2AmseLstldro/4nTg2YEpkYbyOI0dwrOVOeDQ=) 2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Sep 7 07:19:44 2025 GMT Not After : Sep 14 07:19:44 2025 GMT Subject: CN=68bd3210-02d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:46:f0:bb:5e:af:2a:fd:3d:4d:8b:c2:24: a7:44:bf:ca:46:22:71:db:d1:ad:05:6b:0a:3c:b4: dc:fa:ab:92:9c:9e:89:e4:9b:20:11:4e:c0:05:85: 95:23:59:5e:e0:2a:22:03:4e:ba:83:e4:4d:ff:79: 12:3e:5b:a3:d0:7d:94:5e:44:42:be:1f:32:e2:11: 04:2f:84:f3:1a:5a:56:3e:71:a1:4a:fb:5c:f9:b0: fc:cf:62:b6:c6:2d:23:0b:25:cc:ba:c9:d8:a3:d1: bb:b2:94:f5:63:cf:52:62:68:7c:3d:58:59:0d:ed: d9:9b:7d:4e:8d:c7:42:b5:69:74:0f:c5:0b:20:9c: 34:f2:cf:f6:6d:d5:57:65:80:cb:8f:60:16:00:42: c4:1e:d6:58:3b:89:ca:77:20:5c:3d:a0:e5:74:00: 8f:26:76:18:c2:ad:89:ce:a6:41:ec:ff:09:01:20: 41:2a:5c:e4:49:1f:4e:ae:19:b7:ef:2d:f4:51:6f: 00:23:70:64:e8:30:eb:e8:26:da:3f:6d:37:8f:04: b2:98:32:a4:93:86:e0:4a:9b:ae:ba:fb:39:e2:8c: 3e:ec:b4:2e:45:fb:ea:ea:35:5b:69:e8:5b:fa:80: 6a:70:94:f3:1a:fe:01:01:ae:d9:9d:b0:ca:ca:4e: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:0B:77:A9:5E:03:B7:C4:3B:E7:3E:B1:E2:AE:EF:60:35:A6:9B X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9e:62:d3:e0:cc:92:9b:79:0f:17:77:34:db:72:39:4e:77: 30:8e:17:db:56:af:1a:e8:b6:c4:04:67:9e:33:5b:64:19:48: e4:fe:36:0a:cc:fa:67:c5:6c:7d:76:df:4c:fb:cf:3e:1d:63: d2:94:be:5b:02:51:44:e2:cb:38:cf:9d:d1:15:c4:5d:7d:33: 4a:07:7f:37:e5:9d:78:da:9e:b2:9e:f0:b4:f2:2f:e6:1c:6d: ab:64:ce:b4:06:f0:03:c7:51:36:ab:c2:13:17:b0:ba:65:93: 1d:95:f3:e1:27:21:e9:eb:03:f4:49:2d:8a:c6:35:ec:2e:ff: 55:ad:2e:20:94:2c:d1:0d:35:f1:ae:19:66:cc:9c:c0:3c:a4: 6c:aa:4c:50:7e:d6:71:9a:1f:69:93:9c:b1:99:33:34:a5:4f: c2:4d:25:f4:ea:64:e6:6c:ab:a1:e3:78:79:5a:73:4c:da:cd: bf:06:dc:de:4e:e5:43:a5:74:f2:21:81:a8:17:2b:5a:b6:6b: db:91:cc:27:bc:23:15:09:1f:5a:97:e7:fa:1a:91:56:27:9b: a8:8a:02:2c:d1:f1:ba:08:0b:26:c6:29:82:4d:ae:be:c0:a2: af:6d:af:f7:95:62:d0:a8:24:91:94:c7:5c:b4:44:46:54:8f: 4c:de:96:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEVDNTExMC8GA1UEBRMoM0E1RTEwMjlFNjVDNjM2ODEyMzJEQjY3RDgwNTNERDJG Njk0RTYxRjAeFw0yNTA5MDcwNzE5NDRaFw0yNTA5MTQwNzE5NDRaMBgxFjAUBgNV BAMTDTY4YmQzMjEwLTAyZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXukbwu16vKv09TYvCJKdEv8pGInHb0a0Fawo8tNz6q5KcnonkmyARTsAFhZUj WV7gKiIDTrqD5E3/eRI+W6PQfZReREK+HzLiEQQvhPMaWlY+caFK+1z5sPzPYrbG LSMLJcy6ydij0buylPVjz1JiaHw9WFkN7dmbfU6Nx0K1aXQPxQsgnDTyz/Zt1Vdl gMuPYBYAQsQe1lg7icp3IFw9oOV0AI8mdhjCrYnOpkHs/wkBIEEqXORJH06uGbfv LfRRbwAjcGToMOvoJto/bTePBLKYMqSThuBKm666+znijD7stC5F++rqNVtp6Fv6 gGpwlPMa/gEBrtmdsMrKTiqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwWgLd6le A7fEO+c+seKu72A1ppswHwYDVR0jBBgwFoAUOl4QKeZcY2gSMttn2AU90vaU5h8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RUM1LzgyMzM1QTIwRDk1 QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVo OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2w0UUtlWmNZMmdTTXR0bjJBVTkwdmFVNWg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RUM1LzgyMzM1QTIwRDk1QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJn U010dG4yQVU5MHZhVTVoOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKeYtPgzJKbeQ8XdzTbcjlOdzCOF9tWrxrotsQEZ54zW2QZSOT+NgrM +mfFbH1230z7zz4dY9KUvlsCUUTiyzjPndEVxF19M0oHfzflnXjanrKe8LTyL+Yc batkzrQG8APHUTarwhMXsLplkx2V8+EnIenrA/RJLYrGNewu/1WtLiCULNENNfGu GWbMnMA8pGyqTFB+1nGaH2mTnLGZMzSlT8JNJfTqZOZsq6HjeHlac0zazb8G3N5O 5UOldPIhgagXK1q2a9uRzCe8IxUJH1qX5/oakVYnm6iKAizR8boICybGKYJNrr7A oq9tr/eVYtCoJJGUx1y0REZUj0zeloA= -----END CERTIFICATE-----Generated at Mon Sep 8 14:38:08 2025 by rpki-client