$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: UCsU7p/v95Wkakkiim5NNFPZELPlErwO9lcDBUpP5qA= Subject key identifier: 2F:16:24:F5:EC:B8:A2:3A:5E:73:8A:46:43:3A:22:37:DC:FD:39:B7 Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: CA Signing time: Tue 09 Sep 2025 05:50:38 +0000 Manifest this update: Tue 09 Sep 2025 05:50:37 +0000 Manifest next update: Tue 16 Sep 2025 05:50:37 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: YQp4xPwwbcXt9q29Hmc9KMcaU51lMQxdQpOh8XVyELs=) 2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Sep 9 05:50:37 2025 GMT Not After : Sep 16 05:50:37 2025 GMT Subject: CN=68bfc02d-ec5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:c2:e4:86:3d:a5:6d:e5:dc:f0:8a:1f:e2: 1d:41:20:cd:56:67:a7:cc:1c:6a:ba:64:a1:13:94: 00:cb:a2:13:bf:d6:72:c0:c9:bd:fe:bb:f2:ba:58: 9c:b3:5f:d7:f9:f5:88:37:c1:17:3a:08:02:25:0a: 9f:13:36:5f:01:03:26:64:d5:88:1e:98:a4:f9:84: e7:8c:6d:eb:42:43:3b:c6:8c:25:a3:34:04:70:b9: 5d:39:c0:a5:b4:9e:e8:82:e1:52:fe:17:55:1b:e1: ea:37:e1:50:56:9b:ba:ef:3d:67:83:e5:8e:22:6a: 90:a9:b7:dd:dc:9d:0b:3d:90:ae:5d:d6:ca:3e:92: 8a:ea:5b:24:05:84:a4:d9:77:d8:c9:1d:4e:03:cd: 7b:45:d5:a9:f3:c7:fe:6c:8a:d8:9a:ae:e8:40:40: 94:1e:7f:4d:91:ab:96:db:92:fb:60:68:da:b8:c4: d3:c5:e2:47:15:fe:29:8f:70:24:36:a8:05:10:b4: 37:1b:9a:3a:67:ff:d8:07:82:98:10:d8:d8:50:f5: 06:71:1a:fc:8e:c3:7a:cc:88:d3:14:0f:23:30:85: b9:c4:4d:87:a1:ff:0b:f9:75:a6:1f:90:21:3e:31: 4f:d9:84:75:7c:44:d4:fb:d2:7c:12:72:ec:36:23: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:24:F5:EC:B8:A2:3A:5E:73:8A:46:43:3A:22:37:DC:FD:39:B7 X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:91:77:9a:36:24:d4:18:9e:32:30:a6:b0:26:d1:32:9f:e7: e1:f1:15:73:68:f6:1d:38:5d:b5:c6:59:af:35:54:0d:82:0b: 90:1c:fa:20:6d:58:cd:88:4c:7c:5f:16:80:98:24:0c:bd:33: c2:95:d5:c6:3e:e7:c1:2a:92:8d:fc:08:7a:59:72:df:00:f2: 86:42:b1:1e:f0:3b:9c:c1:2c:2f:8b:38:75:c8:d6:81:f1:95: 30:dc:a2:db:4b:5a:53:5c:b9:f5:62:2b:97:b7:50:77:a5:b6: 05:a8:c3:25:c8:59:cc:1e:14:10:d8:7b:2b:ce:f1:1a:82:35: cd:1e:91:52:74:20:09:28:74:d2:26:a8:3b:d5:b7:79:e7:30: a7:5b:1d:85:e0:e7:99:7c:84:b0:87:d0:d6:98:28:45:1c:f9: 33:16:c7:d0:39:3b:63:28:30:df:68:18:05:59:8c:03:36:84: 63:03:07:5c:f5:49:a7:6f:2d:43:73:67:c8:96:40:9b:ec:21: c9:46:a6:d4:6f:ff:34:ca:99:91:42:ad:4a:f6:ac:03:6d:b3: 5a:d7:b5:a2:a0:f9:8c:46:47:85:3d:47:33:81:98:52:23:d8: 63:2d:07:3a:b7:41:26:99:dc:6b:25:14:27:db:c9:30:1d:3a: ae:12:ad:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3NzIxMTAvBgNVBAUTKDk4RTFFOUIwNDNFNjhEMzc2OUU5QTY4REIxQzI2RDcx NTEwOEY3ODcwHhcNMjUwOTA5MDU1MDM3WhcNMjUwOTE2MDU1MDM3WjAYMRYwFAYD VQQDEw02OGJmYzAyZC1lYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZLC5IY9pW3l3PCKH+IdQSDNVmenzBxqumShE5QAy6ITv9ZywMm9/rvyulic s1/X+fWIN8EXOggCJQqfEzZfAQMmZNWIHpik+YTnjG3rQkM7xowlozQEcLldOcCl tJ7oguFS/hdVG+HqN+FQVpu67z1ng+WOImqQqbfd3J0LPZCuXdbKPpKK6lskBYSk 2XfYyR1OA817RdWp88f+bIrYmq7oQECUHn9NkauW25L7YGjauMTTxeJHFf4pj3Ak NqgFELQ3G5o6Z//YB4KYENjYUPUGcRr8jsN6zIjTFA8jMIW5xE2Hof8L+XWmH5Ah PjFP2YR1fETU+9J8EnLsNiOwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8WJPXs uKI6XnOKRkM6Ijfc/Tm3MB8GA1UdIwQYMBaAFJjh6bBD5o03aemmjbHCbXFRCPeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzc3Mi85MUZGMEQ5MjVC OUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpUZHA2YWFOc2NKdGNWRUk5 NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpU ZHA2YWFOc2NKdGNWRUk5NGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADkXeaNiTUGJ4yMKawJtEyn+fh8RVzaPYdOF21xlmvNVQNgguQHPog bVjNiEx8XxaAmCQMvTPCldXGPufBKpKN/Ah6WXLfAPKGQrEe8DucwSwvizh1yNaB 8ZUw3KLbS1pTXLn1YiuXt1B3pbYFqMMlyFnMHhQQ2HsrzvEagjXNHpFSdCAJKHTS Jqg71bd55zCnWx2F4OeZfISwh9DWmChFHPkzFsfQOTtjKDDfaBgFWYwDNoRjAwdc 9Umnby1Dc2fIlkCb7CHJRqbUb/80ypmRQq1K9qwDbbNa17WioPmMRkeFPUczgZhS I9hjLQc6t0EmmdxrJRQn28kwHTquEq1c -----END CERTIFICATE-----Generated at Tue Sep 9 14:19:49 2025 by rpki-client