$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: ICgcIy7qLVx/zIrimA8NE99XMI+L72o8f4ydPaUXPeQ= Subject key identifier: 17:C5:45:28:FB:B9:1E:77:42:30:48:F0:2E:9A:E3:85:FE:AB:33:53 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: AE Signing time: Wed 17 Sep 2025 06:46:26 +0000 Manifest this update: Wed 17 Sep 2025 06:46:26 +0000 Manifest next update: Wed 24 Sep 2025 06:46:26 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: vH+xS11oB56RCUPTcWipF+X/k8h81BfxbaDk9TyOaxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Sep 17 06:46:26 2025 GMT Not After : Sep 24 06:46:26 2025 GMT Subject: CN=68ca5942-346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:0e:bf:a2:a3:9f:ea:2f:19:e8:55:f5:ce: c7:4c:35:2b:f3:00:da:5d:64:53:18:d8:86:2b:d7: 07:b9:24:3d:bc:6b:56:04:ad:2a:03:e5:6f:df:7a: cd:e7:d4:72:b1:e8:47:26:67:e0:0f:e4:95:87:23: da:9e:5a:60:b8:b5:f3:5c:0e:9e:c6:49:ec:78:be: 2e:2a:91:3e:df:b1:4d:39:c7:12:d6:ed:e2:e2:a0: e6:1c:6e:3e:46:55:80:b8:74:96:63:51:a2:da:88: 11:12:b9:b1:d0:37:f0:9a:9b:1f:d1:29:67:ce:c8: bf:8c:51:93:78:51:98:a5:84:90:a7:e4:0c:e8:2d: 02:91:f9:45:9f:e5:0c:e7:d8:22:07:75:47:9c:8c: e5:9d:1a:4b:65:8f:1f:37:cc:a1:88:ee:20:1f:b4: 89:e8:cd:67:aa:95:f9:4c:05:05:99:8b:23:6d:4f: 90:fc:69:1c:48:64:2e:a8:d9:3f:c4:bc:dc:a0:16: f3:1e:31:a0:63:cc:0f:4c:c6:b0:e0:6f:07:49:0d: 1f:a7:0a:d1:30:7e:bc:ea:a7:14:4a:14:df:53:85: 67:b6:c7:62:7d:50:dc:97:22:3c:d3:7c:55:d2:1d: a1:5d:a5:50:75:69:b0:59:b0:ba:69:6e:7e:b7:c9: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:45:28:FB:B9:1E:77:42:30:48:F0:2E:9A:E3:85:FE:AB:33:53 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:da:ee:d9:cf:f6:be:25:d3:c8:01:af:42:36:d1:0e:0e:fe: 67:fd:fb:d8:e6:96:c3:2d:cc:03:3b:2e:37:23:7e:30:ad:ce: 34:1a:e5:9a:30:12:85:2d:c4:ca:5a:d7:a7:64:56:99:3e:cd: 16:67:64:52:1e:3c:fd:c1:a7:9a:ba:86:34:d7:ec:4e:d7:c3: 78:6a:c5:88:34:42:6f:d0:88:fa:8d:ff:8b:d6:eb:28:e7:91: 04:7b:b9:7f:bf:d9:6c:fc:94:a9:d1:1e:56:f3:1a:6a:35:8c: 07:b8:24:9b:54:40:db:d7:ed:5f:bd:40:ea:9c:1a:b1:56:9c: 5c:9c:98:69:b9:c1:c4:0d:ee:11:f4:da:66:a5:bf:31:3f:ee: a2:35:1d:38:87:be:32:36:ed:bb:ca:34:a8:97:d6:f4:76:9f: ac:6a:8f:98:dc:52:33:a8:39:20:27:c7:18:8f:9d:14:25:75: 53:d4:cd:38:20:df:a9:db:79:12:d0:29:21:45:e5:cc:91:a1: c7:c4:98:df:82:92:a9:80:dd:e1:7b:75:e0:b9:80:18:c2:0e: 79:2f:6b:dc:8b:9b:3d:c3:b6:32:23:58:75:60:8d:08:c5:6f: c1:37:fd:f1:52:fa:65:5f:ad:76:a2:6d:03:eb:4e:b5:5b:b1: e2:8e:b1:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5 MTVBQTdEMTUwHhcNMjUwOTE3MDY0NjI2WhcNMjUwOTI0MDY0NjI2WjAYMRYwFAYD VQQDEw02OGNhNTk0Mi0zNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYsOv6Kjn+ovGehV9c7HTDUr8wDaXWRTGNiGK9cHuSQ9vGtWBK0qA+Vv33rN 59RysehHJmfgD+SVhyPanlpguLXzXA6exknseL4uKpE+37FNOccS1u3i4qDmHG4+ RlWAuHSWY1Gi2ogRErmx0Dfwmpsf0Slnzsi/jFGTeFGYpYSQp+QM6C0CkflFn+UM 59giB3VHnIzlnRpLZY8fN8yhiO4gH7SJ6M1nqpX5TAUFmYsjbU+Q/GkcSGQuqNk/ xLzcoBbzHjGgY8wPTMaw4G8HSQ0fpwrRMH686qcUShTfU4VntsdifVDclyI803xV 0h2hXaVQdWmwWbC6aW5+t8mppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfFRSj7 uR53QjBI8C6a44X+qzNTMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG2u7Zz/a+JdPIAa9CNtEODv5n/fvY5pbDLcwDOy43I34wrc40GuWa MBKFLcTKWtenZFaZPs0WZ2RSHjz9waeauoY01+xO18N4asWINEJv0Ij6jf+L1uso 55EEe7l/v9ls/JSp0R5W8xpqNYwHuCSbVEDb1+1fvUDqnBqxVpxcnJhpucHEDe4R 9Npmpb8xP+6iNR04h74yNu27yjSol9b0dp+sao+Y3FIzqDkgJ8cYj50UJXVT1M04 IN+p23kS0CkhReXMkaHHxJjfgpKpgN3he3XguYAYwg55L2vci5s9w7YyI1h1YI0I xW/BN/3xUvplX612om0D6061W7HijrHO -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:13 2025 by rpki-client