$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: tEnZ4oIi7oZ+nStTmgwvd9y1BLa4wI3PUftlreS5LqE= Subject key identifier: FB:41:1A:D6:84:0E:8D:BE:BF:83:3B:3E:55:91:6E:AE:46:55:9D:5C Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: 0128 Signing time: Wed 17 Sep 2025 05:17:34 +0000 Manifest this update: Wed 17 Sep 2025 05:17:33 +0000 Manifest next update: Wed 24 Sep 2025 05:17:33 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: nQ6l6FGeKooTTFeqNFVakov+4DWsmnGiAnhWcFJ2LZU=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: Sep 17 05:17:33 2025 GMT Not After : Sep 24 05:17:33 2025 GMT Subject: CN=68ca446e-4d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:4e:4e:42:d7:8f:54:6c:d0:00:c6:66:09: 4d:26:78:59:b7:5a:c1:0a:f1:5a:c4:5d:a4:cd:fa: 59:2d:6f:d6:30:4c:77:8d:47:22:7a:bc:e2:69:ca: 5d:0c:4c:59:2a:29:b8:b4:72:84:9e:74:cd:b9:12: 37:3e:52:54:b5:6f:94:5d:82:f4:7e:47:c6:17:df: c1:b9:b2:15:1b:55:ae:eb:d2:97:eb:e2:af:17:4b: c6:0e:3a:d9:3b:2a:fc:9f:a4:83:8b:6e:fe:e8:7c: 1c:4c:a3:e4:25:6e:6d:57:2f:95:e8:9f:4a:6b:55: bd:e4:e0:cb:b2:d4:59:93:7d:e0:5b:5b:79:b3:45: 6d:1c:43:7e:2f:4b:a7:ed:49:eb:0b:aa:08:f3:34: ef:3f:04:0e:09:09:32:a9:66:f9:b7:50:19:d2:06: 0e:be:41:c5:a1:f9:b7:db:0a:e5:da:00:7c:1c:09: 37:a8:a6:7e:00:46:ad:70:d1:e3:7e:d7:c5:b1:52: 54:45:f7:76:31:9c:88:1f:44:c4:25:2b:d7:cd:3a: 34:92:55:b0:09:c7:90:6f:bf:ab:b6:f1:4c:29:f9: 04:4e:7d:ff:e6:c9:6e:54:15:17:c0:c4:82:52:6a: 43:df:04:f6:a2:f0:ed:33:d3:3c:ab:1c:25:ab:d5: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:41:1A:D6:84:0E:8D:BE:BF:83:3B:3E:55:91:6E:AE:46:55:9D:5C X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cb:c6:64:20:23:cd:57:0f:fb:f9:8f:4a:6e:6f:1e:71:32: 9c:36:77:fc:c8:19:8b:fa:3d:f7:0f:a4:e6:81:34:4d:ca:23: 87:e9:88:7e:6f:5c:ed:e3:8a:36:c4:19:08:c8:42:cb:7b:a8: 98:a7:ae:87:10:a5:cc:1b:c6:f3:2d:57:23:65:27:3a:18:17: 32:9e:9c:77:7d:5b:1f:b5:33:9e:3e:a5:6e:bf:a9:99:47:7d: 58:d6:77:f0:a4:f9:29:0e:7a:34:46:f6:18:ee:e4:e2:0a:2c: 9b:62:dc:6f:dd:1c:38:12:1b:1f:ca:2b:80:46:59:bd:42:16: f5:c5:11:5a:c0:c0:84:f4:ef:83:5e:04:42:cd:41:ca:b6:59: 80:2f:7f:c7:a0:cf:a7:09:00:56:28:18:6f:7b:df:a2:14:21: 82:32:83:e6:b0:24:0a:26:48:a5:d1:4c:55:ab:c5:0a:3f:7a: da:3a:bb:03:89:63:cc:41:d6:45:34:b7:13:30:dd:94:20:64: af:6a:bd:1b:20:a7:d3:8b:28:30:49:44:ca:74:f3:9a:62:3f: 40:26:29:d0:69:a1:cd:40:30:70:fb:71:df:c0:00:0e:cd:66: b1:19:e3:68:c3:7c:6a:b4:86:d5:88:57:13:fb:cb:24:ba:c1: be:68:ef:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz NDYzQjgzQ0YwHhcNMjUwOTE3MDUxNzMzWhcNMjUwOTI0MDUxNzMzWjAYMRYwFAYD VQQDEw02OGNhNDQ2ZS00ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQpOTkLXj1Rs0ADGZglNJnhZt1rBCvFaxF2kzfpZLW/WMEx3jUcierziacpd DExZKim4tHKEnnTNuRI3PlJUtW+UXYL0fkfGF9/BubIVG1Wu69KX6+KvF0vGDjrZ Oyr8n6SDi27+6HwcTKPkJW5tVy+V6J9Ka1W95ODLstRZk33gW1t5s0VtHEN+L0un 7UnrC6oI8zTvPwQOCQkyqWb5t1AZ0gYOvkHFofm32wrl2gB8HAk3qKZ+AEatcNHj ftfFsVJURfd2MZyIH0TEJSvXzTo0klWwCceQb7+rtvFMKfkETn3/5sluVBUXwMSC UmpD3wT2ovDtM9M8qxwlq9U+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtBGtaE Do2+v4M7PlWRbq5GVZ1cMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZy8ZkICPNVw/7+Y9Kbm8ecTKcNnf8yBmL+j33D6TmgTRNyiOH6Yh+ b1zt44o2xBkIyELLe6iYp66HEKXMG8bzLVcjZSc6GBcynpx3fVsftTOePqVuv6mZ R31Y1nfwpPkpDno0RvYY7uTiCiybYtxv3Rw4EhsfyiuARlm9Qhb1xRFawMCE9O+D XgRCzUHKtlmAL3/HoM+nCQBWKBhve9+iFCGCMoPmsCQKJkil0UxVq8UKP3raOrsD iWPMQdZFNLcTMN2UIGSvar0bIKfTiygwSUTKdPOaYj9AJinQaaHNQDBw+3HfwAAO zWaxGeNow3xqtIbViFcT+8skusG+aO85 -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:46 2025 by rpki-client