$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: SWL212LwqLgPoFfAJd0YkJoBJN2Y8PuAYhshLtb/8DQ= Subject key identifier: 25:64:9B:D5:ED:83:F6:DB:49:C7:BF:8A:D7:71:5A:0D:90:4B:4A:62 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 018D Signing time: Mon 15 Sep 2025 03:50:40 +0000 Manifest this update: Mon 15 Sep 2025 03:50:40 +0000 Manifest next update: Mon 22 Sep 2025 03:50:40 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: sEISHSXaHlAy+1OFuevO3DNj79/nySw/4Gup7PTlXq4=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: z9EaBOoQtdVuIHEm9IdKFd2T44FBt8oNShj0hBUX4to=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 03:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Sep 15 03:50:40 2025 GMT Not After : Sep 22 03:50:40 2025 GMT Subject: CN=68c78d10-4fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:89:1c:93:78:25:a9:dc:2d:ff:bf:3c:53: c3:f7:46:a8:f0:5c:d6:59:c2:3e:d8:fa:d8:9e:9f: ae:1e:f5:1a:0f:3b:5e:25:f6:f8:25:bb:93:03:0c: 1c:83:08:9d:60:d9:4c:49:dc:89:3c:21:ef:9d:99: 8e:cb:6d:22:f0:35:6b:63:15:ed:7b:ce:e6:f8:29: b5:4a:b8:fc:fa:cd:89:a5:18:41:8f:c9:60:5b:9e: f3:8a:57:32:d9:22:5b:cf:4c:0a:45:0b:87:77:84: fb:85:19:7a:88:6e:b2:60:31:02:a7:e5:88:79:ff: 89:22:58:95:43:6b:73:00:ba:87:ec:0c:12:97:19: 0f:a7:98:87:bf:da:71:f5:2e:a8:5a:84:93:bf:12: d9:59:1e:42:23:dd:ae:7d:d9:16:eb:04:85:bb:73: 5f:94:6e:20:4e:5f:c7:ff:c8:a1:4c:e5:6e:8c:37: d0:63:5e:34:42:63:91:01:a4:c1:50:a9:2d:48:9d: b2:2e:82:e4:f6:f2:8f:ca:e2:2a:a4:96:e6:1b:3f: ac:92:70:4c:46:30:46:11:f1:88:0c:c4:be:62:bf: 2f:cc:f8:8d:60:6d:0d:6c:4f:c4:43:92:8c:f4:db: c8:8c:d8:5b:d6:66:27:a6:9c:b3:ba:8a:09:81:ce: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:64:9B:D5:ED:83:F6:DB:49:C7:BF:8A:D7:71:5A:0D:90:4B:4A:62 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f3:19:47:4d:5c:d6:65:5e:70:8f:b3:6f:a2:87:44:8c:07: df:6a:30:cb:c1:90:8e:1b:12:48:c5:b7:ea:d5:c7:00:8f:57: 26:67:4c:6f:23:aa:47:9a:f7:d2:84:e0:8f:d6:ff:80:94:94: 3f:ba:9e:40:43:1c:ae:66:f4:2b:75:3a:07:bd:4f:bf:74:fa: 6f:94:87:b1:5c:a3:39:7c:0b:03:21:8e:9f:e7:32:31:98:34: 1b:04:96:d5:cb:51:30:7b:06:da:db:8c:39:0e:88:60:f1:e1: 08:fd:00:e6:96:aa:df:e7:55:da:ed:02:8a:99:91:9f:80:59: e7:84:b2:11:46:f8:90:da:11:aa:c2:31:2f:e3:6f:11:98:7d: 53:ea:ee:e5:d6:a7:b0:aa:90:29:6a:9a:de:37:ed:07:53:26: 0d:cc:22:51:29:ba:a6:04:b0:a9:28:54:fa:ad:3e:05:ca:59: 07:ba:62:33:d9:8a:37:2b:f4:7e:a7:ea:a2:4a:47:b8:98:9a: 1c:0d:85:19:7d:a8:00:80:0d:41:83:44:01:77:68:ad:04:64: d9:df:db:f1:5b:98:3b:0f:bb:cc:79:5f:6d:69:51:aa:ca:0d: 72:64:41:af:95:46:07:2d:78:25:37:ed:61:a8:fa:5e:10:9f: 13:69:b4:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUwOTE1MDM1MDQwWhcNMjUwOTIyMDM1MDQwWjAYMRYwFAYD VQQDEw02OGM3OGQxMC00ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQOJHJN4JancLf+/PFPD90ao8FzWWcI+2PrYnp+uHvUaDzteJfb4JbuTAwwc gwidYNlMSdyJPCHvnZmOy20i8DVrYxXte87m+Cm1Srj8+s2JpRhBj8lgW57zilcy 2SJbz0wKRQuHd4T7hRl6iG6yYDECp+WIef+JIliVQ2tzALqH7AwSlxkPp5iHv9px 9S6oWoSTvxLZWR5CI92ufdkW6wSFu3NflG4gTl/H/8ihTOVujDfQY140QmORAaTB UKktSJ2yLoLk9vKPyuIqpJbmGz+sknBMRjBGEfGIDMS+Yr8vzPiNYG0NbE/EQ5KM 9NvIjNhb1mYnppyzuooJgc7FmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVkm9Xt g/bbSce/itdxWg2QS0piMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8xlHTVzWZV5wj7NvoodEjAffajDLwZCOGxJIxbfq1ccAj1cmZ0xv I6pHmvfShOCP1v+AlJQ/up5AQxyuZvQrdToHvU+/dPpvlIexXKM5fAsDIY6f5zIx mDQbBJbVy1Ewewba24w5Dohg8eEI/QDmlqrf51Xa7QKKmZGfgFnnhLIRRviQ2hGq wjEv428RmH1T6u7l1qewqpApapreN+0HUyYNzCJRKbqmBLCpKFT6rT4FylkHumIz 2Yo3K/R+p+qiSke4mJocDYUZfagAgA1Bg0QBd2itBGTZ39vxW5g7D7vMeV9taVGq yg1yZEGvlUYHLXglN+1hqPpeEJ8TabRT -----END CERTIFICATE-----Generated at Mon Sep 15 12:14:03 2025 by rpki-client