$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: r3LLMsVmhrK5Jd3Fa0dLsfMFnRY7HdI6SoqkG/INHZU= Subject key identifier: 79:AE:8B:7F:EC:47:D2:25:9E:17:6F:74:31:AC:92:43:93:3A:EF:27 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 40 Signing time: Wed 17 Sep 2025 08:13:27 +0000 Manifest this update: Wed 17 Sep 2025 08:13:26 +0000 Manifest next update: Wed 24 Sep 2025 08:13:26 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: cUPdCpeF1Y/xyOc69a8XlO+Qe3VF3ArXcnmtWEqR5dA=) 2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: FR6aYWkLCYQNBfnXMLQXknGesvRShyM8s823+eOxW1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Sep 17 08:13:26 2025 GMT Not After : Sep 24 08:13:26 2025 GMT Subject: CN=68ca6da7-3cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:1c:75:01:47:de:8a:fa:61:ae:16:61:1e: 27:b6:a8:89:10:69:cf:b9:6b:8a:bc:fa:ce:95:95: f3:10:62:7f:9b:8f:f6:e9:64:5e:db:18:f5:18:9a: 5d:b9:90:88:63:a7:c6:6b:b6:a1:28:f6:52:63:b4: eb:b0:df:ed:26:5b:dc:1f:e5:df:0d:57:ba:f6:96: 4e:8d:f9:f5:bc:2f:9c:a0:be:9c:e0:d8:1f:fc:f9: bf:e4:05:24:9f:fe:b8:fb:42:f1:de:c3:05:01:29: 38:be:12:78:b1:2a:fc:81:b2:72:5e:da:2d:23:b9: 1e:9b:fe:fd:18:84:3e:cd:66:bb:76:c6:04:10:2b: 8b:28:cc:4a:e4:27:1f:22:48:a6:0b:d4:92:4d:5a: ce:13:e6:6a:9f:48:85:7e:44:ab:66:3c:3d:5b:c7: 64:0a:35:c9:b0:22:7f:19:d1:7c:d3:41:a1:8e:3e: 5f:37:cc:86:f3:40:96:d5:17:6d:a2:04:ea:ee:87: 73:64:45:30:1e:fa:dc:7b:94:d7:c5:4a:90:b6:45: 17:ba:5f:0b:37:fb:6a:de:05:ba:95:12:ff:b9:5d: 97:dd:c5:e7:3a:a1:62:cd:50:ac:9a:cb:f9:93:52: 74:cb:8a:62:e4:ec:a3:e9:aa:d9:00:11:35:3c:30: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:8B:7F:EC:47:D2:25:9E:17:6F:74:31:AC:92:43:93:3A:EF:27 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c0:8b:b8:1c:2f:a5:36:86:f6:41:45:8c:35:62:d2:ec:58: 30:b0:81:71:a3:fc:8b:79:cc:a3:89:f6:e5:71:0c:5d:57:79: af:de:f3:66:2f:a7:47:8a:53:bb:4d:f9:f8:52:45:81:36:02: b4:d4:6e:0f:b9:78:a6:a5:c5:99:6d:ed:5e:c5:dd:0f:aa:d5: 97:eb:3d:2a:d0:29:c9:64:6d:22:c7:8b:e8:30:ce:2c:71:a6: 7f:92:48:17:06:d6:99:f4:25:07:b1:c5:8d:43:0b:65:f3:63: d3:89:e6:c0:df:d6:43:2d:c8:3f:4e:28:97:2a:40:f5:ec:05: 14:90:03:aa:7e:53:ec:83:23:92:51:73:97:57:f3:a4:90:e4: 1e:8d:52:33:a5:dc:eb:30:6e:c1:23:46:b4:b8:c0:c0:f7:14: e9:dc:09:d0:99:dd:6f:55:61:79:0c:cf:21:26:7f:0b:a7:5c: 2b:a3:46:ac:aa:02:e0:80:78:5c:25:d5:e3:d7:02:a9:f1:82: 31:1c:f2:dd:8b:8c:9f:ad:05:41:cc:88:35:bb:78:3a:50:a6: d3:e9:77:be:01:b9:51:03:de:31:12:f1:dc:81:22:9f:d3:85: d6:b2:78:d2:b4:28:0f:61:a6:f8:7a:79:eb:23:46:e5:df:f4: 25:78:05:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTA5MTcwODEzMjZaFw0yNTA5MjQwODEzMjZaMBgxFjAUBgNV BAMTDTY4Y2E2ZGE3LTNjZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChHRx1AUfeivphrhZhHie2qIkQac+5a4q8+s6VlfMQYn+bj/bpZF7bGPUYml25 kIhjp8ZrtqEo9lJjtOuw3+0mW9wf5d8NV7r2lk6N+fW8L5ygvpzg2B/8+b/kBSSf /rj7QvHewwUBKTi+EnixKvyBsnJe2i0juR6b/v0YhD7NZrt2xgQQK4sozErkJx8i SKYL1JJNWs4T5mqfSIV+RKtmPD1bx2QKNcmwIn8Z0XzTQaGOPl83zIbzQJbVF22i BOruh3NkRTAe+tx7lNfFSpC2RRe6Xws3+2reBbqVEv+5XZfdxec6oWLNUKyay/mT UnTLimLk7KPpqtkAETU8MMzZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUea6Lf+xH 0iWeF290MaySQ5M67ycwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTAi7gcL6U2hvZBRYw1YtLsWDCwgXGj/It5zKOJ9uVxDF1Xea/e82Yv p0eKU7tN+fhSRYE2ArTUbg+5eKalxZlt7V7F3Q+q1ZfrPSrQKclkbSLHi+gwzixx pn+SSBcG1pn0JQexxY1DC2XzY9OJ5sDf1kMtyD9OKJcqQPXsBRSQA6p+U+yDI5JR c5dX86SQ5B6NUjOl3OswbsEjRrS4wMD3FOncCdCZ3W9VYXkMzyEmfwunXCujRqyq AuCAeFwl1ePXAqnxgjEc8t2LjJ+tBUHMiDW7eDpQptPpd74BuVED3jES8dyBIp/T hdayeNK0KA9hpvh6eesjRuXf9CV4BdE= -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:44 2025 by rpki-client