$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json) Hash identifier: osuwT1mkjOIsitZqf1He1uEg4Ulzl3jDUUQ7FZ05Nio= Subject key identifier: 26:2A:22:0F:5E:1A:3B:19:FE:B8:29:92:93:35:7F:0C:27:48:63:71 Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft Manifest number: 03C4 Signing time: Wed 17 Sep 2025 01:08:14 +0000 Manifest this update: Wed 17 Sep 2025 01:08:14 +0000 Manifest next update: Wed 24 Sep 2025 01:08:14 +0000 Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: 3715S8hdSky2n24Eyccx4C4k1NyInsTHC34rl2ww0do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194040, serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Validity Not Before: Sep 17 01:08:14 2025 GMT Not After : Sep 24 01:08:14 2025 GMT Subject: CN=68ca09fe-3e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:eb:81:b2:34:f9:ae:de:3a:49:33:bf:29:e6: 65:02:5d:22:dc:d6:93:25:8a:8c:07:09:90:63:5b: ac:1c:be:10:cf:ae:84:ab:e5:70:4d:24:9c:66:69: 62:1f:fd:9e:74:d1:06:21:23:79:fc:d2:4b:0b:0b: ef:ec:2b:37:f5:16:8c:36:fa:af:74:6f:92:6e:18: 2e:9f:d9:9d:43:2e:9a:3d:f9:71:f6:e0:42:80:80: 9b:1d:21:1a:84:5f:11:1e:9c:a8:76:06:44:d4:42: 96:fb:24:53:2c:e5:6c:5a:21:d5:cf:b9:57:3d:89: 1b:78:85:c6:ae:6e:7c:c1:84:38:b2:89:20:75:3b: c6:27:f7:24:ae:26:e7:01:3c:b7:16:f6:81:6f:36: 92:77:2d:45:70:ff:d4:e4:da:28:f3:00:0b:9b:0d: af:75:de:6f:de:da:2c:c4:ac:b3:02:ed:8a:aa:b8: d8:88:0f:23:7b:40:b5:a1:21:6a:46:c4:50:f4:93: c7:3b:bb:a1:08:f5:7e:3c:e8:29:42:22:01:4b:dd: c3:0d:fb:83:63:74:c5:9f:76:14:a1:5a:f5:a6:0d: 37:45:7f:0b:7b:de:bf:c3:cc:d5:2e:db:3f:a8:f9: 10:a2:f9:d5:59:69:85:83:5a:8b:1a:4c:45:eb:87: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:22:0F:5E:1A:3B:19:FE:B8:29:92:93:35:7F:0C:27:48:63:71 X509v3 Authority Key Identifier: keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:d1:4b:ba:ec:ec:3f:d5:81:b6:80:6a:c1:13:78:00:0a: fd:de:8c:4f:11:c9:0d:4d:e9:85:55:87:25:c9:f5:aa:bf:e1: e5:4b:55:32:76:ac:92:29:20:50:77:19:10:58:21:34:9f:ce: 3c:e2:3f:71:84:41:c4:17:5e:82:92:fb:ac:61:34:87:3d:2b: d6:1c:71:5d:dc:c3:61:d7:a8:d2:3f:f4:be:b6:d6:03:6b:0d: ed:b7:29:bc:74:72:b3:5b:70:39:8c:78:f5:05:fe:79:dd:b6: b0:c1:97:b5:7f:be:10:b9:84:a3:df:ae:1c:c8:73:01:e6:66: cd:43:13:94:bf:58:71:b9:0f:f0:59:af:fb:2c:29:20:e7:25: 55:fc:9a:85:0c:60:a8:bb:9d:ae:82:68:79:4d:50:a8:26:72: d4:33:10:97:53:a7:ae:7e:b1:ed:c3:26:20:cc:72:05:ca:b8: 8a:32:06:4d:7f:6d:b0:fa:14:af:3a:4d:50:20:a2:dd:91:a5: 91:6f:51:c4:35:e6:88:14:1b:ec:36:2c:42:65:e1:c6:3a:2b: 77:2c:e5:09:31:93:67:69:fb:dd:bb:7f:6f:50:5b:41:70:b5: be:9a:59:08:44:2c:02:44:5d:e5:9c:dc:b5:e6:a4:17:3c:c4: 86:22:1b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwNDAxMTAvBgNVBAUTKEEwN0NEM0QxMDIxQTU4QzI0MEExMjEzNzQwMEI5N0Ix OEI3OTk4RDAwHhcNMjUwOTE3MDEwODE0WhcNMjUwOTI0MDEwODE0WjAYMRYwFAYD VQQDEw02OGNhMDlmZS0zZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uuBsjT5rt46STO/KeZlAl0i3NaTJYqMBwmQY1usHL4Qz66Eq+VwTSScZmli H/2edNEGISN5/NJLCwvv7Cs39RaMNvqvdG+Sbhgun9mdQy6aPflx9uBCgICbHSEa hF8RHpyodgZE1EKW+yRTLOVsWiHVz7lXPYkbeIXGrm58wYQ4sokgdTvGJ/ckribn ATy3FvaBbzaSdy1FcP/U5Noo8wALmw2vdd5v3tosxKyzAu2KqrjYiA8je0C1oSFq RsRQ9JPHO7uhCPV+POgpQiIBS93DDfuDY3TFn3YUoVr1pg03RX8Le96/w8zVLts/ qPkQovnVWWmFg1qLGkxF64cMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYqIg9e GjsZ/rgpkpM1fwwnSGNxMB8GA1UdIwQYMBaAFKB809ECGljCQKEhN0ALl7GLeZjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA0MC85QjA0QTBGMkEz NDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdNSkFvU0UzUUF1WHNZdDVt TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29IelQwUUlhV01KQW9TRTNRQXVYc1l0NW1OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDA0MC85QjA0QTBGMkEzNDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdN SkFvU0UzUUF1WHNZdDVtTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa6dFLuuzsP9WBtoBqwRN4AAr93oxPEckNTemFVYclyfWqv+HlS1Uy dqySKSBQdxkQWCE0n8484j9xhEHEF16CkvusYTSHPSvWHHFd3MNh16jSP/S+ttYD aw3ttym8dHKzW3A5jHj1Bf553bawwZe1f74QuYSj364cyHMB5mbNQxOUv1hxuQ/w Wa/7LCkg5yVV/JqFDGCou52ugmh5TVCoJnLUMxCXU6eufrHtwyYgzHIFyriKMgZN f22w+hSvOk1QIKLdkaWRb1HENeaIFBvsNixCZeHGOit3LOUJMZNnafvdu39vUFtB cLW+mlkIRCwCRF3lnNy15qQXPMSGIhvI -----END CERTIFICATE-----Generated at Thu Sep 18 19:14:47 2025 by rpki-client