$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json) Hash identifier: PM8dwYVTchNbEVNzFm+Rn3oYxDnZXwRmskyX1ACO17Q= Subject key identifier: C1:A0:11:CC:E3:8C:14:2B:C8:92:C9:11:EB:3F:07:F0:5D:79:51:79 Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft Manifest number: 0796 Signing time: Thu 18 Sep 2025 21:43:47 +0000 Manifest this update: Thu 18 Sep 2025 21:43:46 +0000 Manifest next update: Thu 25 Sep 2025 21:43:46 +0000 Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: ZkdZv0BMNoXCj+aql3pIPlQBcAySRXL159XXhVK+SU8=) 2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E Validity Not Before: Sep 18 21:43:46 2025 GMT Not After : Sep 25 21:43:46 2025 GMT Subject: CN=68cc7d13-aedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:26:06:a3:0b:a7:ab:92:d6:00:53:c6:fd:ce: a9:1a:84:2e:08:b8:68:34:2a:a4:e6:32:22:96:14: 62:1d:e9:08:c4:cb:ca:eb:9b:d9:8d:ea:f3:a6:cd: 89:fe:9d:83:20:62:57:9f:7a:ba:f4:70:24:a3:df: d2:2d:0f:c6:fa:24:e9:f1:d5:65:c3:82:a0:51:4a: 7d:d6:c9:86:a3:78:e7:ca:84:ed:07:6e:2f:42:d1: dc:44:12:08:22:d2:dd:07:d1:3b:90:9a:f4:b1:a3: 58:45:68:69:33:d1:70:69:35:19:03:76:6e:86:38: 71:39:a4:24:25:1e:cd:54:d9:e2:09:6f:7b:01:a8: 8e:cb:ab:00:fe:6f:2c:ab:56:f4:7c:5a:b0:61:af: 66:2c:28:42:40:ce:57:32:b1:cb:c8:7b:62:63:d7: 9d:22:fe:16:c3:97:2d:45:6e:fd:52:55:9a:d8:0b: a0:f1:7f:48:71:50:13:85:e7:94:1a:bf:21:6b:be: 80:98:81:3c:10:ec:48:8c:a7:86:13:ca:6b:cc:62: f3:3a:83:e1:b4:51:68:73:9e:62:78:f7:eb:f3:f2: 33:f8:e8:ad:5c:3d:fd:7a:d4:61:ce:21:64:83:6e: ca:75:a1:6f:fd:63:56:10:db:bb:7d:7b:ee:00:d1: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A0:11:CC:E3:8C:14:2B:C8:92:C9:11:EB:3F:07:F0:5D:79:51:79 X509v3 Authority Key Identifier: keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1c:72:93:c9:af:7b:29:de:5c:e9:30:fb:04:f5:f7:ac:29: 2b:55:32:4c:39:0b:51:35:c2:8c:41:1e:29:c6:15:78:b3:bc: ad:22:40:20:96:28:44:56:df:f2:e4:3e:45:ae:0d:12:14:19: 6f:46:e7:a6:e3:bb:6a:36:31:dc:55:9a:70:89:a5:58:2b:39: b3:d7:73:99:0f:eb:d9:7d:b7:99:41:54:06:1b:52:86:64:a0: b6:36:af:dd:13:8e:8c:12:ac:28:c9:a8:fb:db:fc:05:ac:2b: 8d:6b:83:60:0f:4b:70:ab:c0:2f:13:75:6f:2a:7d:5a:55:5e: bf:7a:ff:53:25:80:40:1b:a8:b9:e0:08:6d:52:f9:82:1c:48: 95:eb:96:48:0e:e6:b9:b7:4b:e6:86:24:22:d9:7e:30:95:21: 78:ad:b8:90:0e:5c:ce:86:eb:d3:16:0d:b6:57:1d:0b:e6:61: 4c:bd:fa:a6:50:2b:89:55:eb:81:27:61:c5:ce:d7:e6:e9:88: 3b:17:c0:52:8b:1f:25:79:7b:6e:aa:25:80:10:13:bc:89:f4: 86:a2:96:af:28:ad:f3:a3:d9:5e:26:65:dd:99:50:22:9b:2b: 1a:64:56:9c:e8:f7:59:2e:97:d6:06:7d:6a:d0:73:4e:86:c8: ca:23:bf:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw NDY3QzU3MUUwHhcNMjUwOTE4MjE0MzQ2WhcNMjUwOTI1MjE0MzQ2WjAYMRYwFAYD VQQDEw02OGNjN2QxMy1hZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CYGowunq5LWAFPG/c6pGoQuCLhoNCqk5jIilhRiHekIxMvK65vZjerzps2J /p2DIGJXn3q69HAko9/SLQ/G+iTp8dVlw4KgUUp91smGo3jnyoTtB24vQtHcRBII ItLdB9E7kJr0saNYRWhpM9FwaTUZA3ZuhjhxOaQkJR7NVNniCW97AaiOy6sA/m8s q1b0fFqwYa9mLChCQM5XMrHLyHtiY9edIv4Ww5ctRW79UlWa2Aug8X9IcVATheeU Gr8ha76AmIE8EOxIjKeGE8przGLzOoPhtFFoc55iePfr8/Iz+OitXD39etRhziFk g27KdaFv/WNWENu7fXvuANG0dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGgEczj jBQryJLJEes/B/BdeVF5MB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI X2pwV0hqajBlNVVFWjhWeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAHHKTya97Kd5c6TD7BPX3rCkrVTJMOQtRNcKMQR4pxhV4s7ytIkAg lihEVt/y5D5Frg0SFBlvRuem47tqNjHcVZpwiaVYKzmz13OZD+vZfbeZQVQGG1KG ZKC2Nq/dE46MEqwoyaj72/wFrCuNa4NgD0twq8AvE3VvKn1aVV6/ev9TJYBAG6i5 4AhtUvmCHEiV65ZIDua5t0vmhiQi2X4wlSF4rbiQDlzOhuvTFg22Vx0L5mFMvfqm UCuJVeuBJ2HFztfm6Yg7F8BSix8leXtuqiWAEBO8ifSGopavKK3zo9leJmXdmVAi mysaZFac6PdZLpfWBn1q0HNOhsjKI78x -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:50 2025 by rpki-client