$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: RAEjEOdzaX5SG3uO6v2MdDgfoO4Yo0qJ724kdFI1ktM= Subject key identifier: 75:6E:15:40:FA:18:F2:5A:73:C0:71:E7:DE:1D:FB:97:CB:39:D3:66 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: 011C Signing time: Wed 17 Sep 2025 05:35:56 +0000 Manifest this update: Wed 17 Sep 2025 05:35:56 +0000 Manifest next update: Wed 24 Sep 2025 05:35:56 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: yvQ1MC1egcsDrh7Yq7bny9c8Yc1JpWQWP9JgxbUKppY=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Sep 17 05:35:56 2025 GMT Not After : Sep 24 05:35:56 2025 GMT Subject: CN=68ca48bc-4e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:86:ba:bc:d0:1b:b2:19:73:7a:b5:6c:ff: 90:6a:76:f0:1c:b0:a5:bd:e6:97:d5:34:e7:8d:31: e2:fb:4b:cb:be:7b:ea:8d:0a:3b:68:71:86:bb:04: d2:dd:09:e1:9a:f0:d3:96:ef:4b:88:c1:1a:02:50: 9c:88:ef:78:18:ba:6b:72:27:4b:b1:d5:6a:1e:14: dd:66:b1:47:ed:73:e6:99:e2:d9:8e:63:15:f2:f6: 6a:23:21:0f:34:0e:7a:5c:59:bf:0f:03:3a:df:07: 80:f4:04:5b:1e:2c:17:3a:10:1d:47:6a:78:dd:25: 1b:40:2d:ee:3a:83:40:d9:71:ad:a8:93:51:f5:2b: 5c:ad:1c:75:3e:3e:14:75:93:4d:8c:88:5e:43:bb: 86:df:0e:4f:6a:71:60:29:ea:c7:b5:87:b7:02:62: d9:c4:75:de:55:e2:b3:e8:b1:72:f6:91:00:6d:bd: 51:0c:b6:36:ba:c3:df:67:04:6a:98:33:67:b4:75: cc:80:f9:22:ce:f8:61:ad:da:8b:fe:38:8f:57:fb: 65:86:6d:be:8e:fa:66:4b:88:55:8c:c8:20:18:e8: 7e:5b:86:18:70:96:23:f2:60:a4:4f:cd:53:be:12: e0:56:c2:53:80:24:6d:ac:7f:18:52:b8:5d:66:75: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:15:40:FA:18:F2:5A:73:C0:71:E7:DE:1D:FB:97:CB:39:D3:66 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b6:5a:f9:3e:16:a8:84:e0:f5:fd:02:55:cb:b6:3d:a1:54: cd:e9:f7:02:cd:0f:0c:3f:cb:7e:9e:65:67:f7:df:5b:9e:1a: 10:e5:f1:b8:74:4c:39:e8:56:1d:af:56:04:b2:2a:77:80:5d: 53:a9:e9:e2:b2:43:45:1e:e0:d9:5b:eb:88:46:54:d4:71:d1: bf:f4:96:79:bb:68:6c:60:4a:44:5c:34:76:cd:c2:47:ad:aa: 12:02:45:1f:45:64:59:f8:0a:b1:8a:a5:72:2a:bd:36:5a:cc: 77:65:8f:1a:7b:8c:40:05:7d:eb:86:11:6a:3d:a8:b8:38:33: c6:e5:ee:96:b2:12:c9:1d:8f:c9:73:94:94:ac:84:65:18:f2: c7:b9:d0:a6:9e:42:18:fb:aa:b7:6a:6a:ff:54:5e:f7:60:5d: 7a:e6:83:08:2b:a7:de:21:ab:e5:14:24:f7:86:1f:4f:6c:39: af:a7:38:5c:34:05:21:0f:57:31:ec:6a:32:74:37:79:ea:de: 39:1c:44:15:65:8a:82:fb:93:85:72:1b:ee:61:95:b3:90:18: fe:95:e3:76:7a:56:84:b3:37:05:49:14:1b:3f:e8:31:72:9c: b0:d7:69:a0:28:49:f2:68:b9:05:99:4d:01:8e:fd:86:7c:88: 38:35:e5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwOTE3MDUzNTU2WhcNMjUwOTI0MDUzNTU2WjAYMRYwFAYD VQQDEw02OGNhNDhiYy00ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMyGurzQG7IZc3q1bP+QanbwHLClveaX1TTnjTHi+0vLvnvqjQo7aHGGuwTS 3QnhmvDTlu9LiMEaAlCciO94GLprcidLsdVqHhTdZrFH7XPmmeLZjmMV8vZqIyEP NA56XFm/DwM63weA9ARbHiwXOhAdR2p43SUbQC3uOoNA2XGtqJNR9StcrRx1Pj4U dZNNjIheQ7uG3w5PanFgKerHtYe3AmLZxHXeVeKz6LFy9pEAbb1RDLY2usPfZwRq mDNntHXMgPkizvhhrdqL/jiPV/tlhm2+jvpmS4hVjMggGOh+W4YYcJYj8mCkT81T vhLgVsJTgCRtrH8YUrhdZnVjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVuFUD6 GPJac8Bx594d+5fLOdNmMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDtlr5PhaohOD1/QJVy7Y9oVTN6fcCzQ8MP8t+nmVn999bnhoQ5fG4 dEw56FYdr1YEsip3gF1TqeniskNFHuDZW+uIRlTUcdG/9JZ5u2hsYEpEXDR2zcJH raoSAkUfRWRZ+AqxiqVyKr02Wsx3ZY8ae4xABX3rhhFqPai4ODPG5e6WshLJHY/J c5SUrIRlGPLHudCmnkIY+6q3amr/VF73YF165oMIK6feIavlFCT3hh9PbDmvpzhc NAUhD1cx7GoydDd56t45HEQVZYqC+5OFchvuYZWzkBj+leN2elaEszcFSRQbP+gx cpyw12mgKEnyaLkFmU0Bjv2GfIg4NeV/ -----END CERTIFICATE-----Generated at Fri Sep 19 01:01:00 2025 by rpki-client