$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: sLCi+DEUYGl+H5hPV/UXyRdloYIGoGanzP3vOUqIw44= Subject key identifier: C5:16:12:66:E4:4D:F7:94:75:88:45:64:0A:21:9A:32:86:E1:5D:6D Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 365A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 359C Signing time: Sat 06 Sep 2025 07:36:48 +0000 Manifest this update: Sat 06 Sep 2025 07:36:47 +0000 Manifest next update: Sat 13 Sep 2025 07:36:47 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: J/CCfBV6bM0kTjRvfPsJck6UxCpM2KFFUEjlmAE0rrU=) 2: 3C58F0368AF411F08024C846C4F9AE02.roa (hash: zdOIg2HJpWC7OB4gSAmnf4vkZVVXqD0YrJhIL/eOn1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 07:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13914 (0x365a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Sep 6 07:36:47 2025 GMT Not After : Sep 13 07:36:47 2025 GMT Subject: CN=68bbe48f-502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:50:bd:5d:0d:ec:36:a9:76:fb:03:0d:a3: 95:4f:09:25:86:ba:15:10:d2:67:09:18:e5:53:f7: c2:67:75:fe:ee:0d:0e:7b:4c:f5:f6:f1:41:9f:84: 91:f2:8f:a4:59:24:cc:2e:05:10:e6:69:55:83:20: ea:58:ca:46:bd:42:d7:59:d6:35:40:f0:c1:77:71: 8c:e5:5e:ce:9c:58:15:37:bc:eb:15:d3:88:64:03: d7:a1:3a:fc:25:7c:60:21:dd:71:d5:f9:38:da:9c: 4d:18:67:da:de:87:76:cf:7c:0b:ef:43:2e:60:30: 0e:66:27:ed:d2:7f:51:59:1b:31:1c:b9:2f:cb:40: 42:a7:f2:cf:e5:6d:81:86:d8:7d:1a:41:27:10:12: 38:26:de:be:bb:f3:07:de:f5:3f:a6:a0:33:1d:5e: 06:ee:5b:aa:02:8b:4d:b7:ad:28:72:30:df:21:c2: 05:7d:a1:fb:d2:c6:72:09:0f:81:28:90:db:cf:34: 8f:4a:6f:7b:0d:86:22:70:2b:52:d8:4f:06:17:2f: db:88:92:df:b1:d5:1d:1e:90:68:f8:5a:76:be:4b: c6:2a:a1:cd:9e:dd:b6:e1:0e:ec:d4:d6:aa:93:e8: 40:00:e6:74:a4:a1:f9:8a:ca:33:e5:4b:a3:76:cc: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:16:12:66:E4:4D:F7:94:75:88:45:64:0A:21:9A:32:86:E1:5D:6D X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:cd:93:6f:e8:64:94:04:8c:4d:73:cf:62:4b:8c:d4:d2: aa:3d:df:92:0a:6b:ac:a0:6f:27:b5:5d:b2:15:2f:cb:15:63: 1c:36:75:52:2e:60:6c:01:91:98:df:dd:5d:bc:8d:ba:11:2a: 5b:c9:2e:56:f5:71:b2:bd:d3:db:b4:f0:d7:5f:f2:7c:58:be: 92:5b:21:f9:6b:c6:d5:1b:30:3a:8c:f9:a5:25:46:25:7e:2a: fb:d7:92:1d:5f:c3:9d:e7:6e:aa:79:51:1a:7f:18:6c:d9:f9: cc:01:26:fa:09:a2:81:79:e3:d2:1e:5b:03:15:c8:2d:44:2b: 79:10:61:64:ef:eb:72:13:d5:08:40:41:c2:bc:b6:ca:e8:47: 8c:55:92:16:60:74:43:82:83:c3:a4:9e:c8:31:20:d1:58:dc: a3:47:ff:32:17:fc:60:bc:5f:40:fd:26:28:78:dc:23:89:8f: de:1f:49:33:f3:28:c7:e0:63:f8:3d:e0:5e:4b:6f:3e:c5:68: 7e:1f:a8:28:77:85:7c:75:af:cd:ef:58:ce:4c:5c:24:70:93: d4:ef:b2:8b:47:b5:a6:1d:01:2f:bc:6c:07:49:f2:3e:02:02: d1:15:3b:5d:4f:0e:1c:9a:45:f2:77:36:c1:d6:d3:2d:b0:92: cc:ff:c0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUwOTA2MDczNjQ3WhcNMjUwOTEzMDczNjQ3WjAYMRYwFAYD VQQDEw02OGJiZTQ4Zi01MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoihQvV0N7DapdvsDDaOVTwklhroVENJnCRjlU/fCZ3X+7g0Oe0z19vFBn4SR 8o+kWSTMLgUQ5mlVgyDqWMpGvULXWdY1QPDBd3GM5V7OnFgVN7zrFdOIZAPXoTr8 JXxgId1x1fk42pxNGGfa3od2z3wL70MuYDAOZift0n9RWRsxHLkvy0BCp/LP5W2B hth9GkEnEBI4Jt6+u/MH3vU/pqAzHV4G7luqAotNt60ocjDfIcIFfaH70sZyCQ+B KJDbzzSPSm97DYYicCtS2E8GFy/biJLfsdUdHpBo+Fp2vkvGKqHNnt224Q7s1Naq k+hAAOZ0pKH5isoz5UujdsyVqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUWEmbk TfeUdYhFZAohmjKG4V1tMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRhs2Tb+hklASMTXPPYkuM1NKqPd+SCmusoG8ntV2yFS/LFWMcNnVS LmBsAZGY391dvI26ESpbyS5W9XGyvdPbtPDXX/J8WL6SWyH5a8bVGzA6jPmlJUYl fir715IdX8Od526qeVEafxhs2fnMASb6CaKBeePSHlsDFcgtRCt5EGFk7+tyE9UI QEHCvLbK6EeMVZIWYHRDgoPDpJ7IMSDRWNyjR/8yF/xgvF9A/SYoeNwjiY/eH0kz 8yjH4GP4PeBeS28+xWh+H6god4V8da/N71jOTFwkcJPU77KLR7WmHQEvvGwHSfI+ AgLRFTtdTw4cmkXydzbB1tMtsJLM/8CK -----END CERTIFICATE-----Generated at Sat Sep 6 14:25:12 2025 by rpki-client