$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: cu+16mQ42OrrBuU2/2LpH7HwnzFTD8VKh+dtbAEEIHU= Subject key identifier: 46:10:C8:EC:D1:12:A5:76:14:07:09:A1:B2:A4:70:6F:27:4E:A0:92 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 052D Signing time: Mon 08 Sep 2025 23:35:20 +0000 Manifest this update: Mon 08 Sep 2025 23:35:20 +0000 Manifest next update: Mon 15 Sep 2025 23:35:20 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: HZVVRH21xC1tM6ygw+LLGgJrLvLQDxj5B82Hc4ji3HM=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Sep 8 23:35:20 2025 GMT Not After : Sep 15 23:35:20 2025 GMT Subject: CN=68bf6838-6ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:3d:fe:54:01:10:9d:d5:c5:20:35:c0:30: d5:67:ab:8f:67:25:20:3a:2b:c3:b4:e8:4c:b0:e5: 78:44:2a:e7:1f:21:fc:75:42:74:86:7a:fd:4b:60: 65:71:55:18:0f:37:0d:18:b4:e4:e5:f9:88:7f:08: 69:b3:29:80:12:14:de:c0:9a:64:7b:62:6e:09:02: ca:0a:b0:ae:da:2d:57:c5:d4:2c:41:6f:15:69:2d: ae:81:72:01:76:70:b4:bd:58:8a:50:5d:16:cd:83: 1c:ec:75:ec:47:6b:12:a7:f3:fd:a1:04:1c:eb:2a: 0b:bc:f2:46:9b:54:b5:82:51:57:d7:1f:1e:2c:49: 47:82:2a:e4:7e:10:e0:c3:f8:5f:45:87:a3:f7:a3: da:e2:cf:35:d9:5c:b6:54:dd:1c:5b:a4:1b:89:a2: ff:36:24:70:b8:8c:d0:f2:c3:34:78:16:30:ad:49: 68:fd:3d:24:8d:be:dc:0f:8a:91:f0:6a:65:6e:b0: f7:74:85:12:4b:00:06:89:3c:9e:bf:aa:3a:a0:b9: 67:ee:10:81:be:f3:b7:8b:a6:3a:15:e9:90:22:1a: 03:2c:b9:34:c5:ec:6e:3a:36:db:b0:e3:7a:da:3c: 51:d3:1d:20:db:22:d3:3a:09:2f:97:19:15:cd:fe: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:C8:EC:D1:12:A5:76:14:07:09:A1:B2:A4:70:6F:27:4E:A0:92 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:a5:d3:60:86:26:dc:ae:2e:6b:fe:a9:6d:5c:1c:50:bc: d4:62:81:8b:db:a0:9a:55:62:1a:10:8d:3e:5b:d4:ca:74:72: ee:79:4a:73:84:08:0e:c1:74:6b:d0:e6:44:05:e7:d3:c0:4e: 99:81:8f:cf:66:a7:4d:20:7f:4f:3c:3d:31:35:ed:a9:61:ab: e7:c8:eb:86:0d:f1:3d:87:e2:af:8b:0d:96:ec:2f:e7:ec:9c: ed:62:3c:52:46:c8:3b:c7:f5:28:e0:75:90:4d:ba:8e:b5:7b: b9:3c:48:c5:ac:7f:60:69:84:c9:c4:d6:08:75:53:37:18:2d: f2:0d:9b:45:4c:6c:6b:5a:ad:eb:8b:17:b3:47:08:52:47:cc: ed:74:86:fa:ff:eb:5c:8c:21:50:2f:41:2a:31:c0:3a:9f:40: 4e:c1:40:c5:46:e1:21:38:44:12:b4:91:50:0e:31:2f:6c:03: 3f:f9:d4:7c:19:09:c7:cb:63:2d:e7:8a:7b:43:32:0a:d5:b7: a1:81:fa:56:94:b2:ce:e8:b0:62:d1:a6:a3:06:1c:b9:c7:65: 1e:f9:0c:b2:9f:4c:e4:87:66:af:9c:a0:81:d4:0c:eb:f4:6d: 51:94:86:4a:7e:21:a7:d9:01:8b:db:fe:dd:ab:69:31:86:fa: e9:ea:04:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUwOTA4MjMzNTIwWhcNMjUwOTE1MjMzNTIwWjAYMRYwFAYD VQQDEw02OGJmNjgzOC02Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SE9/lQBEJ3VxSA1wDDVZ6uPZyUgOivDtOhMsOV4RCrnHyH8dUJ0hnr9S2Bl cVUYDzcNGLTk5fmIfwhpsymAEhTewJpke2JuCQLKCrCu2i1XxdQsQW8VaS2ugXIB dnC0vViKUF0WzYMc7HXsR2sSp/P9oQQc6yoLvPJGm1S1glFX1x8eLElHgirkfhDg w/hfRYej96Pa4s812Vy2VN0cW6QbiaL/NiRwuIzQ8sM0eBYwrUlo/T0kjb7cD4qR 8GplbrD3dIUSSwAGiTyev6o6oLln7hCBvvO3i6Y6FemQIhoDLLk0xexuOjbbsON6 2jxR0x0g2yLTOgkvlxkVzf45FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYQyOzR EqV2FAcJobKkcG8nTqCSMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/qXTYIYm3K4ua/6pbVwcULzUYoGL26CaVWIaEI0+W9TKdHLueUpz hAgOwXRr0OZEBefTwE6ZgY/PZqdNIH9PPD0xNe2pYavnyOuGDfE9h+Kviw2W7C/n 7JztYjxSRsg7x/Uo4HWQTbqOtXu5PEjFrH9gaYTJxNYIdVM3GC3yDZtFTGxrWq3r ixezRwhSR8ztdIb6/+tcjCFQL0EqMcA6n0BOwUDFRuEhOEQStJFQDjEvbAM/+dR8 GQnHy2Mt54p7QzIK1behgfpWlLLO6LBi0aajBhy5x2Ue+Qyyn0zkh2avnKCB1Azr 9G1RlIZKfiGn2QGL2/7dq2kxhvrp6gRs -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:38 2025 by rpki-client