$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: kC7kWIP1cs/tdh5IjHEiADNBladsKRo8NTfgzfCp8DY= Subject key identifier: 2E:08:78:A6:DF:07:C1:D3:4D:A6:AB:3A:51:5C:BD:98:65:3E:78:07 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FE1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0FD8 Signing time: Sat 06 Sep 2025 17:36:32 +0000 Manifest this update: Sat 06 Sep 2025 17:36:32 +0000 Manifest next update: Sat 13 Sep 2025 17:36:32 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: gSeIRpYXvKYYzphk8Xg0Jt+gpWqyFiDPJC91V6KE0pU=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4065 (0xfe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Sep 6 17:36:32 2025 GMT Not After : Sep 13 17:36:32 2025 GMT Subject: CN=68bc7120-ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:69:ec:6a:a0:dc:3a:ae:de:ec:22:f5:3f: 43:0e:a5:01:1d:d3:82:6f:8a:c6:80:b0:6a:18:68: f0:30:dc:ff:41:95:f8:14:6d:0b:06:3e:fe:3b:0a: 73:0a:f6:04:7f:fc:0a:e3:43:c9:05:bf:78:e5:f7: e3:13:fd:93:df:8d:25:3b:50:ae:84:e2:8a:84:60: ad:d7:08:8b:3e:da:61:c1:0b:91:86:8a:4d:c7:25: cf:83:a9:6b:a5:1f:7f:4b:e2:6e:91:f4:e7:d3:a8: 4d:89:9a:ea:e0:27:3d:83:32:4c:75:0e:93:3d:e4: cb:22:fd:67:50:3a:ee:9a:57:ea:55:08:c2:9e:2c: 09:34:20:6f:c3:4e:48:76:c0:8d:62:fd:b4:a5:46: f9:37:84:ef:ef:69:55:d2:32:d7:c5:34:d9:ee:ff: d0:b2:ca:1e:ca:29:8b:e0:97:e2:f8:61:98:c8:30: 76:00:9b:f2:75:bd:fa:db:09:c9:b0:b0:40:51:0e: 48:25:b1:2d:10:63:67:42:bd:e7:15:67:11:82:5e: 79:a4:e7:7d:2a:8a:16:6f:f9:f8:25:f0:6e:d4:50: f7:8a:23:b9:64:64:d0:c0:1f:0b:e4:ee:00:8d:5b: 68:de:f8:88:c3:32:38:04:c6:c8:cf:36:14:b3:24: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:78:A6:DF:07:C1:D3:4D:A6:AB:3A:51:5C:BD:98:65:3E:78:07 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:b1:cf:88:96:d0:07:fe:d9:32:39:64:e3:95:21:c3:78:5c: c1:8d:13:e0:f2:17:e1:da:04:2f:e1:e7:00:63:66:42:24:fd: ac:38:20:13:10:52:7f:7c:25:ea:92:e2:56:1f:88:75:b5:85: 36:fa:ae:07:1d:6d:06:df:68:da:b3:42:b0:42:05:ee:f5:08: 74:1e:54:58:6e:86:2b:41:94:36:09:05:4c:2c:86:4d:c9:35: 6c:c0:19:5b:85:6c:12:2a:c4:04:f2:ae:d0:b6:41:07:02:6e: ed:71:70:6c:d2:66:f3:16:fa:b5:21:a3:12:62:61:c9:2b:fb: b0:38:0e:d7:ea:2b:fd:ce:08:d0:d9:5d:3e:75:88:cf:9c:53: 58:a5:a8:cb:51:9c:d5:05:10:f1:be:ad:de:ed:ae:7b:2c:4d: 84:2d:fb:5b:9c:4e:6f:cd:c7:08:40:ed:c9:f7:af:27:5c:a9: 72:ba:28:82:4c:b8:b8:f2:7b:4d:b8:07:96:ae:42:ad:2b:9b: ca:5c:a4:37:ae:78:34:0e:b0:6b:d6:82:7c:ca:57:25:7a:47: d0:a3:5e:e2:66:98:93:98:54:dd:a3:56:4c:a5:ed:0f:ad:2f: 0f:c9:cd:74:e2:bc:4a:96:0d:57:ed:60:43:e9:b7:43:d9:a3: 71:91:71:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUwOTA2MTczNjMyWhcNMjUwOTEzMTczNjMyWjAYMRYwFAYD VQQDEw02OGJjNzEyMC1lZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbpp7Gqg3Dqu3uwi9T9DDqUBHdOCb4rGgLBqGGjwMNz/QZX4FG0LBj7+Owpz CvYEf/wK40PJBb945ffjE/2T340lO1CuhOKKhGCt1wiLPtphwQuRhopNxyXPg6lr pR9/S+JukfTn06hNiZrq4Cc9gzJMdQ6TPeTLIv1nUDrumlfqVQjCniwJNCBvw05I dsCNYv20pUb5N4Tv72lV0jLXxTTZ7v/QssoeyimL4Jfi+GGYyDB2AJvydb362wnJ sLBAUQ5IJbEtEGNnQr3nFWcRgl55pOd9KooWb/n4JfBu1FD3iiO5ZGTQwB8L5O4A jVto3viIwzI4BMbIzzYUsyTttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4IeKbf B8HTTaarOlFcvZhlPngHMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFsc+IltAH/tkyOWTjlSHDeFzBjRPg8hfh2gQv4ecAY2ZCJP2sOCAT EFJ/fCXqkuJWH4h1tYU2+q4HHW0G32jas0KwQgXu9Qh0HlRYboYrQZQ2CQVMLIZN yTVswBlbhWwSKsQE8q7QtkEHAm7tcXBs0mbzFvq1IaMSYmHJK/uwOA7X6iv9zgjQ 2V0+dYjPnFNYpajLUZzVBRDxvq3e7a57LE2ELftbnE5vzccIQO3J968nXKlyuiiC TLi48ntNuAeWrkKtK5vKXKQ3rng0DrBr1oJ8ylclekfQo17iZpiTmFTdo1ZMpe0P rS8Pyc104rxKlg1X7WBD6bdD2aNxkXHe -----END CERTIFICATE-----Generated at Sat Sep 6 21:39:41 2025 by rpki-client