$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: wNnKRdIKkC66dFU4FODhwBlbQPWuN2tmeN3tlAARvLc= Subject key identifier: 3D:E8:E9:8A:56:83:83:F2:6A:CE:A0:C7:7C:EC:98:5F:5F:09:58:BD Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 1268 Signing time: Thu 18 Sep 2025 17:15:39 +0000 Manifest this update: Thu 18 Sep 2025 17:15:38 +0000 Manifest next update: Thu 25 Sep 2025 17:15:38 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: V1wyXQ7jJAuGYfEV5BjYEzwMmeTmIqjmx6VKERLZ6SY=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: u2n7hXJfpPkswx+8ZUw3IUUcjyPvy2JG1QnFE+FNubg=) 3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: EhJYlBjQzArjJUepcPMKlhW0SwABK8otVcs5MS+goNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4736 (0x1280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Sep 18 17:15:38 2025 GMT Not After : Sep 25 17:15:38 2025 GMT Subject: CN=68cc3e3b-a95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:e5:2f:22:2e:64:41:78:25:a7:ba:e0:09: b3:90:f7:46:e4:34:e3:f4:02:34:1a:45:22:47:1f: 51:f2:77:c5:78:6a:3b:4c:f8:2c:01:bf:d4:be:df: 17:a1:b5:02:53:4f:9d:7c:0e:1c:71:c3:96:5c:d3: 31:dd:bc:57:8c:23:20:5f:36:03:e7:0d:ac:bf:67: c0:ea:f3:e6:81:e3:d8:c8:a7:eb:b9:3c:bf:19:41: 16:a2:7c:48:4c:fc:16:be:5f:d7:ca:b3:9c:7d:f4: 0e:34:29:a8:94:3f:c9:7f:27:dd:37:03:b0:32:d8: 86:c2:d3:61:15:58:98:10:1a:92:a5:45:bd:4d:92: 05:1b:5b:80:e8:69:7a:51:3a:03:14:ee:9b:93:49: 8d:6e:4b:bd:9a:40:43:35:ed:1a:95:71:01:09:7b: 91:81:d1:f8:f8:5b:3d:9c:ed:3c:18:7c:98:93:e9: 5a:42:b7:43:6b:65:5c:6f:25:7b:fc:47:81:49:80: f4:81:85:42:4f:3b:06:85:86:14:21:18:2a:53:31: 60:99:be:b6:68:4c:90:59:2e:83:50:0f:d1:d1:9b: d2:0d:e3:98:fa:e0:01:9d:04:83:47:44:b4:1c:84: 8c:4f:68:e8:fc:b4:ae:b4:f5:c1:56:a8:95:49:b0: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E8:E9:8A:56:83:83:F2:6A:CE:A0:C7:7C:EC:98:5F:5F:09:58:BD X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e7:8b:a3:88:59:52:6a:ad:65:8e:fe:ed:97:2e:6d:a5:88: 65:a1:ac:45:b6:5c:b8:d2:ac:2e:94:de:56:11:77:47:22:4d: 3e:6a:d7:1c:b3:5e:3a:fc:28:e4:90:d8:00:31:6f:3d:c4:aa: b1:a1:3f:a3:31:27:8c:bb:75:09:e0:8a:ce:9b:07:7f:5d:df: 23:1c:eb:ce:0f:f7:a5:16:ee:0b:79:df:6c:73:fe:0a:97:b8: 09:32:75:e6:cb:06:f4:45:ff:67:10:45:2d:ca:83:67:7c:2b: c0:e7:5a:f0:59:1b:7f:58:35:6e:cd:3b:f7:8b:9e:37:f1:54: ff:fd:70:38:16:34:6e:86:c4:db:9b:e4:dc:55:90:d4:3e:f5: 08:38:dc:5b:73:45:da:9a:d7:6e:1b:01:e0:c3:97:1b:d4:ba: 16:96:b5:43:c0:c4:c7:89:31:e6:a0:9b:f5:45:2f:fb:6e:2e: c1:fc:2a:3d:73:8a:a6:75:4d:b7:62:15:c9:65:1a:41:14:20: e8:b3:f0:38:f4:be:1b:2e:47:58:59:9e:74:df:66:9e:07:35: 91:f1:3c:3a:0e:ce:23:62:46:68:3e:80:01:bb:c6:a0:bd:54: 25:82:13:01:f2:30:ec:ce:ac:30:d7:00:77:42:e8:c9:e8:a4: c0:c1:61:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjUwOTE4MTcxNTM4WhcNMjUwOTI1MTcxNTM4WjAYMRYwFAYD VQQDEw02OGNjM2UzYi1hOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gflLyIuZEF4Jae64AmzkPdG5DTj9AI0GkUiRx9R8nfFeGo7TPgsAb/Uvt8X obUCU0+dfA4cccOWXNMx3bxXjCMgXzYD5w2sv2fA6vPmgePYyKfruTy/GUEWonxI TPwWvl/XyrOcffQONCmolD/JfyfdNwOwMtiGwtNhFViYEBqSpUW9TZIFG1uA6Gl6 UToDFO6bk0mNbku9mkBDNe0alXEBCXuRgdH4+Fs9nO08GHyYk+laQrdDa2VcbyV7 /EeBSYD0gYVCTzsGhYYUIRgqUzFgmb62aEyQWS6DUA/R0ZvSDeOY+uABnQSDR0S0 HISMT2jo/LSutPXBVqiVSbCD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3o6YpW g4Pyas6gx3zsmF9fCVi9MB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA54ujiFlSaq1ljv7tly5tpYhloaxFtly40qwulN5WEXdHIk0+atcc s146/CjkkNgAMW89xKqxoT+jMSeMu3UJ4IrOmwd/Xd8jHOvOD/elFu4Led9sc/4K l7gJMnXmywb0Rf9nEEUtyoNnfCvA51rwWRt/WDVuzTv3i5438VT//XA4FjRuhsTb m+TcVZDUPvUIONxbc0XamtduGwHgw5cb1LoWlrVDwMTHiTHmoJv1RS/7bi7B/Co9 c4qmdU23YhXJZRpBFCDos/A49L4bLkdYWZ5032aeBzWR8Tw6Ds4jYkZoPoABu8ag vVQlghMB8jDszqww1wB3QujJ6KTAwWE1 -----END CERTIFICATE-----Generated at Thu Sep 18 21:58:17 2025 by rpki-client