$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: sn+ng0WyFgpzmsm5KyGtHOVI/SpmH2AIAjpDXm96X20= Subject key identifier: 5D:5F:8F:98:E3:C6:EF:60:14:7B:F9:B1:08:60:CB:26:C7:82:50:18 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 01E9 Signing time: Wed 17 Sep 2025 03:06:38 +0000 Manifest this update: Wed 17 Sep 2025 03:06:37 +0000 Manifest next update: Wed 24 Sep 2025 03:06:37 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: TIJeIxiqnmz9KHqUCcb57eYiJp9e8/RQ99dDYaR9HUM=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Sep 17 03:06:37 2025 GMT Not After : Sep 24 03:06:37 2025 GMT Subject: CN=68ca25bd-4e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:01:c5:cb:fd:9e:61:1d:33:46:8c:8d:3b: 49:72:c4:96:d0:45:bc:ee:11:ab:81:b3:10:b3:1d: 90:a3:c0:06:05:8e:e7:43:c0:ce:e6:2c:1f:e9:19: 8a:e9:3c:c2:ad:f3:ab:65:b0:77:80:ab:55:3a:4a: 69:79:be:cc:da:6d:6e:f7:0e:01:fb:ee:4d:56:5b: f8:6e:49:24:c1:cd:14:1f:ae:77:25:c3:d4:b4:9a: ff:aa:75:40:ee:82:d4:e0:33:47:e4:d0:c9:70:b8: 41:13:db:9c:40:d9:8e:74:27:de:e0:da:61:5d:ca: 1c:69:f0:ff:94:49:93:f3:01:6a:6e:25:47:5c:5a: 0b:dc:38:1c:11:a4:e7:1c:4e:cf:12:96:e8:fa:cc: 7c:77:86:9e:4c:6a:0a:89:d6:77:5d:33:58:e5:3a: aa:c7:96:0b:85:11:00:63:a3:6e:63:b8:2a:6f:5e: 32:6a:c2:f8:62:9f:0d:7c:d4:4c:e5:51:51:39:86: 34:ba:a9:a6:a2:00:80:fe:82:d3:1b:c0:70:64:7b: 3b:66:51:bb:bd:dc:d2:fe:20:a5:36:ad:23:cc:a0: 1c:40:f4:0f:03:c9:42:c0:bf:58:a6:a2:19:d7:3f: bb:e8:45:d9:72:e0:48:d1:8f:80:41:02:cf:02:72: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:8F:98:E3:C6:EF:60:14:7B:F9:B1:08:60:CB:26:C7:82:50:18 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:41:39:41:3d:cd:5c:07:bc:99:c2:d6:bc:51:8a:e2:6b:a0: af:d9:c1:80:9e:06:a4:3b:34:c8:91:ac:af:b6:6f:17:d0:66: 01:09:88:e1:be:f8:54:98:1a:53:9b:8a:a8:87:58:02:96:a8: c8:49:1b:d2:f1:da:0f:25:da:1f:df:2c:a3:8e:7b:c6:3f:f0: 48:23:29:43:ed:a8:7a:23:d6:8b:91:0c:61:0f:a2:b4:08:b6: ce:75:0e:1b:b2:6f:3c:1e:16:7c:97:9c:e5:76:8b:2f:e6:08: 36:cf:0c:69:25:57:7d:ee:79:35:cc:37:86:58:60:6e:9b:0b: 4a:59:c6:bc:e0:68:a7:ab:2e:ed:1b:de:73:c7:86:33:68:cc: ce:6d:4e:2c:2c:3f:a1:70:42:f9:52:00:2d:60:06:83:45:cc: c0:9e:2a:34:23:79:f7:2c:6c:8f:77:8f:2d:60:d3:3d:dd:ed: 94:a0:4f:6c:cc:43:76:2b:2f:33:f7:8a:32:96:94:83:4d:bd: f3:f6:ee:2e:b2:3f:e9:da:1a:be:17:93:82:07:54:03:77:71: 5c:03:ac:62:9b:79:d2:31:11:d0:fa:a3:17:9f:85:e0:13:a7: 6e:8f:66:bd:33:a2:47:f5:3b:c2:68:5a:32:35:57:4b:6b:28: 26:6a:cf:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUwOTE3MDMwNjM3WhcNMjUwOTI0MDMwNjM3WjAYMRYwFAYD VQQDEw02OGNhMjViZC00ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN0Bxcv9nmEdM0aMjTtJcsSW0EW87hGrgbMQsx2Qo8AGBY7nQ8DO5iwf6RmK 6TzCrfOrZbB3gKtVOkppeb7M2m1u9w4B++5NVlv4bkkkwc0UH653JcPUtJr/qnVA 7oLU4DNH5NDJcLhBE9ucQNmOdCfe4NphXcocafD/lEmT8wFqbiVHXFoL3DgcEaTn HE7PEpbo+sx8d4aeTGoKidZ3XTNY5Tqqx5YLhREAY6NuY7gqb14yasL4Yp8NfNRM 5VFROYY0uqmmogCA/oLTG8BwZHs7ZlG7vdzS/iClNq0jzKAcQPQPA8lCwL9YpqIZ 1z+76EXZcuBI0Y+AQQLPAnKRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1fj5jj xu9gFHv5sQhgyybHglAYMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBQTlBPc1cB7yZwta8UYria6Cv2cGAngakOzTIkayvtm8X0GYBCYjh vvhUmBpTm4qoh1gClqjISRvS8doPJdof3yyjjnvGP/BIIylD7ah6I9aLkQxhD6K0 CLbOdQ4bsm88HhZ8l5zldosv5gg2zwxpJVd97nk1zDeGWGBumwtKWca84Ginqy7t G95zx4YzaMzObU4sLD+hcEL5UgAtYAaDRczAnio0I3n3LGyPd48tYNM93e2UoE9s zEN2Ky8z94oylpSDTb3z9u4usj/p2hq+F5OCB1QDd3FcA6xim3nSMRHQ+qMXn4Xg E6duj2a9M6JH9TvCaFoyNVdLaygmas8y -----END CERTIFICATE-----Generated at Fri Sep 19 02:26:31 2025 by rpki-client