$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: qf2zqZjgx/zec6yvs2SeZuk6hyh7SI1TffjPqtsFTCE= Subject key identifier: 95:78:91:8E:27:73:C0:A7:F3:99:C2:49:5C:17:40:DD:9C:BA:FB:9C Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 80 Signing time: Sat 06 Sep 2025 14:16:16 +0000 Manifest this update: Sat 06 Sep 2025 14:16:16 +0000 Manifest next update: Sat 13 Sep 2025 14:16:16 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: BbmOGHkoUpKfgliVorZA2RwPfruShA2aCbibDZhGSeY=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: cA2l4Bz4w9KwEr1hYRA0GBgp3+TMBDk54SQcEyXzSVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Sep 6 14:16:16 2025 GMT Not After : Sep 13 14:16:16 2025 GMT Subject: CN=68bc4230-8aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:3a:d0:20:be:8e:80:6d:60:a9:dc:11:6e: 5d:f2:5e:a4:20:1c:a8:a4:d2:60:e7:6d:d9:62:8e: 8c:5b:88:98:c6:cf:43:ac:4b:a5:16:33:5c:bc:ab: 14:26:ae:cc:68:12:e4:b0:71:38:c6:a3:81:db:f5: 9e:3e:72:03:f3:4a:76:5a:82:9a:2c:a9:c9:d6:ac: 19:db:29:45:b3:06:d0:c7:81:4e:0e:14:ee:3f:1f: 37:d6:40:67:3b:51:cd:56:35:20:a2:d4:b3:f6:39: 9d:aa:d7:1b:60:f5:15:2f:d6:d6:4f:2b:f4:30:55: a2:db:5a:de:56:7f:50:75:76:38:f1:ff:13:42:d6: c4:b9:3c:41:f4:6c:a0:77:f8:ef:3e:91:0e:33:67: 76:69:3b:06:e5:9b:76:ce:82:0d:36:7d:92:fe:01: eb:0e:85:a6:f2:93:2d:55:ad:78:af:25:87:12:fe: 5a:ed:10:bf:e3:c4:8c:5e:24:db:7d:8c:6f:42:74: fb:84:f7:ef:66:43:18:94:38:e8:ee:2a:5e:b9:ca: 67:00:ac:7f:44:e1:d4:cb:09:ac:6c:4f:4a:d2:0b: cc:9a:33:45:21:75:85:9e:34:88:74:24:05:79:3b: b0:0b:dc:72:7b:75:4a:46:93:5a:a4:56:c7:eb:11: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:91:8E:27:73:C0:A7:F3:99:C2:49:5C:17:40:DD:9C:BA:FB:9C X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:99:7c:d9:5a:74:ec:8a:14:e2:eb:db:a7:69:72:46:ed:a9: 77:f0:2b:ff:ce:82:2a:58:03:bb:c0:f8:31:c6:45:76:89:f7: 88:f6:38:02:c1:8a:eb:34:d5:8d:9a:66:a0:f3:25:77:db:ac: dc:67:09:4e:a6:42:cf:c0:23:0b:4f:2f:1e:95:77:a9:1b:e1: 70:49:36:e1:58:ac:9f:1c:2c:2f:f2:7a:e9:8a:23:11:68:0a: 9f:50:3a:ef:1a:65:23:52:aa:34:42:ff:2e:a2:ee:22:17:32: 9b:be:b7:5b:dc:87:d7:8a:05:17:df:98:26:47:5d:9b:63:36: a8:e1:e1:a2:64:e5:9f:9a:e5:b4:ae:59:67:c9:1b:c6:fa:7a: 19:5e:1f:60:7a:e5:e1:a6:9b:27:95:8e:3e:29:49:67:2a:47: 8d:37:74:ac:77:2d:f5:b3:6a:8d:f2:eb:00:62:a1:da:ea:4a: c8:3a:01:09:42:fe:37:b6:fd:b6:62:57:6c:e8:ff:48:e3:47: da:03:fc:86:f9:f4:b5:0a:fb:5b:90:63:eb:d7:33:44:37:23: 2d:58:5f:12:51:a3:bc:9d:73:8a:44:48:64:1c:01:c9:45:25: 1d:7b:aa:66:ce:7e:b1:2e:27:9c:8b:30:91:d4:ea:ea:93:2f: fe:07:17:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjUwOTA2MTQxNjE2WhcNMjUwOTEzMTQxNjE2WjAYMRYwFAYD VQQDEw02OGJjNDIzMC04YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkU60CC+joBtYKncEW5d8l6kIByopNJg523ZYo6MW4iYxs9DrEulFjNcvKsU Jq7MaBLksHE4xqOB2/WePnID80p2WoKaLKnJ1qwZ2ylFswbQx4FODhTuPx831kBn O1HNVjUgotSz9jmdqtcbYPUVL9bWTyv0MFWi21reVn9QdXY48f8TQtbEuTxB9Gyg d/jvPpEOM2d2aTsG5Zt2zoINNn2S/gHrDoWm8pMtVa14ryWHEv5a7RC/48SMXiTb fYxvQnT7hPfvZkMYlDjo7ipeucpnAKx/ROHUywmsbE9K0gvMmjNFIXWFnjSIdCQF eTuwC9xye3VKRpNapFbH6xEYhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV4kY4n c8Cn85nCSVwXQN2cuvucMB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS8zNUVEQTkyRUNGMEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5 Y21TazFYN3BxZFRDb1F5U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFmXzZWnTsihTi69unaXJG7al38Cv/zoIqWAO7wPgxxkV2ifeI9jgC wYrrNNWNmmag8yV326zcZwlOpkLPwCMLTy8elXepG+FwSTbhWKyfHCwv8nrpiiMR aAqfUDrvGmUjUqo0Qv8uou4iFzKbvrdb3IfXigUX35gmR12bYzao4eGiZOWfmuW0 rllnyRvG+noZXh9geuXhppsnlY4+KUlnKkeNN3Ssdy31s2qN8usAYqHa6krIOgEJ Qv43tv22Ylds6P9I40faA/yG+fS1CvtbkGPr1zNENyMtWF8SUaO8nXOKREhkHAHJ RSUde6pmzn6xLiecizCR1Orqky/+BxfA -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client