$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: tZK7hocVYmrSwB9lB2xU7sBDaEVE5d63p309kjnpK24= Subject key identifier: 9F:1F:35:A4:DF:C7:54:19:2E:D9:12:8C:A5:2B:B8:58:AD:E6:3D:1D Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 018C Signing time: Tue 09 Sep 2025 03:36:32 +0000 Manifest this update: Tue 09 Sep 2025 03:36:31 +0000 Manifest next update: Tue 16 Sep 2025 03:36:31 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: VxBjZgQhU5d4eGaoJtK4pcSCq5lVpHDuvM0T1ztQDzg=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Sep 9 03:36:31 2025 GMT Not After : Sep 16 03:36:31 2025 GMT Subject: CN=68bfa0c0-1c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:7c:ad:d8:23:e1:b0:f4:da:d1:6c:aa:b9: fe:e6:49:f0:d9:aa:6a:58:85:93:c2:a5:75:d5:96: 88:c6:8e:d5:1a:d2:ed:b9:59:26:24:d7:dc:1c:b9: da:a7:ae:ff:bc:2f:50:80:d2:01:e6:ab:27:a9:bf: 64:0e:76:d5:3c:5e:e0:4b:44:b7:db:dc:71:93:eb: be:21:5d:10:1c:45:b2:5d:bd:bc:d8:5c:88:dc:46: dd:ab:c4:93:7d:b0:c1:4c:9c:8e:2d:f7:69:be:e8: dd:4c:39:d3:f1:c4:00:36:68:4a:ec:05:f2:8a:d4: d2:65:af:36:64:e1:1b:f1:1e:37:ab:14:44:8f:99: 59:32:38:09:43:13:95:e0:93:59:46:78:ee:31:62: 9a:e4:20:e5:46:a3:15:8d:5c:1e:59:59:2b:0c:20: 4c:8c:1f:8f:31:71:e6:65:f1:25:6f:b6:7e:23:58: 5b:42:f0:b2:03:cc:d2:97:5e:b8:af:c8:c3:78:d1: 7a:ba:b0:ee:d1:54:82:ba:cf:77:53:58:7e:e8:86: 03:39:d1:ee:91:54:86:d7:38:1d:dd:e2:80:7a:da: 77:1b:84:6b:9e:64:69:9f:a2:12:4c:61:17:e5:9f: 12:8f:e4:30:dc:66:a4:fc:94:0f:b2:ed:2c:af:e4: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1F:35:A4:DF:C7:54:19:2E:D9:12:8C:A5:2B:B8:58:AD:E6:3D:1D X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:0c:d4:44:19:cc:31:75:e5:82:e1:61:5d:ab:2a:fb:ad:fa: bd:bc:15:08:8a:81:db:cf:d0:f2:1d:2e:e8:6b:30:9a:6b:d9: 70:2e:49:e7:e9:26:40:31:a9:b1:95:2f:b6:0b:3b:10:fe:e5: ce:dc:6e:cf:29:00:c1:fa:f2:72:c8:13:50:6b:29:3c:5d:9c: 25:48:24:e1:72:69:b0:e0:bd:4a:ed:ee:81:6d:d9:85:91:3b: 23:25:2a:98:fb:dc:36:e0:57:26:89:aa:4a:e9:95:e9:f5:17: f2:8f:46:3d:6e:e6:24:8f:4b:6f:17:a1:df:03:ff:a7:67:c6: 8c:27:97:9a:98:f8:09:47:a8:af:4a:89:1a:b0:56:09:3e:cd: 94:fd:8a:7e:82:51:8e:7f:d7:1c:18:e0:1e:55:40:f0:8b:10: ab:9d:99:7b:f9:21:3d:94:dc:a9:e6:06:93:78:ca:17:41:1c: 4c:6b:39:25:20:c8:e9:45:d5:69:c8:bf:ac:a2:60:0c:dd:24: af:46:99:fd:b0:ba:76:85:4a:c4:38:f8:67:3b:96:a9:ef:7e: 3e:2d:ae:55:a8:39:bc:bc:54:bd:7c:28:45:40:71:2e:7e:30: 90:0b:de:df:51:de:49:1b:ea:f4:08:98:94:4b:54:ef:ea:ea: 08:8c:52:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwOTA5MDMzNjMxWhcNMjUwOTE2MDMzNjMxWjAYMRYwFAYD VQQDEw02OGJmYTBjMC0xYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+t8rdgj4bD02tFsqrn+5knw2apqWIWTwqV11ZaIxo7VGtLtuVkmJNfcHLna p67/vC9QgNIB5qsnqb9kDnbVPF7gS0S329xxk+u+IV0QHEWyXb282FyI3Ebdq8ST fbDBTJyOLfdpvujdTDnT8cQANmhK7AXyitTSZa82ZOEb8R43qxREj5lZMjgJQxOV 4JNZRnjuMWKa5CDlRqMVjVweWVkrDCBMjB+PMXHmZfElb7Z+I1hbQvCyA8zSl164 r8jDeNF6urDu0VSCus93U1h+6IYDOdHukVSG1zgd3eKAetp3G4RrnmRpn6ISTGEX 5Z8Sj+Qw3Gak/JQPsu0sr+R2KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8fNaTf x1QZLtkSjKUruFit5j0dMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkDNREGcwxdeWC4WFdqyr7rfq9vBUIioHbz9DyHS7oazCaa9lwLknn 6SZAMamxlS+2CzsQ/uXO3G7PKQDB+vJyyBNQayk8XZwlSCThcmmw4L1K7e6BbdmF kTsjJSqY+9w24FcmiapK6ZXp9Rfyj0Y9buYkj0tvF6HfA/+nZ8aMJ5eamPgJR6iv SokasFYJPs2U/Yp+glGOf9ccGOAeVUDwixCrnZl7+SE9lNyp5gaTeMoXQRxMazkl IMjpRdVpyL+somAM3SSvRpn9sLp2hUrEOPhnO5ap734+La5VqDm8vFS9fChFQHEu fjCQC97fUd5JG+r0CJiUS1Tv6uoIjFI0 -----END CERTIFICATE-----Generated at Tue Sep 9 08:50:14 2025 by rpki-client