$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: JLnz5PcYZcE4PZgolHpxD+VYx0QVoh71eaUfq7xRIGs= Subject key identifier: 04:1E:9A:35:82:43:4F:F6:B7:3B:AF:39:18:7A:4B:11:6F:F4:2B:55 Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0362 Signing time: Tue 09 Sep 2025 01:02:23 +0000 Manifest this update: Tue 09 Sep 2025 01:02:23 +0000 Manifest next update: Tue 16 Sep 2025 01:02:23 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: cfvUGAv+/6SRHlnjlqNS+Zps3TFMuVZPqrBWW0975II=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Sep 9 01:02:23 2025 GMT Not After : Sep 16 01:02:23 2025 GMT Subject: CN=68bf7c9f-05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:ad:cb:d1:a3:42:e3:5d:05:be:1f:5c:57: dc:e3:a7:6d:e4:a6:cd:9c:be:6c:72:0f:bc:96:54: a2:d1:f6:36:f0:86:f2:11:3a:67:78:4f:42:cb:0a: a6:82:ce:61:72:51:5a:0d:ee:9c:5b:c0:ed:d3:6a: 53:ac:bc:80:a5:1e:6c:c6:b1:20:fa:2e:b1:6b:f6: 3a:a4:ac:6b:80:43:a9:04:ac:93:3d:4e:96:75:75: ab:5f:72:08:ff:64:a5:91:4c:68:0a:19:54:f6:f6: a9:13:7a:2a:0d:ae:5d:21:91:9b:f0:01:30:ca:f7: 15:51:74:6e:97:1f:7c:8c:70:cd:19:c1:f0:7f:80: 0c:c2:44:e5:f2:f9:b5:17:d6:1d:38:b5:23:40:ff: 92:2e:d9:ac:af:9b:89:16:8d:08:84:6e:6c:57:9c: c5:40:83:13:ff:68:83:f2:97:81:55:cc:1e:c5:56: fd:48:7b:d2:84:4a:90:45:75:17:e7:3a:eb:52:32: 46:5f:b4:6b:77:11:52:7f:0c:e5:82:56:64:f9:90: 43:a7:ac:8f:61:84:23:5b:67:63:0a:ac:92:7a:91: 69:c2:9e:4e:65:59:56:f7:c3:f6:1f:ad:54:2a:ee: 3a:08:64:eb:17:e9:0a:c2:a7:28:c3:35:58:34:5c: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1E:9A:35:82:43:4F:F6:B7:3B:AF:39:18:7A:4B:11:6F:F4:2B:55 X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:83:2d:e7:62:69:c3:41:6a:69:32:4a:27:39:e6:ab:b4: 1f:87:6c:a5:a3:3b:fa:e4:66:8c:e1:c7:c9:33:85:86:02:ba: 0c:00:67:98:f5:cc:2b:ff:93:a5:65:c5:19:f1:c0:82:22:b4: cc:65:20:0c:65:02:16:eb:e8:41:4d:67:c1:03:e6:bf:2f:09: 19:fe:02:10:33:da:44:ef:7d:c6:45:e0:0f:ab:db:a1:a5:11: 83:cc:c3:33:11:da:ce:4b:a0:60:46:68:a2:09:bb:4a:ce:76: 2e:6a:e1:c6:14:a3:61:5e:bd:43:46:f9:bd:6e:73:fc:91:b1: eb:09:77:21:c5:d6:03:e8:60:dc:95:58:89:50:79:38:5d:e8: ac:80:f2:cc:96:6f:d8:9a:43:51:76:8e:d0:78:85:36:31:94: 14:40:05:41:ea:d5:5e:80:33:84:7a:b3:b8:56:dd:76:d6:b9: ce:ae:52:e7:f9:70:ec:fa:80:83:9e:8a:1b:f0:d7:a9:3e:96: 06:d3:94:ab:85:66:dd:8a:2b:20:65:b9:c7:e1:a9:4d:27:7a: 0f:26:23:81:cd:36:4a:f8:8e:62:a6:63:1c:f8:96:79:f8:8c: 80:e5:2e:a0:98:03:9a:e7:ab:fc:6e:5e:9a:ad:2e:4f:90:52: 7f:de:b4:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjUwOTA5MDEwMjIzWhcNMjUwOTE2MDEwMjIzWjAYMRYwFAYD VQQDEw02OGJmN2M5Zi0wNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwguty9GjQuNdBb4fXFfc46dt5KbNnL5scg+8llSi0fY28IbyETpneE9Cywqm gs5hclFaDe6cW8Dt02pTrLyApR5sxrEg+i6xa/Y6pKxrgEOpBKyTPU6WdXWrX3II /2SlkUxoChlU9vapE3oqDa5dIZGb8AEwyvcVUXRulx98jHDNGcHwf4AMwkTl8vm1 F9YdOLUjQP+SLtmsr5uJFo0IhG5sV5zFQIMT/2iD8peBVcwexVb9SHvShEqQRXUX 5zrrUjJGX7RrdxFSfwzlglZk+ZBDp6yPYYQjW2djCqySepFpwp5OZVlW98P2H61U Ku46CGTrF+kKwqcowzVYNFxqfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQemjWC Q0/2tzuvORh6SxFv9CtVMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG24Mt52Jpw0FqaTJKJznmq7Qfh2ylozv65GaM4cfJM4WGAroMAGeY 9cwr/5OlZcUZ8cCCIrTMZSAMZQIW6+hBTWfBA+a/LwkZ/gIQM9pE733GReAPq9uh pRGDzMMzEdrOS6BgRmiiCbtKznYuauHGFKNhXr1DRvm9bnP8kbHrCXchxdYD6GDc lViJUHk4XeisgPLMlm/YmkNRdo7QeIU2MZQUQAVB6tVegDOEerO4Vt121rnOrlLn +XDs+oCDnoob8NepPpYG05SrhWbdiisgZbnH4alNJ3oPJiOBzTZK+I5ipmMc+JZ5 +IyA5S6gmAOa56v8bl6arS5PkFJ/3rS4 -----END CERTIFICATE-----Generated at Tue Sep 9 18:26:30 2025 by rpki-client