$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: ga/3bSf7/z3kPK1GlUZGrkHCSdZ81eQBL8YMhOmKZAk= Subject key identifier: 38:67:45:4F:D2:B5:F2:9A:9D:3C:BF:8F:9A:8E:CA:4E:B1:60:3A:54 Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 03F9 Signing time: Wed 17 Sep 2025 00:55:10 +0000 Manifest this update: Wed 17 Sep 2025 00:55:10 +0000 Manifest next update: Wed 24 Sep 2025 00:55:10 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: 0YhfBV91BHJxa8Xxnzi1dS/Jw5Hv+/VAgNlF+hCtcsg=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: Sep 17 00:55:10 2025 GMT Not After : Sep 24 00:55:10 2025 GMT Subject: CN=68ca06ee-8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:3e:62:13:a6:5e:67:1b:f0:a8:5b:6b:7e: e4:78:a7:32:99:83:64:82:c4:db:11:6d:67:be:45: 84:ae:17:d9:74:e4:a4:0e:ba:a0:d6:4e:50:5a:64: 64:8c:1b:fd:53:6a:32:69:fe:f6:30:20:fc:0d:6c: 6e:8f:94:62:ba:79:1a:56:cd:86:b9:d0:f0:9d:43: a7:6a:15:22:c4:8c:dd:e2:df:c3:aa:fa:a3:c5:79: f5:8e:65:77:70:e5:90:24:33:b1:78:76:64:5c:f2: b5:1d:60:ef:9b:11:a0:24:57:77:65:e5:e1:d0:f2: 91:3c:ee:d4:40:5e:5b:6f:3b:d8:16:15:f1:1e:19: 14:86:8c:e0:44:ba:ba:6c:6a:a9:52:d3:98:40:18: ec:ec:e2:43:df:97:0e:96:45:03:95:4a:b4:87:98: 24:cd:cc:3d:1d:d6:b7:76:be:5a:43:93:fa:c3:77: 90:a6:38:6d:47:d2:29:b3:03:48:79:ef:4e:f2:36: f9:46:8e:22:2f:1e:45:e8:c7:54:2f:19:e0:26:ee: ca:c4:6f:fc:30:1d:4a:e7:0b:64:99:78:01:3b:54: 3e:0c:32:4b:8b:a5:ce:30:16:fd:43:99:85:1d:49: 88:7b:8a:0a:e0:de:ac:80:1d:a9:7b:d0:97:3d:bc: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:45:4F:D2:B5:F2:9A:9D:3C:BF:8F:9A:8E:CA:4E:B1:60:3A:54 X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:37:67:4e:cc:1c:46:9b:91:74:2d:04:5e:5d:44:60:9e:a3: 9a:f4:d1:f1:14:5c:d9:c5:8d:8d:b1:34:4d:8b:f2:05:3f:8b: e2:f0:7a:ec:46:fa:56:bf:4a:20:c1:02:02:07:53:ea:d1:ba: 44:19:1b:0d:c4:65:83:d1:24:26:84:e1:28:f3:56:e0:a4:30: a7:cd:49:0c:2d:95:4f:a6:11:b8:18:e1:5a:6a:1a:67:f7:37: 3b:fd:84:6d:3a:15:fd:59:e5:b5:65:c6:25:45:0a:fd:a8:22: 23:74:d9:05:39:3c:92:9c:65:bf:97:4f:f8:cf:cb:4f:15:51: db:22:f3:8c:33:2c:61:21:58:71:8f:8c:1b:cd:3a:7d:d8:ed: 45:e5:ce:de:aa:67:71:cb:c0:4e:8b:79:df:cf:30:a8:7a:09: f5:1a:01:c2:04:5a:23:59:e4:a6:a5:9b:f0:24:3e:e8:c0:e4: 39:36:42:a5:5a:03:ab:1d:30:5a:0b:ab:04:b0:a6:76:cd:a2: bd:ee:05:6a:ab:93:10:17:d8:52:24:24:3d:a4:95:6a:83:90: ef:54:05:f8:5b:a6:86:8e:c9:10:42:f0:3b:8e:9e:7f:25:d7: 55:45:12:3a:0f:36:1d:b3:6c:8e:60:95:90:24:e8:00:b3:83: 2a:8b:03:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjUwOTE3MDA1NTEwWhcNMjUwOTI0MDA1NTEwWjAYMRYwFAYD VQQDEw02OGNhMDZlZS04NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+4+YhOmXmcb8Khba37keKcymYNkgsTbEW1nvkWErhfZdOSkDrqg1k5QWmRk jBv9U2oyaf72MCD8DWxuj5RiunkaVs2GudDwnUOnahUixIzd4t/DqvqjxXn1jmV3 cOWQJDOxeHZkXPK1HWDvmxGgJFd3ZeXh0PKRPO7UQF5bbzvYFhXxHhkUhozgRLq6 bGqpUtOYQBjs7OJD35cOlkUDlUq0h5gkzcw9Hda3dr5aQ5P6w3eQpjhtR9IpswNI ee9O8jb5Ro4iLx5F6MdULxngJu7KxG/8MB1K5wtkmXgBO1Q+DDJLi6XOMBb9Q5mF HUmIe4oK4N6sgB2pe9CXPbzrgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhnRU/S tfKanTy/j5qOyk6xYDpUMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRN2dOzBxGm5F0LQReXURgnqOa9NHxFFzZxY2NsTRNi/IFP4vi8Hrs RvpWv0ogwQICB1Pq0bpEGRsNxGWD0SQmhOEo81bgpDCnzUkMLZVPphG4GOFaahpn 9zc7/YRtOhX9WeW1ZcYlRQr9qCIjdNkFOTySnGW/l0/4z8tPFVHbIvOMMyxhIVhx j4wbzTp92O1F5c7eqmdxy8BOi3nfzzCoegn1GgHCBFojWeSmpZvwJD7owOQ5NkKl WgOrHTBaC6sEsKZ2zaK97gVqq5MQF9hSJCQ9pJVqg5DvVAX4W6aGjskQQvA7jp5/ JddVRRI6DzYds2yOYJWQJOgAs4MqiwNC -----END CERTIFICATE-----Generated at Thu Sep 18 20:49:41 2025 by rpki-client