$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: AGn5LOqnKhQE+pAQ1aALptKZ239ybECTRq9mwyAKFxg= Subject key identifier: 65:50:F7:E9:A3:04:D1:BE:93:6C:60:30:20:0A:C5:94:8E:D2:7F:D4 Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 033F Signing time: Fri 19 Sep 2025 01:29:23 +0000 Manifest this update: Fri 19 Sep 2025 01:29:23 +0000 Manifest next update: Fri 26 Sep 2025 01:29:23 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: DZ1lajNjrfVxNtIXvEMDYw+1XlajpxBOTP75qFJAYaY=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: 4q86TaevYN4wi8FIhE98uWT6GCxVtXHFfpTKfJMTYtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Sep 19 01:29:23 2025 GMT Not After : Sep 26 01:29:23 2025 GMT Subject: CN=68ccb1f3-c210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:76:b2:7b:5a:16:4a:72:11:44:08:e8:e7: 6f:20:b3:23:e1:07:41:6c:36:01:04:3e:04:81:2c: ff:90:93:e0:22:df:c1:8e:ac:14:5e:e5:d7:f4:d6: b7:07:fb:bd:90:45:42:d7:86:d2:4b:f2:83:65:9a: fd:58:a5:3e:48:6e:e7:15:f5:52:65:bd:a5:7c:ab: cc:9c:64:a9:0e:b6:11:54:17:0a:b9:96:90:ca:a2: b2:61:21:fc:92:8d:5c:22:24:20:e0:27:c0:1c:cf: 52:df:cf:55:1e:c9:9e:ae:5e:d8:45:7e:8a:21:ec: f9:67:29:39:b9:56:df:dc:0f:b2:53:36:d3:71:31: 9e:e2:c0:23:04:fb:81:aa:80:a7:7d:c0:f1:a7:18: da:87:eb:16:89:ed:ad:50:c2:8f:3c:79:58:6d:2b: 07:29:6f:c9:03:4f:ed:20:63:32:dc:12:4e:62:55: d6:9c:f8:c5:93:f4:5d:ef:aa:a0:32:76:df:f2:a0: 32:70:70:43:53:2c:2c:c7:65:8d:78:9a:f4:dc:92: 84:d5:52:c4:c1:32:81:29:77:a2:16:1e:8e:85:dd: a2:87:5a:d4:e3:13:70:b5:3a:6b:42:3c:59:8d:01: 0f:22:8a:33:a6:14:72:f5:a3:c6:c1:1c:b1:ad:ed: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:F7:E9:A3:04:D1:BE:93:6C:60:30:20:0A:C5:94:8E:D2:7F:D4 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:ea:fa:a0:a4:99:fb:e0:f4:7a:2a:7d:bd:16:05:5c:a0: 87:d3:d7:ea:0c:f8:c5:5d:6e:3a:45:0e:9a:99:0c:d0:5d:78: d9:90:8b:20:6c:28:9f:67:19:95:e2:51:0b:b0:bb:0d:11:35: 6f:e8:bc:90:50:86:b3:db:61:94:b2:d8:40:b0:da:f0:36:50: d3:52:b5:13:3f:29:4a:de:bb:07:8d:6d:c5:1e:43:74:ad:fb: 67:dc:90:96:25:87:2a:cb:63:73:ed:85:e3:3e:60:d3:e8:40: be:82:2a:2e:f6:a4:cb:d1:26:b2:05:d2:59:34:cf:8b:28:32: 8b:e4:d7:6c:03:8c:ff:8f:b5:06:7a:c7:bb:5c:6d:0b:e5:07: af:04:68:a8:e9:2e:69:50:47:f0:51:99:20:7b:4e:1c:31:46: ac:5d:16:63:2d:c3:b3:a3:fd:f6:be:04:ce:8e:15:49:29:a9: 34:be:93:05:45:a7:c1:24:34:e7:66:c0:7d:90:62:2a:86:8d: 35:ea:4d:41:26:6c:71:b1:d2:bd:6f:39:00:d6:b7:7a:66:1f: 6a:d9:53:1f:f3:6c:ec:8b:d3:46:41:6d:5b:8d:6f:f9:a2:e1: 6c:d9:5d:0c:86:ba:07:f5:76:a2:a0:d5:5a:67:42:69:a4:66: f0:f4:42:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwOTE5MDEyOTIzWhcNMjUwOTI2MDEyOTIzWjAYMRYwFAYD VQQDEw02OGNjYjFmMy1jMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtB2sntaFkpyEUQI6OdvILMj4QdBbDYBBD4EgSz/kJPgIt/BjqwUXuXX9Na3 B/u9kEVC14bSS/KDZZr9WKU+SG7nFfVSZb2lfKvMnGSpDrYRVBcKuZaQyqKyYSH8 ko1cIiQg4CfAHM9S389VHsmerl7YRX6KIez5Zyk5uVbf3A+yUzbTcTGe4sAjBPuB qoCnfcDxpxjah+sWie2tUMKPPHlYbSsHKW/JA0/tIGMy3BJOYlXWnPjFk/Rd76qg Mnbf8qAycHBDUywsx2WNeJr03JKE1VLEwTKBKXeiFh6Ohd2ih1rU4xNwtTprQjxZ jQEPIoozphRy9aPGwRyxre23DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVQ9+mj BNG+k2xgMCAKxZSO0n/UMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrOOr6oKSZ++D0eip9vRYFXKCH09fqDPjFXW46RQ6amQzQXXjZkIsg bCifZxmV4lELsLsNETVv6LyQUIaz22GUsthAsNrwNlDTUrUTPylK3rsHjW3FHkN0 rftn3JCWJYcqy2Nz7YXjPmDT6EC+giou9qTL0SayBdJZNM+LKDKL5NdsA4z/j7UG ese7XG0L5QevBGio6S5pUEfwUZkge04cMUasXRZjLcOzo/32vgTOjhVJKak0vpMF RafBJDTnZsB9kGIqho016k1BJmxxsdK9bzkA1rd6Zh9q2VMf82zsi9NGQW1bjW/5 ouFs2V0MhroH9XaioNVaZ0JppGbw9EIL -----END CERTIFICATE-----Generated at Fri Sep 19 06:51:15 2025 by rpki-client