$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: qpKyN75PN237nSiM0pRcTS4xdpPr9i+VWnyoKnr4Uk8= Subject key identifier: 59:D5:A8:DF:A6:C9:89:7D:31:67:06:9D:9E:A0:F5:16:D6:18:48:5A Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E85 Signing time: Thu 18 Sep 2025 17:52:07 +0000 Manifest this update: Thu 18 Sep 2025 17:52:07 +0000 Manifest next update: Thu 25 Sep 2025 17:52:07 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: vEdKUuwiHZlvq2wzkcJq/KtaiLPyFjXEVPJnDm/CBMo=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Sep 18 17:52:07 2025 GMT Not After : Sep 25 17:52:07 2025 GMT Subject: CN=68cc46c7-bceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:d0:2c:9b:0d:31:82:f0:4f:19:e8:d3:f6: 3d:00:97:d0:f9:6d:8a:8d:5e:57:19:d5:1c:14:39: 26:4c:e3:70:0d:05:bf:25:15:8b:ec:59:62:f2:f6: 7c:4c:ac:af:39:6c:d9:03:aa:ea:5c:29:9e:63:7c: d8:56:62:3b:1e:a0:63:06:68:4a:ac:08:a0:ac:b6: 5f:e6:6a:2f:67:72:d3:d6:ac:62:de:00:fb:a3:3a: e2:b0:e2:bd:19:33:32:3f:cc:ea:30:9f:a2:20:9c: 6b:2e:f7:4d:01:91:15:ea:c9:41:81:a4:80:f4:67: ed:1e:0e:9c:97:e4:77:f1:3b:39:ca:6e:a5:a7:2f: 63:c3:a1:dc:16:c2:ab:6b:cc:49:56:c7:e5:99:1b: d3:af:85:26:fb:18:8b:eb:5f:5f:ba:e4:51:1f:eb: 19:5b:ea:eb:fb:e6:9c:41:4e:fb:d2:a3:5b:0b:cc: 09:71:66:5b:45:84:5b:79:ed:71:9f:f6:23:66:b2: 15:2f:24:7d:2d:b2:52:f0:75:07:eb:f0:b6:b4:58: 15:e6:7c:9d:0b:43:c4:89:44:48:db:25:3d:42:d3: 67:ea:02:d0:d1:bd:5a:e8:82:58:c1:b6:da:b3:bb: 96:d6:19:0f:8d:00:4e:ad:64:0c:af:b8:32:e0:9f: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:A8:DF:A6:C9:89:7D:31:67:06:9D:9E:A0:F5:16:D6:18:48:5A X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e6:f4:33:7d:1c:8e:2f:89:ad:95:d1:6e:4a:4c:7f:d3:aa: ca:34:6e:1b:30:4f:df:12:25:00:ea:f5:c0:93:32:d9:65:f3: 07:b0:05:66:94:c5:ee:78:24:c6:fe:ea:b9:3e:4a:31:6d:a3: 85:fd:1c:d1:df:aa:74:2e:0b:ce:ec:4a:fd:7e:a1:57:6b:c7: 42:7c:b4:bc:e9:44:7d:b4:44:88:98:06:a8:9a:75:74:1f:20: 90:0e:40:e7:60:6a:4c:c6:03:89:83:c9:79:e9:5b:b2:c9:81: 83:f1:b1:08:9b:6f:24:8a:29:b0:7b:64:27:b7:f5:fb:57:6f: 5c:26:88:6f:9c:7b:af:40:9e:e6:e1:60:bc:73:9f:43:2e:3c: 75:e9:bb:6b:e2:59:a8:37:68:69:62:52:38:03:cb:2d:78:f8: 41:87:0e:82:ab:51:9f:9d:c1:e4:b0:22:b5:55:c2:d9:c7:01: e8:81:5e:e7:e8:b0:88:e6:ed:7b:fb:04:5c:a8:54:63:f7:03: f7:1e:8b:65:f4:f4:72:a3:3c:2c:65:8a:4c:d1:62:b7:0c:9b: 8a:1e:c9:72:e4:91:90:81:bc:3a:42:db:b3:7a:69:74:b4:f9: 78:87:2a:cc:e1:4f:40:2b:a3:db:07:2d:c4:f0:b0:fe:03:1d: 92:64:67:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwOTE4MTc1MjA3WhcNMjUwOTI1MTc1MjA3WjAYMRYwFAYD VQQDEw02OGNjNDZjNy1iY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOLQLJsNMYLwTxno0/Y9AJfQ+W2KjV5XGdUcFDkmTONwDQW/JRWL7Fli8vZ8 TKyvOWzZA6rqXCmeY3zYVmI7HqBjBmhKrAigrLZf5movZ3LT1qxi3gD7ozrisOK9 GTMyP8zqMJ+iIJxrLvdNAZEV6slBgaSA9GftHg6cl+R38Ts5ym6lpy9jw6HcFsKr a8xJVsflmRvTr4Um+xiL619fuuRRH+sZW+rr++acQU770qNbC8wJcWZbRYRbee1x n/YjZrIVLyR9LbJS8HUH6/C2tFgV5nydC0PEiURI2yU9QtNn6gLQ0b1a6IJYwbba s7uW1hkPjQBOrWQMr7gy4J8JiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnVqN+m yYl9MWcGnZ6g9RbWGEhaMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS5vQzfRyOL4mtldFuSkx/06rKNG4bME/fEiUA6vXAkzLZZfMHsAVm lMXueCTG/uq5PkoxbaOF/RzR36p0LgvO7Er9fqFXa8dCfLS86UR9tESImAaomnV0 HyCQDkDnYGpMxgOJg8l56VuyyYGD8bEIm28kiimwe2Qnt/X7V29cJohvnHuvQJ7m 4WC8c59DLjx16btr4lmoN2hpYlI4A8stePhBhw6Cq1GfncHksCK1VcLZxwHogV7n 6LCI5u17+wRcqFRj9wP3Hotl9PRyozwsZYpM0WK3DJuKHsly5JGQgbw6Qtuzeml0 tPl4hyrM4U9AK6PbBy3E8LD+Ax2SZGcH -----END CERTIFICATE-----Generated at Fri Sep 19 03:52:59 2025 by rpki-client