$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json) Hash identifier: Bbk91H9GZJ3llIJFV4g6LlLo+8eUZwq52ZGMVI/soCA= Subject key identifier: 4D:1D:D1:9C:D7:AD:16:86:67:21:F4:BC:41:62:18:B9:77:45:97:2D Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft Manifest number: 4D Signing time: Wed 17 Sep 2025 08:02:59 +0000 Manifest this update: Wed 17 Sep 2025 08:02:58 +0000 Manifest next update: Wed 24 Sep 2025 08:02:58 +0000 Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: ISOkO5EhWCoEsvrpQ7ft+MV+mphexUp76gw6wtOsfjI=) 2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: ttGRTVXm63FmqLPQgqhgqVrA4iCgFY4E8md2K51N5m0=) 3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6 Validity Not Before: Sep 17 08:02:58 2025 GMT Not After : Sep 24 08:02:58 2025 GMT Subject: CN=68ca6b33-e0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:58:62:1c:fc:c7:cd:d8:e4:5c:d7:c2:c8:eb: 28:48:64:c6:0e:e9:f6:b4:ef:24:de:b0:a6:46:f0: 85:10:50:39:43:be:db:09:51:e1:4c:f9:5d:8a:3b: a4:17:0b:1c:65:94:fa:f6:09:2b:68:b2:ca:7c:d5: fe:22:72:2f:fd:92:65:45:d3:7f:85:ba:49:76:4f: 25:90:8a:77:71:35:30:73:a3:19:c0:3c:f4:ee:6d: c9:aa:3b:58:90:f5:66:87:95:f3:58:b2:d0:fb:96: d8:84:86:c8:c6:8c:13:70:c1:fd:39:b2:ad:09:c3: e1:1f:d6:fe:79:ea:e8:74:f3:ec:b2:81:b9:47:29: aa:2e:d0:31:a7:18:23:0b:9f:89:9e:9f:fb:86:34: 52:da:be:ae:48:2a:5b:12:73:75:76:77:d9:b1:a0: 54:65:b1:dd:85:94:b7:d6:b5:ba:74:b4:17:dc:a0: 9b:da:5c:e1:9b:2d:13:16:37:53:41:5a:bf:ab:6f: 0d:c5:9d:7a:00:28:51:a2:5c:b5:ad:4f:d8:e2:9b: 35:6a:4d:78:aa:03:11:6e:7d:3f:1b:d5:08:ff:ec: e5:85:f7:58:8e:ff:6b:6c:ff:80:fb:7f:81:d6:01: 61:77:e7:a0:7b:e0:05:97:be:4f:19:be:af:59:59: 79:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:D1:9C:D7:AD:16:86:67:21:F4:BC:41:62:18:B9:77:45:97:2D X509v3 Authority Key Identifier: keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:f1:df:e2:e8:b6:96:0a:b7:b8:cb:85:4b:f7:b9:8d:bf: 93:47:5f:c0:02:58:38:09:6a:02:a0:28:e5:f4:7a:75:99:eb: 41:58:52:1b:e6:0f:1e:e7:6c:2c:8a:f0:50:63:b8:3d:2b:b9: 9b:ed:2c:5d:28:4f:43:b7:4e:62:3e:6b:aa:23:33:e6:de:ae: b3:85:d9:26:6d:40:ef:a1:2d:e6:84:07:ae:9d:dc:c0:d5:40: 16:1d:56:3c:73:5d:fb:b1:1e:43:6a:5e:4d:58:58:3d:a5:71: cc:7a:4e:f3:42:c6:5d:53:ab:7f:70:f4:67:50:7d:18:00:52: cf:9a:a1:e5:96:bd:2c:42:cb:03:26:8e:77:70:b6:e8:46:ef: 7a:ba:24:b1:57:53:c1:bc:14:7b:22:4b:67:9a:50:ba:46:10: 4b:6d:88:e6:7f:b1:d1:ad:19:f5:9f:de:12:a2:e6:a8:6d:80: e1:3c:25:a1:37:d6:8f:b9:52:db:09:ba:8a:9f:cb:5b:2c:78: d8:53:a6:3d:c2:65:2a:82:b5:d6:8f:88:56:c6:88:0a:c5:73: d9:f8:7a:0e:67:6e:e5:0a:b3:9a:21:f0:43:63:b5:b9:44:79: 31:2c:b9:ff:7e:2a:42:ed:85:73:a5:4a:16:1a:29:a2:7a:0d: 85:86:89:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkMwNzExMC8GA1UEBRMoMENFMDYwQzJFNDMwREQ4NTE4MTBDOUYyMEZFQzFCQTIx MTk5RTNENjAeFw0yNTA5MTcwODAyNThaFw0yNTA5MjQwODAyNThaMBgxFjAUBgNV BAMTDTY4Y2E2YjMzLWUwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxWGIc/MfN2ORc18LI6yhIZMYO6fa07yTesKZG8IUQUDlDvtsJUeFM+V2KO6QX CxxllPr2CStossp81f4ici/9kmVF03+Fukl2TyWQindxNTBzoxnAPPTubcmqO1iQ 9WaHlfNYstD7ltiEhsjGjBNwwf05sq0Jw+Ef1v556uh08+yygblHKaou0DGnGCML n4men/uGNFLavq5IKlsSc3V2d9mxoFRlsd2FlLfWtbp0tBfcoJvaXOGbLRMWN1NB Wr+rbw3FnXoAKFGiXLWtT9jimzVqTXiqAxFufT8b1Qj/7OWF91iO/2ts/4D7f4HW AWF356B74AWXvk8Zvq9ZWXnTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTR3RnNet FoZnIfS8QWIYuXdFly0wHwYDVR0jBBgwFoAUDOBgwuQw3YUYEMnyD+wbohGZ49Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyQzA3L0E3NzRBOUNFMUU2 MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE9CZ3d1UXczWVVZRU1ueUQtd2JvaEdaNDlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy QzA3L0E3NzRBOUNFMUU2MDExRjBCN0RDNzY1NEM0RjlBRTAyL0RPQmd3dVF3M1lV WUVNbnlELXdib2hHWjQ5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI648d/i6LaWCre4y4VL97mNv5NHX8ACWDgJagKgKOX0enWZ60FYUhvm Dx7nbCyK8FBjuD0ruZvtLF0oT0O3TmI+a6ojM+berrOF2SZtQO+hLeaEB66d3MDV QBYdVjxzXfuxHkNqXk1YWD2lccx6TvNCxl1Tq39w9GdQfRgAUs+aoeWWvSxCywMm jndwtuhG73q6JLFXU8G8FHsiS2eaULpGEEttiOZ/sdGtGfWf3hKi5qhtgOE8JaE3 1o+5UtsJuoqfy1sseNhTpj3CZSqCtdaPiFbGiArFc9n4eg5nbuUKs5oh8ENjtblE eTEsuf9+KkLthXOlShYaKaJ6DYWGiew= -----END CERTIFICATE-----Generated at Fri Sep 19 02:18:47 2025 by rpki-client