$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: XI5PJDgI/nh35zsGN3Hui2KOrMXhMESuuGfmY5HV1Jg= Subject key identifier: 4D:35:29:9D:5A:84:D0:06:F8:74:56:40:2A:7F:22:58:A4:BC:FE:FC Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A4E Signing time: Mon 08 Sep 2025 19:44:40 +0000 Manifest this update: Mon 08 Sep 2025 19:44:39 +0000 Manifest next update: Mon 15 Sep 2025 19:44:39 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: UR8zOouCz56pATX2cft5ajhLKI232vxRu9OgfFyGERY=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: YgLuhvSqEin+i5SUp1az8jMscHcAbxhVSlyBc8B1vlM=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DPmiaEz6M1OneZ4z1YKj44DcnnHVGKuSYV+vSNBuquw=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: wxcY42YjsuRVvMQ/m7CB1YYbOqzcrhZ00l1RvoVq8ek=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: NLByGRv6anI6tIVcb5p+1Xch3v2zcxtkN/xSf48UIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Sep 8 19:44:39 2025 GMT Not After : Sep 15 19:44:39 2025 GMT Subject: CN=68bf3228-4c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:cc:80:33:02:53:01:01:68:6d:e8:ad:56: 6f:b7:6c:05:e4:17:5a:df:ea:be:80:78:66:2c:34: 13:83:ff:6d:53:db:03:23:ea:47:d6:7f:dc:51:84: 5c:1d:82:c6:f5:ea:1f:58:db:a3:ed:37:88:10:2a: 2a:10:66:84:15:0e:7b:59:56:cd:eb:c3:cd:19:ac: 23:56:3e:a5:39:6b:af:aa:2a:66:34:d0:9e:e0:2a: 1a:b5:75:c4:2c:35:95:a5:66:9c:19:ba:2e:19:cb: cd:6a:25:1b:9c:a1:52:31:b7:fc:4a:67:85:6d:0d: 80:4c:fb:1d:25:45:47:b8:85:8a:4e:78:96:ec:c1: 47:60:54:bc:0d:b7:cd:e2:24:39:ea:e9:2f:d6:b4: 0e:c5:2c:44:49:96:9e:53:8a:d9:6b:43:4a:11:d2: 27:50:b7:fe:50:1d:93:c3:d5:db:e8:43:e2:45:d3: 26:a3:ec:67:30:14:0e:b8:5d:6e:12:e3:e0:bb:3b: 4f:dd:35:18:fe:b2:ac:d1:c0:2a:5c:59:96:14:59: 1c:7a:20:00:6a:a3:e4:9b:6e:c1:a8:a6:c1:16:7b: 2f:71:4d:79:ae:74:2e:a4:cc:26:37:eb:d8:b8:a0: 33:7b:ad:d0:5a:7c:20:f4:66:63:fd:72:54:90:8f: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:29:9D:5A:84:D0:06:F8:74:56:40:2A:7F:22:58:A4:BC:FE:FC X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:94:d0:30:70:72:2a:56:bd:f5:8b:0b:c3:e8:31:10:75:c7: 92:8e:a7:b8:c5:11:34:46:c0:8e:30:54:5e:25:5b:39:be:e3: 50:95:42:ab:4e:f3:d9:f6:cd:c0:26:1f:05:7a:76:01:6d:18: ee:8c:17:63:ba:18:dd:2e:29:97:c6:82:b4:e4:fd:fb:8a:3c: 6e:f2:4e:63:51:e8:85:3c:e4:80:36:68:be:74:68:bd:e8:d0: 05:53:76:24:36:be:7b:5d:f2:5a:61:e8:9b:f0:da:01:a5:5c: bf:5b:d5:ab:85:d5:a7:0e:29:90:24:38:76:90:c6:48:69:7c: 47:e4:8e:9a:b9:5f:3d:e2:dd:49:99:ba:b1:e8:b6:a9:fe:96: 7c:9e:55:ca:c4:ef:8b:ef:61:ed:f0:da:fc:2c:0f:7f:79:ec: df:32:fb:6b:48:b2:d5:97:e0:b8:26:ee:6a:99:33:67:f7:d8: 9e:51:69:4a:b6:d2:ba:7c:66:5f:ba:b7:87:d3:fa:cf:5c:ba: 05:e2:9e:ac:95:e6:25:b6:b8:5a:de:f1:cf:b0:a8:6c:83:2d: 7c:77:11:fa:23:9b:c6:8b:d4:fe:e0:35:59:6c:aa:76:47:e7: 39:57:17:32:c6:d5:63:e5:4d:9b:c1:97:56:ae:24:ee:ff:08: 3e:34:50:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwOTA4MTk0NDM5WhcNMjUwOTE1MTk0NDM5WjAYMRYwFAYD VQQDEw02OGJmMzIyOC00YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpvMgDMCUwEBaG3orVZvt2wF5Bda3+q+gHhmLDQTg/9tU9sDI+pH1n/cUYRc HYLG9eofWNuj7TeIECoqEGaEFQ57WVbN68PNGawjVj6lOWuvqipmNNCe4CoatXXE LDWVpWacGbouGcvNaiUbnKFSMbf8SmeFbQ2ATPsdJUVHuIWKTniW7MFHYFS8DbfN 4iQ56ukv1rQOxSxESZaeU4rZa0NKEdInULf+UB2Tw9Xb6EPiRdMmo+xnMBQOuF1u EuPguztP3TUY/rKs0cAqXFmWFFkceiAAaqPkm27BqKbBFnsvcU15rnQupMwmN+vY uKAze63QWnwg9GZj/XJUkI+bDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE01KZ1a hNAG+HRWQCp/IlikvP78MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQColNAwcHIqVr31iwvD6DEQdceSjqe4xRE0RsCOMFReJVs5vuNQlUKr TvPZ9s3AJh8FenYBbRjujBdjuhjdLimXxoK05P37ijxu8k5jUeiFPOSANmi+dGi9 6NAFU3YkNr57XfJaYeib8NoBpVy/W9WrhdWnDimQJDh2kMZIaXxH5I6auV894t1J mbqx6Lap/pZ8nlXKxO+L72Ht8Nr8LA9/eezfMvtrSLLVl+C4Ju5qmTNn99ieUWlK ttK6fGZfureH0/rPXLoF4p6sleYltrha3vHPsKhsgy18dxH6I5vGi9T+4DVZbKp2 R+c5VxcyxtVj5U2bwZdWriTu/wg+NFAO -----END CERTIFICATE-----Generated at Tue Sep 9 08:16:29 2025 by rpki-client