$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json) Hash identifier: yneQ9faEG9GbJ7EwvhfCj75YoR7ZgAvplwI9uP5Tkag= Subject key identifier: 8D:74:1C:3F:97:04:28:5D:9B:4F:20:E3:CF:65:83:6D:F7:C1:6E:0E Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft Manifest number: 0220 Signing time: Fri 19 Sep 2025 02:28:23 +0000 Manifest this update: Fri 19 Sep 2025 02:28:23 +0000 Manifest next update: Fri 26 Sep 2025 02:28:23 +0000 Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: +WwYDqpcc+g++QdQIitZCwuf9gVh2GRGrg9sfo/Spc0=) 2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: Sep 19 02:28:23 2025 GMT Not After : Sep 26 02:28:23 2025 GMT Subject: CN=68ccbfc7-4580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:6e:23:b3:24:37:e4:65:96:22:db:47:4c: b4:3c:95:e4:7e:ec:5c:e9:d9:2f:6c:c9:f5:65:dd: 5e:a6:c1:7f:54:8a:1f:53:a3:22:c8:1d:7f:cd:e2: 24:10:a9:d8:1a:39:42:a5:ac:9f:13:e9:13:bf:8b: 0d:03:16:b7:fc:ff:d3:b8:cf:a8:f7:0a:7f:f3:bb: 36:3f:7b:4d:a6:a7:4c:a7:95:5c:f2:e9:77:ab:63: 49:7b:5a:a5:dc:63:ac:4e:b0:eb:cd:6b:1c:ee:8f: 09:92:48:c7:26:4c:38:83:b5:8e:b1:0d:99:51:a7: 9e:b8:30:0e:87:1c:4e:0a:88:1b:94:fb:70:ff:d9: 6b:10:3c:8d:d6:d8:65:91:6d:49:93:a4:bc:6d:05: a1:48:52:62:1f:c9:c0:25:d7:79:39:a1:a7:3b:7e: db:65:ca:fe:88:0d:0e:3e:b9:a4:0a:7a:16:32:af: e8:c1:fe:b6:d2:d9:6a:e8:cf:bd:03:40:44:03:1e: 8e:24:6f:a7:10:7e:ff:90:3f:cc:9b:45:0c:e2:bc: bc:f4:5e:c4:09:91:d7:a1:b6:4d:23:4f:8e:83:ce: 74:44:54:8e:63:2b:ca:45:50:8b:a9:5a:39:65:c7: 2f:27:84:db:69:87:5f:04:b7:2f:5f:f2:85:07:d7: 88:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:1C:3F:97:04:28:5D:9B:4F:20:E3:CF:65:83:6D:F7:C1:6E:0E X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:97:13:c7:24:20:87:77:bb:9d:d1:fd:20:ff:95:4a:42:49: bc:83:11:81:96:66:59:c0:e9:a9:ce:df:94:03:9b:f0:11:ec: 63:11:d8:99:c4:85:d0:cb:a3:88:09:ad:4b:68:32:a6:3e:c5: b0:18:f4:5e:a2:70:41:b1:8c:16:e4:74:d8:29:10:f2:e6:7c: d0:f3:ca:13:3d:0a:66:f7:9e:43:5a:c1:d4:96:7d:39:f9:1c: c5:dc:35:fb:33:0c:fa:cf:5c:37:6c:cd:47:33:e0:22:ec:a6: 4e:71:13:02:06:82:a6:fd:08:d0:51:97:4a:b2:e4:a7:2e:62: 91:95:bc:e5:5e:51:35:60:08:5e:fe:f2:12:65:41:81:87:4d: e1:e8:cd:f6:de:e6:7a:fb:25:5c:ec:d1:f6:d5:bf:fd:8e:31: ba:d5:ba:25:33:40:5c:c3:7b:e9:0e:54:66:7c:0a:d6:e2:60: 75:ba:f7:af:c2:0f:39:4a:45:a3:36:ff:06:75:3b:9a:98:cd: 43:05:fd:dc:e3:06:ea:eb:14:79:fd:5a:0e:2e:19:6e:b1:f7: d6:5d:03:37:3f:c1:eb:aa:3f:4c:4a:0a:0f:fe:e4:50:8f:b6: 1f:d8:ab:92:8c:95:61:53:67:9e:e1:a4:d1:87:52:82:92:73: e8:d2:6e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjUwOTE5MDIyODIzWhcNMjUwOTI2MDIyODIzWjAYMRYwFAYD VQQDEw02OGNjYmZjNy00NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l1uI7MkN+RlliLbR0y0PJXkfuxc6dkvbMn1Zd1epsF/VIofU6MiyB1/zeIk EKnYGjlCpayfE+kTv4sNAxa3/P/TuM+o9wp/87s2P3tNpqdMp5Vc8ul3q2NJe1ql 3GOsTrDrzWsc7o8JkkjHJkw4g7WOsQ2ZUaeeuDAOhxxOCogblPtw/9lrEDyN1thl kW1Jk6S8bQWhSFJiH8nAJdd5OaGnO37bZcr+iA0OPrmkCnoWMq/owf620tlq6M+9 A0BEAx6OJG+nEH7/kD/Mm0UM4ry89F7ECZHXobZNI0+Og850RFSOYyvKRVCLqVo5 ZccvJ4TbaYdfBLcvX/KFB9eIQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI10HD+X BChdm08g489lg233wW4OMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCalxPHJCCHd7ud0f0g/5VKQkm8gxGBlmZZwOmpzt+UA5vwEexjEdiZ xIXQy6OICa1LaDKmPsWwGPReonBBsYwW5HTYKRDy5nzQ88oTPQpm955DWsHUln05 +RzF3DX7Mwz6z1w3bM1HM+Ai7KZOcRMCBoKm/QjQUZdKsuSnLmKRlbzlXlE1YAhe /vISZUGBh03h6M323uZ6+yVc7NH21b/9jjG61bolM0Bcw3vpDlRmfArW4mB1uvev wg85SkWjNv8GdTuamM1DBf3c4wbq6xR5/VoOLhlusffWXQM3P8Hrqj9MSgoP/uRQ j7Yf2KuSjJVhU2ee4aTRh1KCknPo0m7p -----END CERTIFICATE-----Generated at Fri Sep 19 08:50:08 2025 by rpki-client