$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: G4eFGh6yCA/9wrpK/bw9G4JQsKDAR7/SDHK6nmzI03c= Subject key identifier: C0:42:09:E5:27:FF:8E:3D:2F:DF:40:16:0B:D3:BF:24:2E:45:76:BE Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 01C4 Signing time: Fri 05 Sep 2025 03:36:30 +0000 Manifest this update: Fri 05 Sep 2025 03:36:30 +0000 Manifest next update: Fri 12 Sep 2025 03:36:30 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: G7sLTtgqzDSvnABgiAr6hF72tqnthCNpVq6t/HhJSOc=) 2: CE65A4E4A57E11EFA1B6E428C4F9AE02.roa (hash: 1SKbx2XsDMYzA80POo6zzafuauDwKbPNh6n7Ob5AjVA=) 3: D0103496FD6611EE9188C568C4F9AE02.roa (hash: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=) 4: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (hash: 8ceZRP/XUhaUyTjeioD/K4mCivFkQCLXcH6cjJ7JFq0=) 5: E762B166FAF811EE92A3642EC4F9AE02.roa (hash: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=) 6: 1D9A36F40C6B11EF95ACFA13C4F9AE02.roa (hash: NJPr7OZom8PgcjW18JJjDNXMEozgSB9WGNPuyE4apbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Sep 5 03:36:30 2025 GMT Not After : Sep 12 03:36:30 2025 GMT Subject: CN=68ba5abe-7cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cc:a1:35:9f:d4:b6:53:d2:5e:69:6f:3b:81: b4:34:17:b5:3b:64:a5:e7:21:9e:72:31:19:40:df: ee:0c:63:13:5f:8b:4b:b6:f5:9f:50:7e:38:3b:91: d1:be:60:82:d1:81:bd:a6:d6:c6:80:a7:44:b4:06: a5:b0:69:94:3a:b5:4d:9e:26:e6:c6:20:00:88:f1: ab:da:32:3b:58:07:50:38:fe:90:e4:69:12:7b:a2: a7:ca:1f:b4:90:6e:32:5f:9a:68:ce:68:e4:13:28: 9a:1e:74:aa:b7:a4:d9:f7:f3:ae:be:af:37:36:38: 4d:40:00:46:00:a0:e4:17:b6:e7:08:65:ec:ea:da: 41:e5:ef:3c:75:ca:09:b6:d9:2f:bf:f8:ae:1f:f5: 23:f2:1c:b5:47:a0:7f:16:7e:80:c9:68:6f:e1:3b: a6:d2:15:d7:3d:10:c3:bc:a3:57:40:e9:ed:f1:70: a1:28:66:e6:c1:96:e3:86:8b:79:a8:fc:f9:28:52: 74:3f:5b:6b:a4:5d:39:19:b4:b1:ae:4b:c8:26:ae: 75:14:b2:80:43:cb:6b:c9:b4:ee:3c:ef:91:e3:6b: 1e:87:18:0d:47:4e:38:16:21:06:08:be:73:ad:b7: f3:a1:69:7a:90:f1:04:aa:06:ab:f9:dc:8f:3c:14: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:09:E5:27:FF:8E:3D:2F:DF:40:16:0B:D3:BF:24:2E:45:76:BE X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:40:31:5d:26:7e:44:b4:be:d1:fd:ed:94:40:a3:98:74:14: 77:5c:5f:0c:69:08:e3:26:06:6e:9f:1c:7f:0c:b7:9a:3c:ad: 54:d7:1d:c5:a0:3a:5a:f3:7b:de:c1:e9:68:a2:66:6a:b6:3a: ab:c4:38:84:8d:19:ab:bb:37:81:d1:56:d2:7e:1d:0c:59:42: ce:15:2b:be:04:e5:85:49:63:6b:e4:ae:a8:8e:65:3e:e4:9f: fd:4f:07:f5:d1:3a:b8:34:e1:6a:91:f8:44:ce:b1:e0:3a:52: b4:e7:b6:1b:7a:98:87:2f:c4:6b:f6:cd:83:66:04:5b:25:51: bd:8f:a2:2f:5f:2c:74:36:8b:1a:f9:b5:20:38:06:a0:b9:94: b2:02:86:1f:42:f4:61:61:e7:f8:8c:4e:12:77:d3:0b:2a:eb: 81:a5:47:14:dc:73:91:cf:18:7d:f1:85:df:7b:fa:ff:a0:35: 3a:41:22:21:b6:62:f7:69:2d:18:df:2f:b8:13:f8:51:84:cb: 38:c5:17:99:9f:a7:cd:e2:7f:94:07:9b:b4:05:0b:88:9d:cf: f7:5f:08:72:39:98:5b:94:87:8c:ce:20:db:93:42:8f:dd:ad: d7:f6:e2:c9:37:78:e5:60:25:f8:8f:57:d9:41:95:a6:a7:f7: 14:8d:b3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjUwOTA1MDMzNjMwWhcNMjUwOTEyMDMzNjMwWjAYMRYwFAYD VQQDEw02OGJhNWFiZS03Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MyhNZ/UtlPSXmlvO4G0NBe1O2Sl5yGecjEZQN/uDGMTX4tLtvWfUH44O5HR vmCC0YG9ptbGgKdEtAalsGmUOrVNnibmxiAAiPGr2jI7WAdQOP6Q5GkSe6Knyh+0 kG4yX5pozmjkEyiaHnSqt6TZ9/Ouvq83NjhNQABGAKDkF7bnCGXs6tpB5e88dcoJ ttkvv/iuH/Uj8hy1R6B/Fn6AyWhv4Tum0hXXPRDDvKNXQOnt8XChKGbmwZbjhot5 qPz5KFJ0P1trpF05GbSxrkvIJq51FLKAQ8trybTuPO+R42sehxgNR044FiEGCL5z rbfzoWl6kPEEqgar+dyPPBTBhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBCCeUn /449L99AFgvTvyQuRXa+MB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQDFdJn5EtL7R/e2UQKOYdBR3XF8MaQjjJgZunxx/DLeaPK1U1x3F oDpa83veweloomZqtjqrxDiEjRmruzeB0VbSfh0MWULOFSu+BOWFSWNr5K6ojmU+ 5J/9Twf10Tq4NOFqkfhEzrHgOlK057YbepiHL8Rr9s2DZgRbJVG9j6IvXyx0Nosa +bUgOAaguZSyAoYfQvRhYef4jE4Sd9MLKuuBpUcU3HORzxh98YXfe/r/oDU6QSIh tmL3aS0Y3y+4E/hRhMs4xReZn6fN4n+UB5u0BQuInc/3XwhyOZhblIeMziDbk0KP 3a3X9uLJN3jlYCX4j1fZQZWmp/cUjbO/ -----END CERTIFICATE-----Generated at Sat Sep 6 05:15:35 2025 by rpki-client