$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: DU3EBlTy4aDIY6yzKacI5+AYRXimKGqd3TuifsOIaiY= Subject key identifier: A6:1B:D1:8B:DB:D0:EE:AF:A6:15:16:58:86:58:A9:3C:A5:09:56:06 Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 79 Signing time: Thu 11 Sep 2025 07:25:01 +0000 Manifest this update: Thu 11 Sep 2025 07:25:00 +0000 Manifest next update: Thu 18 Sep 2025 07:25:00 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: Xu3keOz5Y2BYQQftTM6rPJLq/DwkRTfo2brzfDo0F24=) 2: 7F9864BC278511F08A309E80C4F9AE02.roa (hash: Qmy+i9C5Rc4mKmMkW3mFXP5ni+MgnYfnd/vlrjppwOw=) 3: 965254F8278811F09217002CC4F9AE02.roa (hash: 43x78k+dzhsv7ZCDVrgKApUESFB1ajmPRMXQlcEBmxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 07:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Sep 11 07:25:00 2025 GMT Not After : Sep 18 07:25:00 2025 GMT Subject: CN=68c2794c-0c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:c6:c9:b2:c7:ff:05:f3:a5:33:c9:16:24: 6a:97:38:25:6b:13:c5:c7:a4:95:aa:75:e3:6b:d5: 1b:50:74:0d:39:af:02:35:db:57:61:ec:b7:98:5e: 27:99:b7:19:85:19:d3:ae:dc:36:0b:3e:96:5b:30: c6:6f:05:7f:0f:91:db:37:39:d0:f7:65:c2:12:17: 2b:9a:d2:33:aa:dc:a3:8a:ab:27:85:40:0f:f0:f4: 8a:98:8d:7a:61:e9:3f:b4:98:3f:3a:08:00:06:04: f2:ce:70:a6:13:d6:6a:81:5b:a4:72:f3:67:c8:ea: 1c:b5:40:84:c7:d3:97:bc:e3:88:b6:a8:c1:b7:99: f2:ef:c6:a3:b2:fe:23:34:ad:35:1f:9a:ad:1f:05: 87:c2:21:31:71:79:e5:a7:5c:d7:7c:14:8c:f7:a2: 52:93:86:b4:70:ee:9e:50:a6:22:0b:b6:b5:23:56: b9:cf:73:39:b3:cc:c9:1b:91:87:5f:f1:58:64:9b: 58:a8:87:b8:6e:6e:11:ff:82:12:f3:e9:0a:8a:79: 22:08:d3:50:d3:d4:ba:32:1e:03:ee:e5:8b:25:74: 2b:c7:02:7c:77:24:4a:19:47:f5:e2:d1:f2:f5:79: 19:2e:0a:17:83:a8:b6:1b:e7:0f:31:ed:de:e9:46: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:D1:8B:DB:D0:EE:AF:A6:15:16:58:86:58:A9:3C:A5:09:56:06 X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8f:52:6d:fc:17:e6:b8:5a:57:0b:44:77:ba:a8:f9:a2:d1: 7d:8a:20:9b:36:55:c2:84:59:51:88:b8:8e:18:0e:1d:6b:9b: b7:60:34:ce:50:ba:14:66:de:ac:50:34:f9:24:15:b4:e3:4a: 71:91:48:e3:44:53:14:3b:8f:04:c2:12:40:c4:b9:68:42:75: c3:30:7d:a7:d2:82:3f:96:5a:c2:87:a0:7b:d9:bb:15:75:6d: b3:52:d5:f0:d7:68:51:10:3f:6f:2d:c5:ea:2a:13:42:d1:87: eb:26:b6:6c:2d:ba:9b:30:50:4a:e1:af:c8:d6:7c:1c:0e:d6: ef:3e:dd:77:98:27:d4:f7:06:e8:e0:c4:52:58:91:17:a6:fe: 72:8e:9b:2c:e7:4a:02:44:6b:56:8d:0a:20:25:a3:ee:23:08: ed:13:41:a0:9d:0d:54:8a:19:77:ac:a7:29:2d:e3:eb:3d:a9: 74:a7:33:b4:91:f9:6d:c8:31:60:08:71:80:cf:ef:ed:6d:7a: 8d:01:95:78:25:5d:e3:0b:d7:4e:bb:b4:bd:c3:fe:2e:2f:52: ea:dd:f6:83:3d:42:f3:6c:80:38:be:b8:23:fe:36:a2:41:cc: 05:d5:ad:9b:8b:10:d1:c1:8b:24:34:c2:53:55:7c:7e:e0:99: 29:ba:29:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2OEMxMTAvBgNVBAUTKEEyMjg4Rjg5NjRENjE2OUE4Nzk1RjJGNEVGMDVFMEQ1 RTZFMTNCMDkwHhcNMjUwOTExMDcyNTAwWhcNMjUwOTE4MDcyNTAwWjAYMRYwFAYD VQQDEw02OGMyNzk0Yy0wYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10nGybLH/wXzpTPJFiRqlzglaxPFx6SVqnXja9UbUHQNOa8CNdtXYey3mF4n mbcZhRnTrtw2Cz6WWzDGbwV/D5HbNznQ92XCEhcrmtIzqtyjiqsnhUAP8PSKmI16 Yek/tJg/OggABgTyznCmE9ZqgVukcvNnyOoctUCEx9OXvOOItqjBt5ny78ajsv4j NK01H5qtHwWHwiExcXnlp1zXfBSM96JSk4a0cO6eUKYiC7a1I1a5z3M5s8zJG5GH X/FYZJtYqIe4bm4R/4IS8+kKinkiCNNQ09S6Mh4D7uWLJXQrxwJ8dyRKGUf14tHy 9XkZLgoXg6i2G+cPMe3e6UZlTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYb0Yvb 0O6vphUWWIZYqTylCVYGMB8GA1UdIwQYMBaAFKIoj4lk1haah5Xy9O8F4NXm4TsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY4Qy8xN0QxMDNBOEVB QjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0ZwcUhsZkwwN3dYZzFlYmhP d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY4Qy8xN0QxMDNBOEVBQjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0Zw cUhsZkwwN3dYZzFlYmhPd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOj1Jt/BfmuFpXC0R3uqj5otF9iiCbNlXChFlRiLiOGA4da5u3YDTO ULoUZt6sUDT5JBW040pxkUjjRFMUO48EwhJAxLloQnXDMH2n0oI/llrCh6B72bsV dW2zUtXw12hRED9vLcXqKhNC0YfrJrZsLbqbMFBK4a/I1nwcDtbvPt13mCfU9wbo 4MRSWJEXpv5yjpss50oCRGtWjQogJaPuIwjtE0GgnQ1Uihl3rKcpLePrPal0pzO0 kfltyDFgCHGAz+/tbXqNAZV4JV3jC9dOu7S9w/4uL1Lq3faDPULzbIA4vrgj/jai QcwF1a2bixDRwYskNMJTVXx+4JkpuinK -----END CERTIFICATE-----Generated at Thu Sep 11 20:35:12 2025 by rpki-client