$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: MUklFFVEk2iQ5CztzDk+ws9pOK1JqaCmduyP6mST7k8= Subject key identifier: 91:60:11:B8:6D:CC:07:08:19:C8:E6:A8:E2:35:8F:71:96:60:0F:C4 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:43:01 +0000 Manifest this update: Sat 23 Aug 2025 06:43:01 +0000 Manifest next update: Sat 30 Aug 2025 06:43:01 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: UDGmeimDvsjZZ4XSwuKGOAYQmsnJZE7TAQ6xnH1SI70=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Aug 23 06:43:01 2025 GMT Not After : Aug 30 06:43:01 2025 GMT Subject: CN=68a962f5-b799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:9f:1c:9e:0d:53:4d:13:a1:a9:ce:85:5e: 1e:aa:fb:15:f6:d4:94:f0:61:a5:69:73:2b:f0:d7: f1:63:e9:6f:fb:3b:c6:75:6a:26:30:87:1c:98:ba: 85:33:8f:b6:53:d9:d8:72:8b:6c:31:81:44:a3:29: aa:bd:77:d3:84:38:75:de:c3:f5:36:ae:96:73:71: 9d:93:09:c9:ad:47:fb:75:d8:ce:39:7e:e9:9e:65: 72:a7:c5:4a:ff:8f:63:51:01:5c:1a:0e:8c:76:4e: 5c:79:49:f4:66:e6:32:38:d2:04:ef:60:56:7f:28: bd:02:10:e5:d5:24:39:f7:78:0d:a6:c9:48:3e:d7: 28:9f:35:77:48:ea:d5:e5:48:97:28:16:cc:0f:45: 34:f4:b2:b9:b3:06:c4:e3:e7:f8:33:3f:8e:a8:57: 77:45:b9:19:27:95:6e:8f:9b:d6:a6:91:bd:92:1a: 96:f9:1a:29:71:68:c3:7f:0b:06:ea:40:fb:08:41: 04:74:87:75:7b:54:22:f4:0f:72:bc:73:6e:7b:ec: df:8a:83:5a:42:74:d8:77:2a:48:80:32:48:25:07: 7f:11:59:bb:7b:af:84:57:4f:18:89:9d:25:5a:44: 41:20:2f:69:05:34:67:c7:cd:be:d5:ee:88:ca:cd: b3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:11:B8:6D:CC:07:08:19:C8:E6:A8:E2:35:8F:71:96:60:0F:C4 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:03:15:72:3f:c0:95:02:3e:2f:8a:f6:53:fc:f3:df:9b: 47:bd:34:11:b9:08:eb:c7:dc:88:bf:b7:0b:47:91:00:60:ae: 0f:20:62:58:05:c6:48:15:d0:6a:a8:50:62:1f:03:6c:30:29: 96:7c:17:68:04:d4:81:03:3c:62:fc:03:ba:92:7e:6d:19:02: 0f:ad:0e:d7:9c:07:6f:6e:5b:9d:70:3d:cb:25:ab:ed:ac:7d: 3f:5e:a0:e5:31:a9:da:ae:e8:57:bf:e4:49:a2:ca:7a:d1:99: 16:80:7a:3c:a2:df:e7:17:e1:db:9b:4a:29:65:61:7f:fc:28: b2:ca:79:af:08:59:95:3e:17:f3:a7:0b:7a:0e:8f:01:28:21: 75:60:cf:e2:9f:92:12:38:ef:d8:9b:dd:dc:f2:b2:b2:ba:aa: 66:37:5b:cd:12:a6:d4:08:90:1f:78:fb:a3:cd:42:a5:c1:f8: 9a:69:bf:c6:dd:17:bb:cf:a7:1d:22:91:e8:83:27:79:8a:ca: 6a:ee:6d:71:3d:c4:16:91:12:91:5b:e0:f7:25:7e:06:08:bb: 72:09:43:e8:74:50:61:a8:b8:2f:98:b7:37:65:59:6c:15:39: b5:80:a6:f4:60:d1:f5:5e:3d:80:bf:5d:3f:40:ef:ca:5b:47: e3:b9:70:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjUwODIzMDY0MzAxWhcNMjUwODMwMDY0MzAxWjAYMRYwFAYD VQQDEw02OGE5NjJmNS1iNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pSfHJ4NU00ToanOhV4eqvsV9tSU8GGlaXMr8NfxY+lv+zvGdWomMIccmLqF M4+2U9nYcotsMYFEoymqvXfThDh13sP1Nq6Wc3GdkwnJrUf7ddjOOX7pnmVyp8VK /49jUQFcGg6Mdk5ceUn0ZuYyONIE72BWfyi9AhDl1SQ593gNpslIPtconzV3SOrV 5UiXKBbMD0U09LK5swbE4+f4Mz+OqFd3RbkZJ5Vuj5vWppG9khqW+RopcWjDfwsG 6kD7CEEEdId1e1Qi9A9yvHNue+zfioNaQnTYdypIgDJIJQd/EVm7e6+EV08YiZ0l WkRBIC9pBTRnx82+1e6Iys2zIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFgEbht zAcIGcjmqOI1j3GWYA/EMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXQMVcj/AlQI+L4r2U/zz35tHvTQRuQjrx9yIv7cLR5EAYK4PIGJY BcZIFdBqqFBiHwNsMCmWfBdoBNSBAzxi/AO6kn5tGQIPrQ7XnAdvbludcD3LJavt rH0/XqDlManaruhXv+RJosp60ZkWgHo8ot/nF+Hbm0opZWF//CiyynmvCFmVPhfz pwt6Do8BKCF1YM/in5ISOO/Ym93c8rKyuqpmN1vNEqbUCJAfePujzUKlwfiaab/G 3Re7z6cdIpHogyd5ispq7m1xPcQWkRKRW+D3JX4GCLtyCUPodFBhqLgvmLc3ZVls FTm1gKb0YNH1Xj2Av10/QO/KW0fjuXCT -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:49 2025 by rpki-client