$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json) Hash identifier: Y2lHUGPxEMTTTS4GFR3kXRYsRUzqa8hup7yByupc9Wg= Subject key identifier: 74:2D:26:A6:CE:CB:E1:CD:C5:56:BD:00:BA:D3:46:A8:79:1C:41:98 Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft Manifest number: 014F Signing time: Mon 03 Nov 2025 04:15:36 +0000 Manifest this update: Mon 03 Nov 2025 04:15:35 +0000 Manifest next update: Mon 10 Nov 2025 04:15:35 +0000 Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: a/qjgNGZu8IpbQeAOEd2x2Z7tAbDE2jkj1JeDsquqXQ=) 2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: MV1F0Q4UL7J+dtgMeHTJ35pvzsiuBXHWMmcfd9HjqkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2 Validity Not Before: Nov 3 04:15:35 2025 GMT Not After : Nov 10 04:15:35 2025 GMT Subject: CN=69082c67-7df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:9a:85:9c:fb:5c:2e:ea:db:1f:8e:17:14: 9b:db:ed:7c:d9:5a:e4:fd:95:0c:0f:a6:f1:fd:57: 33:29:55:54:19:b8:d8:c0:64:13:e1:9c:0c:85:03: 64:66:79:5a:23:b8:28:a5:9d:d5:43:0c:52:77:7e: 91:0d:52:6b:16:28:84:af:54:12:5f:55:6f:69:87: aa:8a:5e:47:ad:b7:ff:01:4b:dd:04:16:0b:e3:35: 06:4c:3b:a9:d2:3e:48:29:cc:56:98:32:65:6b:c1: 6d:3e:ac:5e:98:1c:e9:a8:f6:59:90:f2:b9:e6:d5: c5:c8:e4:5c:85:77:bd:d6:ce:4f:ea:6b:e1:a5:57: d4:16:8f:28:74:91:c7:f0:e1:2e:85:19:ab:72:42: 1c:b1:93:3e:23:cc:f0:9d:7e:ab:1e:d4:27:df:38: 3c:e5:f7:50:e1:5c:e6:97:8e:0e:cd:38:5e:51:47: 2f:0e:60:2a:8e:d5:81:18:fd:85:7f:ba:77:1b:56: 1c:54:a1:1a:f3:91:73:c5:c8:1f:a7:c7:fb:67:f3: 81:bc:4a:bf:e5:aa:df:74:34:54:ba:eb:c8:e9:e9: 28:53:f5:ba:8e:b0:ca:e2:6a:55:56:8b:7d:37:d4: 82:f2:b0:47:50:59:e1:b0:25:f1:63:c5:46:32:64: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:26:A6:CE:CB:E1:CD:C5:56:BD:00:BA:D3:46:A8:79:1C:41:98 X509v3 Authority Key Identifier: keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:83:df:ab:c9:36:4b:2f:e7:3b:4c:1f:78:24:21:cb:51:58: f8:45:13:c5:28:f8:9b:ce:39:d3:ec:8d:bd:c7:be:b9:81:ce: 7e:ad:96:62:74:9c:a1:e5:b1:09:e7:d7:d2:85:0d:1f:f6:02: 02:59:d0:d7:84:ba:68:0c:f8:25:cf:6b:5d:d9:b6:6b:3f:67: 53:d1:a6:0c:99:8a:88:7e:11:d6:70:46:1d:63:8c:af:01:73: a9:41:45:ef:e1:e8:a7:e9:17:ff:61:f6:6f:31:36:ac:87:7d: 9d:5d:ff:a6:32:e7:71:72:60:25:07:3f:1f:97:4e:66:56:db: 33:3e:b8:34:c7:64:65:86:91:04:8b:7d:39:ac:b4:55:bd:fb: e1:89:28:bc:f5:46:73:94:18:aa:d0:75:c6:fc:ae:6d:42:31: 60:15:20:18:fb:1c:9c:bf:01:f7:4a:af:27:32:dd:85:2d:71: 61:cf:56:71:85:fa:2c:45:60:89:77:d8:f5:07:34:9b:10:ab: e3:e8:12:72:2f:14:c8:d4:9e:7f:41:02:ca:07:7c:9f:8d:ab: 03:68:fa:7a:8a:6d:bd:de:8f:a8:e2:80:da:e9:b7:50:e5:45: b3:48:d8:f3:8f:5d:d2:56:1a:28:38:30:d4:dc:fe:9d:fc:ae: 16:47:59:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE NjBGNEREQjIwHhcNMjUxMTAzMDQxNTM1WhcNMjUxMTEwMDQxNTM1WjAYMRYwFAYD VQQDEw02OTA4MmM2Ny03ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslSahZz7XC7q2x+OFxSb2+182Vrk/ZUMD6bx/VczKVVUGbjYwGQT4ZwMhQNk ZnlaI7gopZ3VQwxSd36RDVJrFiiEr1QSX1VvaYeqil5Hrbf/AUvdBBYL4zUGTDup 0j5IKcxWmDJla8FtPqxemBzpqPZZkPK55tXFyORchXe91s5P6mvhpVfUFo8odJHH 8OEuhRmrckIcsZM+I8zwnX6rHtQn3zg85fdQ4Vzml44OzTheUUcvDmAqjtWBGP2F f7p3G1YcVKEa85Fzxcgfp8f7Z/OBvEq/5arfdDRUuuvI6ekoU/W6jrDK4mpVVot9 N9SC8rBHUFnhsCXxY8VGMmSFfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQtJqbO y+HNxVa9ALrTRqh5HEGYMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY UjJMWk1EUG5CZ25XRDAzYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxg9+ryTZLL+c7TB94JCHLUVj4RRPFKPibzjnT7I29x765gc5+rZZi dJyh5bEJ59fShQ0f9gICWdDXhLpoDPglz2td2bZrP2dT0aYMmYqIfhHWcEYdY4yv AXOpQUXv4ein6Rf/YfZvMTash32dXf+mMudxcmAlBz8fl05mVtszPrg0x2RlhpEE i305rLRVvfvhiSi89UZzlBiq0HXG/K5tQjFgFSAY+xycvwH3Sq8nMt2FLXFhz1Zx hfosRWCJd9j1BzSbEKvj6BJyLxTI1J5/QQLKB3yfjasDaPp6im293o+o4oDa6bdQ 5UWzSNjzj13SVhooODDU3P6d/K4WR1m5 -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:02 2025 by rpki-client