$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: 1BSjZjQG9r5ff/ldVu/U++/cJT4ZSGFU84PgUUUfZEU= Subject key identifier: 24:B1:A4:F0:AF:C3:4B:70:34:54:0D:8F:CE:D5:E0:D5:2C:7F:22:72 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 07:19:05 +0000 Manifest this update: Mon 03 Nov 2025 07:19:04 +0000 Manifest next update: Mon 10 Nov 2025 07:19:04 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: 1lPa0PYPQU20cnq/Y76SnRqwQtcf1g3Qv/LC7DX4i0s=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: RqRFm0koAI1zOC0qjZBwbHn7EgeV9Uebi2RR1Lc++cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Nov 3 07:19:04 2025 GMT Not After : Nov 10 07:19:04 2025 GMT Subject: CN=69085768-26ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:97:ea:91:2a:3b:03:19:e0:45:64:e5:f8: 05:4f:ed:ca:f2:4a:88:00:16:4f:a2:32:12:4f:4e: c5:46:42:5c:b0:51:51:ce:be:7e:de:02:79:c0:fc: f9:86:9d:8e:19:2e:64:92:20:fd:d9:ce:76:fa:af: 88:c0:cd:22:52:d5:15:8e:d4:79:19:20:83:48:b0: bf:13:64:fa:60:19:4b:11:97:b4:12:f1:f6:c5:a7: ba:82:d0:5d:ac:8d:5e:c5:17:e1:34:a4:a5:32:41: 34:f9:f1:9d:f9:cb:d6:06:0a:be:25:70:a6:a5:59: aa:3d:e8:c3:c0:42:7e:82:c3:c6:be:f8:c4:d6:c6: c7:eb:67:28:e4:64:cf:c7:69:15:4d:f9:ca:39:1b: 98:aa:8a:dc:75:6d:62:ad:5b:97:8c:f2:4e:27:99: 59:47:19:4b:1d:39:3e:5a:05:41:20:9d:42:75:c3: a7:48:60:cc:78:68:7a:fd:4f:b8:2f:b1:d9:8a:d5: 21:77:4b:8d:38:a7:e4:fc:b9:10:f4:b5:60:e1:dd: a8:79:4a:65:97:e8:71:b2:ea:a3:6f:c0:8d:ed:b5: 68:4f:9d:10:aa:5c:3b:1b:82:4d:1d:ed:7f:13:c0: 6b:17:00:4b:09:1f:dc:1a:6a:6b:2a:b6:11:1d:18: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:A4:F0:AF:C3:4B:70:34:54:0D:8F:CE:D5:E0:D5:2C:7F:22:72 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:73:b1:3b:20:f5:19:d2:41:5e:f2:c7:04:7d:0e:00:9b:f8: d8:40:5a:4d:e9:df:b3:17:ca:71:14:2f:6f:90:df:65:68:b9: ae:ad:99:bb:77:2b:57:a7:c2:ba:a0:08:03:77:a5:bc:70:fc: 57:bf:ec:2a:14:20:ca:f5:93:52:83:d8:c1:7e:51:76:78:47: 52:1f:43:5a:85:0f:bd:17:3f:d5:6b:32:b6:8b:60:70:a8:13: 51:17:70:cc:3b:50:06:10:d8:bf:49:24:16:c2:a8:89:65:de: f1:e3:88:3d:90:69:f1:e5:4f:46:ec:7a:96:75:23:7f:dd:d7: f3:55:82:cb:ef:4d:ff:e0:cd:54:a4:b5:72:e8:d2:06:e2:a3: 7d:08:3b:2b:22:bb:1b:4a:73:0c:19:57:07:81:c3:f0:8a:ab: 9b:95:58:23:07:ae:bc:32:c8:4d:59:16:9c:92:f7:d7:a9:d2: 66:5e:3a:ee:fb:38:3b:ec:60:28:86:c4:1f:88:f9:0a:84:93: 6f:ce:b9:db:d1:a3:99:74:07:3f:82:6d:b0:6f:0f:0e:b3:ff: d0:18:33:7c:7b:fe:56:9d:ee:e1:07:92:58:67:88:36:4e:33: e0:85:f0:b3:29:18:0f:2f:7e:7a:bf:78:4a:c1:f1:47:74:21: cb:22:cf:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoM0I4MzU4NTM1QkM2Mjg1NjRBRjU2RjMxRDg3NTg2NDhF MUQwNDMwNDAeFw0yNTExMDMwNzE5MDRaFw0yNTExMTAwNzE5MDRaMBgxFjAUBgNV BAMTDTY5MDg1NzY4LTI2ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC76pfqkSo7AxngRWTl+AVP7crySogAFk+iMhJPTsVGQlywUVHOvn7eAnnA/PmG nY4ZLmSSIP3Zznb6r4jAzSJS1RWO1HkZIINIsL8TZPpgGUsRl7QS8fbFp7qC0F2s jV7FF+E0pKUyQTT58Z35y9YGCr4lcKalWao96MPAQn6Cw8a++MTWxsfrZyjkZM/H aRVN+co5G5iqitx1bWKtW5eM8k4nmVlHGUsdOT5aBUEgnUJ1w6dIYMx4aHr9T7gv sdmK1SF3S404p+T8uRD0tWDh3ah5SmWX6HGy6qNvwI3ttWhPnRCqXDsbgk0d7X8T wGsXAEsJH9waamsqthEdGKkPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJLGk8K/D S3A0VA2PztXg1Sx/InIwHwYDVR0jBBgwFoAUO4NYU1vGKFZK9W8x2HWGSOHQQwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzY0RDA3NzQ4NDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTzROWVUxdkdLRlpLOVc4eDJIV0dTT0hRUXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzY0RDA3NzQ4NDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL080TllVMXZHS0Za SzlXOHgySFdHU09IUVF3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMRzsTsg9RnSQV7yxwR9DgCb+NhAWk3p37MXynEUL2+Q32Voua6tmbt3 K1enwrqgCAN3pbxw/Fe/7CoUIMr1k1KD2MF+UXZ4R1IfQ1qFD70XP9VrMraLYHCo E1EXcMw7UAYQ2L9JJBbCqIll3vHjiD2QafHlT0bsepZ1I3/d1/NVgsvvTf/gzVSk tXLo0gbio30IOysiuxtKcwwZVweBw/CKq5uVWCMHrrwyyE1ZFpyS99ep0mZeOu77 ODvsYCiGxB+I+QqEk2/OudvRo5l0Bz+CbbBvDw6z/9AYM3x7/lad7uEHklhniDZO M+CF8LMpGA8vfnq/eErB8Ud0Icsiz9Q= -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:56 2025 by rpki-client