$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: zRNp8M1/t/63u+QQzifohnBSLddVbH5wTxC/ZmtpXAk= Subject key identifier: 20:84:2C:56:90:04:AB:01:7A:A3:CF:50:CC:22:94:C0:8C:2C:8A:AA Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 3C Signing time: Wed 05 Nov 2025 07:41:13 +0000 Manifest this update: Wed 05 Nov 2025 07:41:12 +0000 Manifest next update: Wed 12 Nov 2025 07:41:12 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: uxiqHBJ6MLdrIS8iyzbxrD4YmzK1FsHVMIGGgmGxElk=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Nov 5 07:41:12 2025 GMT Not After : Nov 12 07:41:12 2025 GMT Subject: CN=690aff99-b977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:04:f1:eb:11:7d:3d:5b:db:e0:d7:f6:6b: 5a:0d:9f:bb:c5:ca:1a:03:aa:93:cb:42:18:4d:46: 7d:73:f5:86:90:86:66:0a:89:1d:c0:89:95:b0:ed: f8:72:4b:14:07:2f:85:3b:2e:fd:ef:4c:05:e6:40: ce:4e:7d:94:a5:0b:92:08:c7:bb:16:fa:c8:8f:7b: 74:ad:21:48:31:ae:fa:53:f3:fb:72:a8:9a:b6:37: 9c:6e:26:81:b8:84:d1:2e:31:4c:6a:88:40:93:07: f6:e6:19:aa:6b:6b:aa:5d:2c:ce:41:d7:08:e5:5d: 2d:6d:d5:ad:2f:4f:ab:55:4c:f3:6b:fd:8c:34:db: a8:9f:c1:60:4f:66:d8:c3:15:23:65:00:71:fe:ed: 0c:2a:d3:7c:11:a3:dd:fa:c3:46:7c:0e:20:89:2b: c5:0e:28:2e:7e:f7:d3:9b:4d:72:7f:b6:90:58:ea: fb:37:9e:47:aa:4e:ae:c2:7f:ad:5e:8b:49:ef:75: b6:3a:8c:c0:fe:2b:dd:9f:16:2e:83:f2:c9:f2:44: 5d:1b:ac:25:3d:f2:3a:0f:ed:c1:5f:c8:b4:fd:d3: b7:45:c4:35:06:8b:a5:25:27:09:78:04:13:e8:e3: b6:a1:71:66:2f:1c:dc:c3:da:ef:0b:6b:be:f9:cd: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:2C:56:90:04:AB:01:7A:A3:CF:50:CC:22:94:C0:8C:2C:8A:AA X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:50:20:4e:ec:0d:2a:bd:71:db:36:23:95:0d:d8:25:87: 0d:41:18:fd:3f:28:25:67:7f:75:30:29:9c:ed:9e:ad:f5:f6: d6:14:f9:0b:ac:40:d4:e8:6f:85:39:e9:ff:bf:4c:7b:dd:df: 73:11:34:77:77:9a:e3:f0:0b:58:32:cf:a7:c7:ba:2c:0f:ea: 08:77:db:43:3d:3a:d0:2a:f7:e2:13:15:3a:aa:a6:f0:00:96: 35:b6:5c:91:ce:04:83:df:6a:0c:d5:bb:48:b4:49:99:55:f2: 33:49:a1:0a:7b:52:60:99:62:59:41:6f:c7:03:69:35:ac:ae: 6b:3f:ac:82:ba:a3:de:fa:62:6e:1e:ca:92:cf:cc:45:b2:0d: ab:b8:fe:31:4c:e2:d9:67:f5:63:47:d6:8a:f6:8f:c6:e7:66: 45:bd:14:3a:8e:a9:92:e8:2e:a4:d2:5e:99:1e:f3:36:84:38: ee:e1:88:ce:3e:fa:74:25:c9:70:70:6b:a6:d4:d9:7a:28:3c: 50:a1:be:e9:b6:bf:79:c4:5f:58:f3:59:b6:d8:bd:68:ee:f6: cd:72:d3:4a:e7:7c:a7:67:65:34:b9:b7:fc:d9:b3:18:fd:56: b8:73:c6:b3:b0:06:b9:4b:e1:23:71:c4:a6:ff:bb:82:cc:2a: 8e:e0:a8:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTExMDUwNzQxMTJaFw0yNTExMTIwNzQxMTJaMBgxFjAUBgNV BAMTDTY5MGFmZjk5LWI5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBhgTx6xF9PVvb4Nf2a1oNn7vFyhoDqpPLQhhNRn1z9YaQhmYKiR3AiZWw7fhy SxQHL4U7Lv3vTAXmQM5OfZSlC5IIx7sW+siPe3StIUgxrvpT8/tyqJq2N5xuJoG4 hNEuMUxqiECTB/bmGapra6pdLM5B1wjlXS1t1a0vT6tVTPNr/Yw026ifwWBPZtjD FSNlAHH+7Qwq03wRo936w0Z8DiCJK8UOKC5+99ObTXJ/tpBY6vs3nkeqTq7Cf61e i0nvdbY6jMD+K92fFi6D8snyRF0brCU98joP7cFfyLT907dFxDUGi6UlJwl4BBPo 47ahcWYvHNzD2u8La775zaNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIIQsVpAE qwF6o89QzCKUwIwsiqowHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ06UCBO7A0qvXHbNiOVDdglhw1BGP0/KCVnf3UwKZztnq319tYU+Qus QNTob4U56f+/THvd33MRNHd3muPwC1gyz6fHuiwP6gh320M9OtAq9+ITFTqqpvAA ljW2XJHOBIPfagzVu0i0SZlV8jNJoQp7UmCZYllBb8cDaTWsrms/rIK6o976Ym4e ypLPzEWyDau4/jFM4tln9WNH1or2j8bnZkW9FDqOqZLoLqTSXpke8zaEOO7hiM4+ +nQlyXBwa6bU2XooPFChvum2v3nEX1jzWbbYvWju9s1y00rnfKdnZTS5t/zZsxj9 VrhzxrOwBrlL4SNxxKb/u4LMKo7gqNw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:23 2025 by rpki-client