$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: SF84pHSFdhxCI1TnQk39gq4zCOs7ZCumhPyMQDg3Lgg= Subject key identifier: 21:4C:54:B2:1F:0C:FA:B2:95:19:34:C8:59:02:3A:E0:37:47:04:BE Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C90 Signing time: Tue 04 Nov 2025 18:37:10 +0000 Manifest this update: Tue 04 Nov 2025 18:37:10 +0000 Manifest next update: Tue 11 Nov 2025 18:37:10 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: NAyyTy+iQfHLkpMjAuS9iDxMChlVm0iaTVd0fiHfNjE=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Nov 4 18:37:10 2025 GMT Not After : Nov 11 18:37:10 2025 GMT Subject: CN=690a47d6-aebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:bd:b5:48:23:ff:95:ba:4e:ce:f0:85:ee: ff:12:00:31:91:fa:11:a0:56:03:f9:2d:9c:b8:39: 25:9b:25:45:9a:2f:80:20:36:24:6d:7a:a2:a7:88: 5e:2c:63:a3:42:73:ec:10:28:80:c9:a9:e8:7f:9f: 8c:a7:ac:e0:37:35:62:3e:c1:fd:c4:ef:7c:db:57: 83:16:bd:0d:06:c3:24:f4:79:97:d9:83:20:bd:6b: 6b:58:eb:57:a0:91:13:a7:83:54:52:8c:06:02:89: ba:5f:8b:92:f7:36:d1:67:42:05:75:31:f9:6a:8a: e1:05:9a:5a:bd:66:46:86:b5:6f:71:93:36:e9:39: b3:5d:ec:a0:35:23:16:5e:c7:f6:32:46:45:6d:96: d9:e4:48:02:1f:28:8f:2c:90:40:9b:9f:ff:80:54: 71:32:c8:94:1b:94:e5:12:b0:23:16:e5:0a:8a:77: 4f:95:fa:0e:b9:a0:f9:72:21:9c:01:cb:a8:84:bc: c0:50:89:a7:40:85:7a:44:64:25:8a:81:9f:7b:51: c6:7b:8b:5d:58:f9:65:ac:53:15:c2:11:3a:02:ef: a7:47:68:aa:54:5c:83:e6:23:2b:09:51:68:57:b8: 77:65:79:17:78:15:1b:89:d1:19:1b:a8:d9:b0:57: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:54:B2:1F:0C:FA:B2:95:19:34:C8:59:02:3A:E0:37:47:04:BE X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:90:02:41:fa:60:79:05:23:fe:7a:05:31:28:4e:91:ae: 39:2a:ce:ef:db:0f:05:fb:42:9c:2d:b4:8a:59:18:03:ed:07: f1:03:bd:95:f1:27:04:ea:5b:3b:b0:b4:e0:4f:04:f5:09:17: 98:79:1c:58:ef:df:c4:d9:36:1d:33:47:b7:8b:90:83:01:8d: 30:af:2f:29:f9:b0:fe:9c:49:a4:01:cb:3b:e4:1b:bc:cc:43: 16:7b:03:18:8b:93:80:9c:a4:09:06:3b:d0:78:0d:7b:8c:d6: 83:b6:e8:d8:89:88:28:2b:a6:4e:56:7a:b5:c2:6f:a3:07:60: 33:0c:fa:81:e0:b1:1f:1c:ae:24:e3:41:8c:0f:62:26:73:07: 09:68:3b:73:54:67:00:72:0e:18:b5:a5:b6:49:3c:78:2f:6c: fd:0e:e7:56:df:22:8e:72:85:b7:95:e3:61:66:9c:f3:47:9b: b2:6f:8d:02:cf:22:2e:88:aa:93:63:3e:aa:0c:4c:f6:d7:b1: 68:fd:95:12:d2:13:4d:81:cf:04:2f:53:aa:26:b9:e2:fc:4f: f3:fe:78:53:c5:0a:f8:80:d5:7a:03:46:27:55:15:44:2e:6b: 11:af:e7:2a:73:c4:08:05:f4:a6:c2:6a:70:7f:94:38:b5:18: d0:0b:84:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUxMTA0MTgzNzEwWhcNMjUxMTExMTgzNzEwWjAYMRYwFAYD VQQDEw02OTBhNDdkNi1hZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUW9tUgj/5W6Ts7whe7/EgAxkfoRoFYD+S2cuDklmyVFmi+AIDYkbXqip4he LGOjQnPsECiAyanof5+Mp6zgNzViPsH9xO9821eDFr0NBsMk9HmX2YMgvWtrWOtX oJETp4NUUowGAom6X4uS9zbRZ0IFdTH5aorhBZpavWZGhrVvcZM26TmzXeygNSMW Xsf2MkZFbZbZ5EgCHyiPLJBAm5//gFRxMsiUG5TlErAjFuUKindPlfoOuaD5ciGc AcuohLzAUImnQIV6RGQlioGfe1HGe4tdWPllrFMVwhE6Au+nR2iqVFyD5iMrCVFo V7h3ZXkXeBUbidEZG6jZsFcVXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFMVLIf DPqylRk0yFkCOuA3RwS+MB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8T5ACQfpgeQUj/noFMShOka45Ks7v2w8F+0KcLbSKWRgD7QfxA72V 8ScE6ls7sLTgTwT1CReYeRxY79/E2TYdM0e3i5CDAY0wry8p+bD+nEmkAcs75Bu8 zEMWewMYi5OAnKQJBjvQeA17jNaDtujYiYgoK6ZOVnq1wm+jB2AzDPqB4LEfHK4k 40GMD2ImcwcJaDtzVGcAcg4YtaW2STx4L2z9DudW3yKOcoW3leNhZpzzR5uyb40C zyIuiKqTYz6qDEz217Fo/ZUS0hNNgc8EL1OqJrni/E/z/nhTxQr4gNV6A0YnVRVE LmsRr+cqc8QIBfSmwmpwf5Q4tRjQC4Rm -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:31 2025 by rpki-client