$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json) Hash identifier: 7ZZdWBBA+u5yTFLLsBJZTVWIFvA3v4B/XAV5doqUmHg= Subject key identifier: AC:A6:86:4F:C0:B5:60:2E:AB:00:5B:79:06:58:CD:E6:24:E3:41:13 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft Manifest number: 0CB6 Signing time: Tue 04 Nov 2025 18:17:37 +0000 Manifest this update: Tue 04 Nov 2025 18:17:37 +0000 Manifest next update: Tue 11 Nov 2025 18:17:37 +0000 Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: xsI03cCm7VMT8iYITaiYa6eUlqnjMXq5WgKwq3GSRlo=) 2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Nov 4 18:17:37 2025 GMT Not After : Nov 11 18:17:37 2025 GMT Subject: CN=690a4341-e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:4f:1f:5a:81:af:bd:3b:52:b6:c2:45:7e: c6:a9:59:4a:49:5a:64:7e:b4:87:21:8f:ed:41:14: 16:4b:19:c4:03:6b:60:7d:d7:6e:6f:28:d0:67:77: ab:ea:fe:e1:ef:b7:37:e3:04:f3:c2:ab:03:18:df: f7:84:bd:7e:c3:23:3c:b1:be:5f:96:fb:6b:df:7b: 15:3d:0a:8e:fb:54:01:3a:e1:34:77:ad:25:2b:17: 52:45:58:43:26:61:e3:77:90:7e:39:89:17:49:34: a2:76:8f:44:db:ab:f7:4a:30:cf:c9:80:b9:f7:ed: 4e:a0:a0:88:a0:0a:b9:5f:40:fe:1d:c7:01:77:d3: db:ee:b6:f4:0f:16:e8:3b:0d:9a:e7:91:18:aa:cd: d0:52:79:89:6a:90:69:29:d5:39:7c:5f:f3:15:f4: a1:da:cf:dd:6d:56:00:d6:d0:d4:8c:c7:3e:cc:ac: b0:57:39:f8:c2:e1:15:26:f4:50:5b:6e:96:ac:d8: 69:b1:5b:9f:d0:8b:b6:15:65:80:be:6f:87:0b:33: 27:fa:08:5d:b5:e2:93:e8:bb:7e:b7:6e:54:2c:11: 05:9d:32:f9:0e:db:79:b1:0c:c5:98:69:ee:0f:be: 63:cc:b8:46:44:42:10:4c:f2:90:03:df:59:60:c0: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A6:86:4F:C0:B5:60:2E:AB:00:5B:79:06:58:CD:E6:24:E3:41:13 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ed:e1:44:e6:c9:bd:b1:7f:0c:3a:6f:78:0a:57:7a:b9:ca: 9b:2c:ed:0e:dc:d3:c6:3d:3c:17:05:15:0c:aa:52:2e:f7:b2: ef:d0:72:9b:ed:ee:cf:6d:64:16:8f:78:3f:58:22:ea:d1:4d: 40:e0:80:5a:de:b0:f1:a8:74:9a:be:c8:db:13:eb:a0:e4:02: 71:05:cb:c8:3f:2f:15:3b:04:2e:60:1a:1e:3b:65:28:2b:03: 61:d8:2b:f2:63:84:23:64:4f:13:af:9a:ca:fe:a2:d1:2b:2a: 9d:8c:ff:10:7c:0c:cf:dd:c8:3e:0e:59:1e:5b:88:02:82:d8: 96:cd:00:94:85:7f:6e:2f:bf:07:b3:d8:2a:f9:9c:ec:00:ec: d0:8b:3e:c9:62:79:2d:de:cf:63:d1:d1:cb:11:09:35:c2:c7: a6:de:64:40:b1:c2:51:f5:64:23:c9:91:3d:aa:b3:5a:2c:42: d0:7e:cf:49:4a:72:c9:06:ae:32:9c:f4:a4:a0:70:61:30:ef: 8a:d7:7a:4c:0f:fb:ce:22:b3:a9:5c:61:8c:fa:bc:1f:9c:fe: 92:25:a5:1b:dc:d0:d9:53:3a:59:07:95:da:a9:94:b4:87:fe: 33:58:b0:bf:d9:b0:cc:78:72:b9:47:e8:01:a9:94:40:86:44: 08:64:ae:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUxMTA0MTgxNzM3WhcNMjUxMTExMTgxNzM3WjAYMRYwFAYD VQQDEw02OTBhNDM0MS1lOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UBPH1qBr707UrbCRX7GqVlKSVpkfrSHIY/tQRQWSxnEA2tgfddubyjQZ3er 6v7h77c34wTzwqsDGN/3hL1+wyM8sb5flvtr33sVPQqO+1QBOuE0d60lKxdSRVhD JmHjd5B+OYkXSTSido9E26v3SjDPyYC59+1OoKCIoAq5X0D+HccBd9Pb7rb0Dxbo Ow2a55EYqs3QUnmJapBpKdU5fF/zFfSh2s/dbVYA1tDUjMc+zKywVzn4wuEVJvRQ W26WrNhpsVuf0Iu2FWWAvm+HCzMn+ghdteKT6Lt+t25ULBEFnTL5Dtt5sQzFmGnu D75jzLhGREIQTPKQA99ZYMAHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKymhk/A tWAuqwBbeQZYzeYk40ETMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR7eFE5sm9sX8MOm94Cld6ucqbLO0O3NPGPTwXBRUMqlIu97Lv0HKb 7e7PbWQWj3g/WCLq0U1A4IBa3rDxqHSavsjbE+ug5AJxBcvIPy8VOwQuYBoeO2Uo KwNh2CvyY4QjZE8Tr5rK/qLRKyqdjP8QfAzP3cg+DlkeW4gCgtiWzQCUhX9uL78H s9gq+ZzsAOzQiz7JYnkt3s9j0dHLEQk1wsem3mRAscJR9WQjyZE9qrNaLELQfs9J SnLJBq4ynPSkoHBhMO+K13pMD/vOIrOpXGGM+rwfnP6SJaUb3NDZUzpZB5XaqZS0 h/4zWLC/2bDMeHK5R+gBqZRAhkQIZK5H -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:32 2025 by rpki-client