$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: mG0dooLA3kT1EgbApkmScV4UrZMJDM72XYlw7/buqxc= Subject key identifier: E9:B9:FC:46:16:C6:03:EA:49:2F:07:62:C4:BE:8C:30:75:06:62:20 Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08CC Signing time: Tue 04 Nov 2025 20:31:29 +0000 Manifest this update: Tue 04 Nov 2025 20:31:29 +0000 Manifest next update: Tue 11 Nov 2025 20:31:29 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: HT9egsS9tL94gY6x5atYblMRWerdWMnRJBKWv8SXo7k=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Nov 4 20:31:29 2025 GMT Not After : Nov 11 20:31:29 2025 GMT Subject: CN=690a62a1-6f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:8c:b3:1e:ae:86:be:eb:cc:77:13:4d:a5: 10:32:98:61:d2:cd:86:53:25:7b:9e:fe:0f:70:12: ae:23:5b:4e:a1:cc:ab:11:14:f7:ea:7a:32:7e:c6: 1f:09:c9:33:fd:5c:2a:1c:b9:51:a9:3f:0c:02:c2: e8:c1:a4:af:99:89:5c:d3:d0:24:a2:da:22:cd:18: d0:1f:58:68:f3:e8:71:fc:3d:39:95:70:e9:82:25: 3e:72:46:db:9c:e0:12:a1:61:2a:6b:6a:f2:f8:e1: 3b:68:33:0b:7f:7e:f9:29:ca:7e:0e:f5:f3:82:28: 6b:2b:6d:34:9c:05:de:d1:3b:b9:a7:c0:17:e6:46: 08:6e:be:04:c5:69:ec:9f:af:f4:c7:da:8c:9f:47: fc:85:35:37:76:39:d2:fe:a0:e9:86:ed:9a:34:04: 61:57:54:27:ff:63:7a:15:86:8b:60:71:33:36:ab: f8:78:00:1a:c7:da:36:f6:b8:8d:24:ce:c4:87:32: c3:e2:31:06:be:57:53:de:73:4e:76:4f:60:8a:06: c7:c9:71:95:0b:1e:47:43:9b:04:87:bc:e9:a2:39: a3:0e:b8:4a:0d:c6:e1:90:2b:24:26:62:c5:6b:b3: af:49:db:14:63:30:c5:49:b4:9f:56:f5:ce:9c:30: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B9:FC:46:16:C6:03:EA:49:2F:07:62:C4:BE:8C:30:75:06:62:20 X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7d:47:7d:d7:c4:65:c9:b2:7c:67:cf:f4:2f:76:e9:00:b0: 3f:55:29:10:c8:9b:4a:e0:e5:a8:35:0c:d2:92:eb:58:87:a1: 25:cb:af:92:78:c1:dc:d4:a8:5a:01:59:8c:dc:78:3d:35:de: 6d:60:ca:be:a0:9a:85:5c:84:54:69:9e:3c:ca:be:27:c8:73: 0a:d1:80:b4:86:f9:72:8b:53:aa:b6:08:7d:d1:db:d3:9b:1c: a2:65:a8:4f:5b:5e:19:07:17:4e:02:28:5e:22:38:21:59:b9: 5a:30:b5:2a:09:f7:72:84:f0:6d:e2:c2:4a:f8:31:a3:dc:22: fa:d6:33:77:2b:cb:86:b0:32:dd:5f:ef:ec:79:94:b8:b5:c7: 8f:64:82:ac:6d:52:a4:b7:ca:7e:f7:f0:2d:e2:0f:36:91:77: 5f:d1:52:b0:52:7b:97:62:5e:e6:5b:fe:93:bf:27:1c:c7:40: 60:b6:e3:92:66:56:10:30:35:15:ae:84:1f:0d:fe:c8:e3:a0: 74:a0:b7:0c:f5:b8:76:25:b8:b4:10:63:dd:78:3f:32:cf:e4: 3b:43:4e:51:b2:2a:3c:b4:d8:ff:3f:86:cf:db:3d:e9:4e:86: de:89:99:b2:2c:0a:da:08:5c:6a:07:e2:fb:96:cb:0d:a1:78: a3:4b:83:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUxMTA0MjAzMTI5WhcNMjUxMTExMjAzMTI5WjAYMRYwFAYD VQQDEw02OTBhNjJhMS02ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruWMsx6uhr7rzHcTTaUQMphh0s2GUyV7nv4PcBKuI1tOocyrERT36noyfsYf Cckz/VwqHLlRqT8MAsLowaSvmYlc09AkotoizRjQH1ho8+hx/D05lXDpgiU+ckbb nOASoWEqa2ry+OE7aDMLf375Kcp+DvXzgihrK200nAXe0Tu5p8AX5kYIbr4ExWns n6/0x9qMn0f8hTU3djnS/qDphu2aNARhV1Qn/2N6FYaLYHEzNqv4eAAax9o29riN JM7EhzLD4jEGvldT3nNOdk9gigbHyXGVCx5HQ5sEh7zpojmjDrhKDcbhkCskJmLF a7OvSdsUYzDFSbSfVvXOnDDwPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm5/EYW xgPqSS8HYsS+jDB1BmIgMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAfUd918RlybJ8Z8/0L3bpALA/VSkQyJtK4OWoNQzSkutYh6Ely6+S eMHc1KhaAVmM3Hg9Nd5tYMq+oJqFXIRUaZ48yr4nyHMK0YC0hvlyi1Oqtgh90dvT mxyiZahPW14ZBxdOAiheIjghWblaMLUqCfdyhPBt4sJK+DGj3CL61jN3K8uGsDLd X+/seZS4tcePZIKsbVKkt8p+9/At4g82kXdf0VKwUnuXYl7mW/6Tvyccx0BgtuOS ZlYQMDUVroQfDf7I46B0oLcM9bh2Jbi0EGPdeD8yz+Q7Q05Rsio8tNj/P4bP2z3p TobeiZmyLAraCFxqB+L7lssNoXijS4PS -----END CERTIFICATE-----Generated at Wed Nov 5 03:16:53 2025 by rpki-client