$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: CaTtZ6BeV3aGrs9NgAUpcgJSxxUBsn+KMDTVL+v+TzA= Subject key identifier: 93:70:A2:72:D8:39:08:AF:69:59:47:A5:AC:2C:A2:9A:CB:4C:D9:2C Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0621 Signing time: Thu 06 Nov 2025 20:24:08 +0000 Manifest this update: Thu 06 Nov 2025 20:24:08 +0000 Manifest next update: Thu 13 Nov 2025 20:24:08 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: OlKUxJLeDQuUtSDxsp9LeBWiQDedC1xaRr6WtY6Cr6Q=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 20:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Nov 6 20:24:08 2025 GMT Not After : Nov 13 20:24:08 2025 GMT Subject: CN=690d03e8-5ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:ef:53:ce:40:e0:40:44:73:5b:05:d1:63: ee:4b:c3:3c:be:74:01:0f:05:d7:3e:db:8c:ec:fe: d5:51:fb:69:bd:66:dd:fd:90:01:09:9c:94:fe:6d: e5:c6:1f:a3:9e:af:5f:66:fa:a9:84:b9:a9:cb:58: c4:d5:4e:d9:1a:72:94:32:0b:48:35:0e:e9:b2:34: 6a:9f:86:9b:94:1d:c1:cd:51:f3:c4:4d:21:ea:ff: f6:a7:9c:c1:94:5e:55:5a:d7:f7:8e:1c:54:6f:0c: c1:5e:e6:73:0e:9e:c3:60:26:f9:1a:9e:30:db:e1: 13:d1:0d:a1:0b:d5:14:e7:dc:29:7c:29:15:5c:c2: da:b0:5c:bd:24:b8:f9:59:ca:fe:3c:35:63:e4:86: 31:a0:e4:f1:36:a8:ad:70:fa:21:65:1e:1f:c5:14: 8e:68:c9:3e:99:56:60:ed:15:a9:5f:c8:e7:52:f5: 71:dc:2a:d1:94:db:56:86:43:b0:eb:81:9c:7e:31: 2c:f1:db:62:d8:4e:c7:68:3e:c7:74:e9:5f:f9:8a: e5:5e:85:99:c6:8a:54:01:aa:98:ac:ce:c1:82:56: de:1b:35:c3:63:66:c2:8e:5e:5c:3d:91:4b:5a:cb: 85:ff:0a:95:48:d0:ab:71:82:1e:24:16:76:e5:e3: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:70:A2:72:D8:39:08:AF:69:59:47:A5:AC:2C:A2:9A:CB:4C:D9:2C X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:be:ff:44:9c:a2:0e:b9:53:cf:ac:df:f3:63:cc:a7:0c: 63:c1:74:7b:a5:4d:36:34:71:a1:ff:ce:39:03:33:7f:85:45: 7e:d0:59:fe:ad:ef:29:ea:d8:08:ca:92:dc:9d:aa:37:c8:70: 82:9f:f5:f2:5a:4a:24:55:92:c1:ed:b1:c3:5e:9b:5e:73:b5: 59:6f:26:93:57:08:ff:15:cd:4d:4a:45:9b:0f:32:ae:9f:0c: 63:c8:7b:8f:2f:c8:5c:41:30:0d:1f:7b:ba:6a:12:2c:b5:a3: 25:d8:5c:3f:da:bf:a9:23:f8:2d:53:06:e5:14:4d:8f:7a:ed: 01:43:cb:11:e2:a3:4e:c5:7a:99:5f:4e:90:11:29:7f:f7:fd: 06:88:a6:69:4c:4e:04:4e:5f:3c:64:0a:72:a3:65:94:c7:67: af:29:5d:23:8f:28:48:36:a1:d5:b0:96:82:71:61:bf:22:c6: ab:a7:d8:f9:94:a3:81:49:ce:40:00:22:5b:d4:a7:ad:33:a8: ca:08:2d:0a:7f:19:92:f4:d5:ee:74:18:cc:1f:77:a1:36:7d: be:4e:6c:45:04:9b:fe:d2:63:e4:4f:32:cf:ad:8b:ba:11:b8: bd:00:5d:b9:f9:28:ba:a6:95:f2:5e:65:84:66:7d:c9:e6:c0: 5b:8e:54:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUxMTA2MjAyNDA4WhcNMjUxMTEzMjAyNDA4WjAYMRYwFAYD VQQDEw02OTBkMDNlOC01YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAXvU85A4EBEc1sF0WPuS8M8vnQBDwXXPtuM7P7VUftpvWbd/ZABCZyU/m3l xh+jnq9fZvqphLmpy1jE1U7ZGnKUMgtINQ7psjRqn4ablB3BzVHzxE0h6v/2p5zB lF5VWtf3jhxUbwzBXuZzDp7DYCb5Gp4w2+ET0Q2hC9UU59wpfCkVXMLasFy9JLj5 Wcr+PDVj5IYxoOTxNqitcPohZR4fxRSOaMk+mVZg7RWpX8jnUvVx3CrRlNtWhkOw 64GcfjEs8dti2E7HaD7HdOlf+YrlXoWZxopUAaqYrM7BglbeGzXDY2bCjl5cPZFL WsuF/wqVSNCrcYIeJBZ25ePr9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNwonLY OQivaVlHpawsoprLTNksMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJg77/RJyiDrlTz6zf82PMpwxjwXR7pU02NHGh/845AzN/hUV+0Fn+ re8p6tgIypLcnao3yHCCn/XyWkokVZLB7bHDXptec7VZbyaTVwj/Fc1NSkWbDzKu nwxjyHuPL8hcQTANH3u6ahIstaMl2Fw/2r+pI/gtUwblFE2Peu0BQ8sR4qNOxXqZ X06QESl/9/0GiKZpTE4ETl88ZApyo2WUx2evKV0jjyhINqHVsJaCcWG/Isarp9j5 lKOBSc5AACJb1KetM6jKCC0KfxmS9NXudBjMH3ehNn2+TmxFBJv+0mPkTzLPrYu6 Ebi9AF25+Si6ppXyXmWEZn3J5sBbjlQm -----END CERTIFICATE-----Generated at Fri Nov 7 16:14:35 2025 by rpki-client