$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: zZ1YuVFemhzmXp6wTZZ3/MZbq8Y0c8FuaI54WcBTJ0Y= Subject key identifier: 37:56:DF:C5:AD:94:2D:E9:FF:E7:CA:8C:A8:C4:47:93:21:20:02:DE Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 07E3 Signing time: Tue 04 Nov 2025 21:18:47 +0000 Manifest this update: Tue 04 Nov 2025 21:18:47 +0000 Manifest next update: Tue 11 Nov 2025 21:18:47 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: uI9H5EOhS0/TqshWUFtJSRvE6TGAP7gKUr+KXQMyCWc=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: Ld5X+hhHes8uxmazOqPYTCeJp0q6EYoIhogSp+9j3P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Nov 4 21:18:47 2025 GMT Not After : Nov 11 21:18:47 2025 GMT Subject: CN=690a6db7-5ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:8a:5d:a6:b4:0d:27:36:4b:cd:e3:96:70: 30:85:1f:65:ab:5b:b3:e4:40:d2:b2:3d:33:cc:96: 61:f3:57:fa:6e:5a:0e:cb:63:51:c1:da:85:f2:d9: 13:c6:a4:d7:a0:17:59:83:dd:d4:ad:e0:76:31:d9: 0c:a9:8e:f1:8c:67:35:07:f4:9c:48:77:96:c5:d0: 96:60:e5:d5:d2:ec:6e:4b:80:29:8a:10:f5:5b:e2: a5:7b:ee:7e:04:9c:62:32:50:30:a4:41:3f:c4:72: c9:74:d2:0a:8c:e2:46:e4:8f:01:76:6b:10:f8:0e: 0d:1b:54:40:2f:6e:5b:63:58:96:97:d5:ee:8b:b8: bd:e5:06:fa:55:8a:06:04:dc:e5:c9:23:30:35:9d: a6:9e:d5:c9:53:6f:bf:39:52:00:49:53:6f:8e:22: 9a:ab:5e:be:3c:14:42:ad:f9:ca:69:86:de:fe:ee: 16:d5:ec:f3:a8:91:0d:8c:d5:2a:ef:28:30:fc:3f: 0c:b5:01:04:c4:10:5f:7b:ef:1a:9d:ea:92:56:30: 8c:2f:42:78:a9:9a:0b:8b:38:af:5d:ef:bf:e3:ef: d7:e1:72:7b:1b:ee:68:03:b2:04:4b:c2:7c:f7:b9: 17:5c:20:58:31:65:e3:ab:e2:11:5f:95:a7:52:0b: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:DF:C5:AD:94:2D:E9:FF:E7:CA:8C:A8:C4:47:93:21:20:02:DE X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6e:cb:97:1c:e6:32:af:f6:38:f8:bb:85:95:38:6f:2d:91: 4e:6b:73:6c:9f:0d:58:42:17:6f:85:db:22:be:43:70:9b:a8: 7d:73:81:6c:14:8b:d3:25:67:20:44:3e:6d:3c:51:31:07:a1: 07:b6:96:8b:03:cb:89:e2:87:e7:6a:76:63:13:d0:0c:c2:c3: 42:cd:7f:d2:7e:2d:3d:2a:b1:e2:13:5c:26:13:e1:17:12:e3: 5d:fe:c6:31:81:5c:09:3d:c1:07:3f:74:b8:bb:2b:36:63:d0: 4f:5f:04:47:89:c4:8c:0b:7c:62:7e:80:5d:21:29:2d:94:e9: eb:00:3f:e4:9a:cc:e3:b9:6e:2d:04:dd:e5:81:51:14:5e:f4: 10:2e:62:c1:12:71:c1:ea:b4:a4:d5:5d:c6:70:11:3f:ba:36: a7:64:9f:a2:1c:3b:cc:6d:95:51:86:53:28:7a:fd:15:0e:e7: e9:03:51:d5:8f:5c:77:b1:4d:15:7d:0e:20:c0:f9:9e:a0:c0: 39:63:ea:b7:2e:17:88:b7:b7:1c:4e:fa:e9:08:fd:ac:da:8c: ac:bb:fe:50:96:74:fc:a2:a0:10:f9:c3:5d:d7:f0:7a:58:d8: c3:87:7d:f7:99:5b:2b:97:73:6b:aa:e6:6d:74:07:f5:68:44: 0e:d9:7b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUxMTA0MjExODQ3WhcNMjUxMTExMjExODQ3WjAYMRYwFAYD VQQDEw02OTBhNmRiNy01ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtOKXaa0DSc2S83jlnAwhR9lq1uz5EDSsj0zzJZh81f6bloOy2NRwdqF8tkT xqTXoBdZg93UreB2MdkMqY7xjGc1B/ScSHeWxdCWYOXV0uxuS4ApihD1W+Kle+5+ BJxiMlAwpEE/xHLJdNIKjOJG5I8BdmsQ+A4NG1RAL25bY1iWl9Xui7i95Qb6VYoG BNzlySMwNZ2mntXJU2+/OVIASVNvjiKaq16+PBRCrfnKaYbe/u4W1ezzqJENjNUq 7ygw/D8MtQEExBBfe+8aneqSVjCML0J4qZoLizivXe+/4+/X4XJ7G+5oA7IES8J8 97kXXCBYMWXjq+IRX5WnUgvU9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdW38Wt lC3p/+fKjKjER5MhIALeMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlbsuXHOYyr/Y4+LuFlThvLZFOa3Nsnw1YQhdvhdsivkNwm6h9c4Fs FIvTJWcgRD5tPFExB6EHtpaLA8uJ4ofnanZjE9AMwsNCzX/Sfi09KrHiE1wmE+EX EuNd/sYxgVwJPcEHP3S4uys2Y9BPXwRHicSMC3xifoBdISktlOnrAD/kmszjuW4t BN3lgVEUXvQQLmLBEnHB6rSk1V3GcBE/ujanZJ+iHDvMbZVRhlMoev0VDufpA1HV j1x3sU0VfQ4gwPmeoMA5Y+q3LheIt7ccTvrpCP2s2oysu/5QlnT8oqAQ+cNd1/B6 WNjDh333mVsrl3NrquZtdAf1aEQO2Xts -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:21 2025 by rpki-client