$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: VfSxClEQ+hzLPJ9rKcsIa7TiWf4glYHYYhXca7pICck= Subject key identifier: 13:28:4C:A1:C5:E3:2F:FB:3E:D2:D5:A7:21:72:30:BC:12:95:94:A2 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 34E2 Signing time: Tue 04 Nov 2025 14:34:03 +0000 Manifest this update: Tue 04 Nov 2025 14:34:02 +0000 Manifest next update: Tue 11 Nov 2025 14:34:02 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: aXsr6C6L/HljOThS+DE3WRlhZsDZ+tOySn3dilBiJV0=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 4I+3xavxeBJbyMnYsMSj2G6sjqqfZ0aCKkQ3nfnxOP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Nov 4 14:34:02 2025 GMT Not After : Nov 11 14:34:02 2025 GMT Subject: CN=690a0edb-252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:08:d8:d9:5f:5b:3b:7f:8c:5e:3f:81:99: 30:48:bd:45:a9:07:92:ed:09:84:a6:de:e6:92:19: ed:e5:79:27:18:b7:f4:a4:fb:90:96:db:3a:e3:0a: d7:3e:c0:4f:f0:5e:6c:ed:af:0f:54:9b:c7:cf:25: 9c:7e:49:97:0e:35:42:e8:b1:8f:77:3c:db:44:8f: 3d:43:8f:c2:79:67:5d:93:b4:7f:04:f9:8c:73:a2: 42:04:ac:e9:b2:d6:2f:72:c3:dd:0a:9b:35:fa:90: c3:5e:dc:ac:6b:67:50:ba:f9:da:ef:1d:eb:86:5b: 77:2a:8c:14:25:bf:b9:6c:25:07:7e:a6:ad:44:18: 4b:7c:27:75:61:8a:5d:0e:4d:f9:0f:e1:42:8c:b8: df:a0:e1:97:c8:5c:5f:c0:f9:d1:c6:08:f9:5b:22: 6c:c1:2f:ce:69:86:39:8f:15:45:8a:fe:96:6e:cc: 31:44:ce:20:9d:f7:5c:2d:91:c1:c7:aa:54:1a:e3: a2:c3:d2:e9:88:c1:2f:01:9f:93:80:94:44:20:8c: 2f:a9:ea:2e:b0:75:97:3b:75:59:4f:59:a4:50:f7: eb:3b:bb:06:02:8e:6d:5f:c5:cc:7f:f3:60:d3:13: b2:47:47:e2:79:ee:8c:b1:58:1d:17:88:39:e1:7a: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:28:4C:A1:C5:E3:2F:FB:3E:D2:D5:A7:21:72:30:BC:12:95:94:A2 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:ec:4f:13:cc:08:4d:07:07:74:e4:8a:8c:26:ef:e0:24: 20:68:d3:87:f6:45:99:49:df:b6:26:3c:67:be:08:bc:06:e1: 72:14:02:ff:9e:85:01:79:e5:98:e5:be:cc:43:57:52:eb:c1: 70:35:af:17:99:ec:2a:22:e5:26:3b:41:b0:46:dd:52:e7:6e: 5a:69:23:3f:72:f0:4d:ee:a3:95:ce:9c:74:47:b0:58:87:2a: 23:60:fb:3b:17:c1:bd:99:6c:6a:97:c4:03:22:61:df:50:49: 95:1e:06:5c:e2:7e:f8:24:c8:3c:81:a9:14:5d:fe:32:08:7e: 9d:12:4d:ba:4f:49:28:8d:ad:61:5a:c0:fd:50:48:6c:1c:c6: 9a:ba:b8:39:ec:23:4d:fc:46:2c:20:5e:bf:6f:96:ef:a9:ea: 1d:5f:ed:a8:84:15:ed:a7:bc:a6:96:b5:54:20:2d:ec:3a:f8: ec:f5:08:20:53:4e:fc:9e:cd:04:8c:91:61:27:ee:fb:e7:02: d7:e7:a0:18:c4:58:3c:53:d9:4b:e1:8e:0d:81:db:a6:33:db: 29:d2:0f:37:80:ac:01:83:db:04:b8:7d:8a:2e:cf:fb:ab:4b: 05:bb:2e:2d:4c:c2:28:17:b5:63:4f:52:57:b5:9a:d6:45:75: 8c:af:9b:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUxMTA0MTQzNDAyWhcNMjUxMTExMTQzNDAyWjAYMRYwFAYD VQQDEw02OTBhMGVkYi0yNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusgI2NlfWzt/jF4/gZkwSL1FqQeS7QmEpt7mkhnt5XknGLf0pPuQlts64wrX PsBP8F5s7a8PVJvHzyWcfkmXDjVC6LGPdzzbRI89Q4/CeWddk7R/BPmMc6JCBKzp stYvcsPdCps1+pDDXtysa2dQuvna7x3rhlt3KowUJb+5bCUHfqatRBhLfCd1YYpd Dk35D+FCjLjfoOGXyFxfwPnRxgj5WyJswS/OaYY5jxVFiv6WbswxRM4gnfdcLZHB x6pUGuOiw9LpiMEvAZ+TgJREIIwvqeousHWXO3VZT1mkUPfrO7sGAo5tX8XMf/Ng 0xOyR0fiee6MsVgdF4g54XrCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMoTKHF 4y/7PtLVpyFyMLwSlZSiMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQ+xPE8wITQcHdOSKjCbv4CQgaNOH9kWZSd+2Jjxnvgi8BuFyFAL/ noUBeeWY5b7MQ1dS68FwNa8XmewqIuUmO0GwRt1S525aaSM/cvBN7qOVzpx0R7BY hyojYPs7F8G9mWxql8QDImHfUEmVHgZc4n74JMg8gakUXf4yCH6dEk26T0koja1h WsD9UEhsHMaaurg57CNN/EYsIF6/b5bvqeodX+2ohBXtp7ymlrVUIC3sOvjs9Qgg U078ns0EjJFhJ+775wLX56AYxFg8U9lL4Y4NgdumM9sp0g83gKwBg9sEuH2KLs/7 q0sFuy4tTMIoF7VjT1JXtZrWRXWMr5un -----END CERTIFICATE-----Generated at Wed Nov 5 14:07:00 2025 by rpki-client