$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: fhFrxgpYd5QCgyuBek+seanCuzZyFSxuoKGKImTHAww= Subject key identifier: BE:75:F3:AF:50:68:17:E6:6C:10:0F:18:0E:3A:02:FB:36:33:D6:87 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01E9 Signing time: Mon 03 Nov 2025 02:36:55 +0000 Manifest this update: Mon 03 Nov 2025 02:36:54 +0000 Manifest next update: Mon 10 Nov 2025 02:36:54 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: K3bwN7R/LH2Bq/pAqt6G9Njg8tJJd8PU6BqcPLpHpqo=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Nov 3 02:36:54 2025 GMT Not After : Nov 10 02:36:54 2025 GMT Subject: CN=69081547-1e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:d9:c3:9b:de:ed:71:8a:56:27:77:cf:8e: 52:2e:ff:04:b6:01:fb:6a:d2:71:45:ba:cc:49:48: 0c:2d:cb:a4:e4:4c:2d:8e:a2:74:1e:36:85:1f:f4: d8:de:63:3a:83:78:55:50:10:26:a6:88:b7:c0:0f: 0e:85:01:07:e1:47:80:22:a1:9c:66:59:a2:e3:44: f8:2d:77:43:b1:e4:43:38:6f:8d:a2:68:1e:9f:4d: 19:e7:05:a3:39:b7:fd:7f:84:6f:8d:43:a5:10:41: b0:e4:ce:cf:c9:5a:cd:48:02:4a:ff:af:e5:2f:36: 2d:56:e7:ed:f9:98:ff:bb:5c:49:d8:41:15:70:50: 4b:8f:f9:29:4f:4e:7c:fd:f9:a4:f4:4e:8b:77:68: db:c3:c5:11:01:9f:c5:86:70:da:4c:e2:76:5d:a6: ea:b0:d4:d0:93:a9:c4:6c:03:76:8c:4f:15:be:da: 79:d8:b8:75:d3:cd:8b:a4:9b:43:05:fe:ae:a0:ee: e6:48:83:bc:9f:23:2e:60:a7:74:69:89:f3:9a:df: dc:a3:4d:de:71:d8:a4:3c:56:0e:16:70:c3:15:6f: 4f:29:7b:63:d9:27:5a:05:7d:b9:4d:fe:a6:a7:fd: e2:6d:dc:ec:77:66:e4:03:95:74:3e:26:5a:43:aa: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:F3:AF:50:68:17:E6:6C:10:0F:18:0E:3A:02:FB:36:33:D6:87 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0b:63:0a:1e:6c:ac:33:2e:61:ce:9b:02:ef:e4:1b:a9:9a: bb:13:62:fd:01:a5:b6:16:7d:8f:7a:52:a4:22:77:ba:ee:8c: fb:32:45:6f:b8:f7:8b:b5:a8:dc:2e:be:8b:6c:81:9b:22:04: aa:d2:b0:6b:c5:9b:11:b2:64:05:5d:92:f6:92:31:a1:06:17: 8b:cd:a8:bd:ee:6d:5d:f6:ed:26:50:82:a8:c5:6e:80:23:f5: 7d:cd:82:02:60:ff:23:ba:1e:f8:1a:69:4a:41:e6:9a:76:a7: 43:a9:d3:07:dc:8c:fc:4a:6c:ed:20:3b:4b:3c:cb:36:73:ee: ef:c7:04:2d:eb:58:28:fd:43:ed:70:3d:91:31:d0:94:26:44: ea:41:dc:9d:12:07:0c:bf:5a:a6:94:ca:00:3f:9d:18:e1:b3: 43:2f:68:a7:56:39:e2:cc:2b:e3:f9:e1:19:15:0d:54:12:58: 70:f7:6d:1a:32:89:e5:f0:27:6f:ba:38:66:15:3b:86:94:c3: 79:dd:a3:24:41:31:cd:54:a3:da:97:0c:0c:06:e5:67:9a:a2: a5:a6:6d:19:3d:58:d2:96:0f:66:a6:dc:70:e7:f4:67:a9:c7: 6d:9e:7a:cb:3e:e2:41:31:97:64:db:2a:b4:13:a1:ec:f6:6d: ee:65:9f:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUxMTAzMDIzNjU0WhcNMjUxMTEwMDIzNjU0WjAYMRYwFAYD VQQDEw02OTA4MTU0Ny0xZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t7Zw5ve7XGKVid3z45SLv8EtgH7atJxRbrMSUgMLcuk5EwtjqJ0HjaFH/TY 3mM6g3hVUBAmpoi3wA8OhQEH4UeAIqGcZlmi40T4LXdDseRDOG+Nomgen00Z5wWj Obf9f4RvjUOlEEGw5M7PyVrNSAJK/6/lLzYtVuft+Zj/u1xJ2EEVcFBLj/kpT058 /fmk9E6Ld2jbw8URAZ/FhnDaTOJ2XabqsNTQk6nEbAN2jE8Vvtp52Lh1082LpJtD Bf6uoO7mSIO8nyMuYKd0aYnzmt/co03ecdikPFYOFnDDFW9PKXtj2SdaBX25Tf6m p/3ibdzsd2bkA5V0PiZaQ6oOkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL51869Q aBfmbBAPGA46Avs2M9aHMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiC2MKHmysMy5hzpsC7+QbqZq7E2L9AaW2Fn2PelKkIne67oz7MkVv uPeLtajcLr6LbIGbIgSq0rBrxZsRsmQFXZL2kjGhBheLzai97m1d9u0mUIKoxW6A I/V9zYICYP8juh74GmlKQeaadqdDqdMH3Iz8SmztIDtLPMs2c+7vxwQt61go/UPt cD2RMdCUJkTqQdydEgcMv1qmlMoAP50Y4bNDL2inVjnizCvj+eEZFQ1UElhw920a Monl8CdvujhmFTuGlMN53aMkQTHNVKPalwwMBuVnmqKlpm0ZPVjSlg9mptxw5/Rn qcdtnnrLPuJBMZdk2yq0E6Hs9m3uZZ8i -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:47 2025 by rpki-client