$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: YhNO2GH1XKb84Ju6TGscb8lNocLI7pcIAjloxPpEBuA= Subject key identifier: 11:61:6D:FD:80:9E:4B:62:CE:CB:55:B0:C8:F4:6B:FF:3B:B5:01:B2 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0CD6 Signing time: Tue 04 Nov 2025 18:19:06 +0000 Manifest this update: Tue 04 Nov 2025 18:19:05 +0000 Manifest next update: Tue 11 Nov 2025 18:19:05 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: vRxWd26pi561yqfVNzZoTC5tKDYVbB0kWnV6CWlNmTY=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Nov 4 18:19:05 2025 GMT Not After : Nov 11 18:19:05 2025 GMT Subject: CN=690a4399-4579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:88:62:7a:5f:dd:1c:cd:eb:b3:3c:e3:c8: 97:0f:00:9f:38:40:07:e5:91:17:26:b6:f8:9a:0d: 13:31:ab:1f:bb:70:58:85:37:90:8a:12:3d:a4:df: 2b:53:0f:b0:a0:10:b7:cf:8a:86:a2:b9:61:1f:54: a7:eb:be:b0:43:90:d2:14:2b:ba:b0:49:90:29:a0: 09:15:a4:49:75:fc:06:7f:3f:52:f6:50:7e:87:83: 4e:95:ce:e4:5f:03:97:8b:48:db:61:74:7d:fb:dc: cf:8e:79:74:78:14:3f:1a:86:a7:7d:03:cc:af:52: 84:b8:97:ae:26:a3:c3:ee:1d:d7:8b:f9:43:0f:84: 98:a6:03:cc:48:57:74:f7:15:79:fd:ae:dd:d6:0d: 14:c3:a9:7e:bb:9a:bf:1f:6f:69:39:10:10:d9:28: 97:0d:2a:6c:f4:59:bf:81:80:58:ce:6c:c6:ea:63: 7e:21:45:3b:12:4c:85:17:d9:f6:82:e4:28:38:88: 51:c7:de:29:d7:d6:11:0a:19:3c:1a:b3:1d:dd:1f: 9b:1d:2d:fb:ad:b5:36:6b:96:23:e3:6b:54:8a:0f: 80:8a:aa:cc:9d:5a:3c:d0:57:4d:d2:3e:57:86:67: 9d:c3:a8:65:7f:15:e6:8a:0b:93:85:bc:59:81:01: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:6D:FD:80:9E:4B:62:CE:CB:55:B0:C8:F4:6B:FF:3B:B5:01:B2 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:f9:02:83:cd:37:a6:d8:56:92:6e:dc:fb:ee:73:c3:ae: 30:7d:eb:23:01:d3:de:e8:ad:fc:6f:38:8b:9e:0c:12:f7:14: 22:5b:4d:4a:60:b4:6c:a0:b2:47:28:d3:cf:b8:37:7b:12:57: a4:7e:c7:b1:6c:92:6c:0f:f6:d3:20:6c:e0:36:79:e4:bf:08: 5a:10:97:f1:5e:2b:da:e9:c8:c8:ad:33:c1:45:3b:e9:73:02: 82:14:65:7b:8e:b3:51:81:cf:c9:6d:0e:5a:46:47:76:e4:6b: 04:8d:1e:c5:d3:12:75:25:48:71:21:5e:27:3b:fb:59:13:fe: 45:2d:07:87:38:f6:9c:0f:5f:5f:b5:20:7a:63:e2:56:51:3e: f8:d1:16:cb:7d:87:fd:7c:ca:b1:fd:05:17:de:eb:56:35:73: 61:3e:23:9b:60:28:cf:01:0e:0b:50:1f:12:df:89:df:84:c3: 1c:30:e1:21:23:ce:84:57:10:d9:14:34:90:23:35:d8:1f:13: 30:8d:f7:c8:dd:11:2f:8e:f6:59:d0:96:7b:11:16:9a:e2:ad: 98:1f:9d:27:1f:4a:a8:93:16:51:c7:14:92:5f:09:8c:c4:5a: 0a:09:69:59:b5:5f:26:cc:75:26:86:4d:af:26:4b:9e:74:6c: 1c:f0:cc:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUxMTA0MTgxOTA1WhcNMjUxMTExMTgxOTA1WjAYMRYwFAYD VQQDEw02OTBhNDM5OS00NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBuIYnpf3RzN67M848iXDwCfOEAH5ZEXJrb4mg0TMasfu3BYhTeQihI9pN8r Uw+woBC3z4qGorlhH1Sn676wQ5DSFCu6sEmQKaAJFaRJdfwGfz9S9lB+h4NOlc7k XwOXi0jbYXR9+9zPjnl0eBQ/GoanfQPMr1KEuJeuJqPD7h3Xi/lDD4SYpgPMSFd0 9xV5/a7d1g0Uw6l+u5q/H29pORAQ2SiXDSps9Fm/gYBYzmzG6mN+IUU7EkyFF9n2 guQoOIhRx94p19YRChk8GrMd3R+bHS37rbU2a5Yj42tUig+AiqrMnVo80FdN0j5X hmedw6hlfxXmiguThbxZgQHiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFhbf2A nktizstVsMj0a/87tQGyMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3P/kCg803pthWkm7c++5zw64wfesjAdPe6K38bziLngwS9xQiW01K YLRsoLJHKNPPuDd7ElekfsexbJJsD/bTIGzgNnnkvwhaEJfxXiva6cjIrTPBRTvp cwKCFGV7jrNRgc/JbQ5aRkd25GsEjR7F0xJ1JUhxIV4nO/tZE/5FLQeHOPacD19f tSB6Y+JWUT740RbLfYf9fMqx/QUX3utWNXNhPiObYCjPAQ4LUB8S34nfhMMcMOEh I86EVxDZFDSQIzXYHxMwjffI3REvjvZZ0JZ7ERaa4q2YH50nH0qokxZRxxSSXwmM xFoKCWlZtV8mzHUmhk2vJkuedGwc8Myd -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:47 2025 by rpki-client