$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json) Hash identifier: Pxu6TzjQ4sO3i5mQ106yJMpIqgz+Y4zZmms2fgC6Hyo= Subject key identifier: 03:32:4F:C8:0F:49:C2:09:5C:7F:9D:93:19:20:13:9B:B6:F7:7F:65 Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft Manifest number: 044A Signing time: Wed 05 Nov 2025 00:18:25 +0000 Manifest this update: Wed 05 Nov 2025 00:18:25 +0000 Manifest next update: Wed 12 Nov 2025 00:18:25 +0000 Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: IkFpLl6Y+JNmq0ZgotVSSw4+7yg2tWSNDnom/Tsf4hM=) 2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B Validity Not Before: Nov 5 00:18:25 2025 GMT Not After : Nov 12 00:18:25 2025 GMT Subject: CN=690a97d1-fcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:10:56:76:58:0a:f2:ee:8d:84:55:ed:a9: e0:dd:77:9d:25:15:42:d7:a2:87:7b:28:a9:56:a7: 92:e4:e5:e2:1e:7c:22:d7:bd:df:f3:68:e1:ee:fd: 95:58:9d:b4:54:06:c4:52:66:78:4e:17:9a:71:d9: d4:f2:f3:43:c2:55:bc:d7:a1:52:26:f3:b0:b9:ec: 14:c0:ac:dc:f2:4a:22:4e:e7:65:5e:6c:b3:6d:f9: 82:6b:1e:fa:72:73:cc:3a:02:0e:71:4f:08:d5:48: 9a:19:62:7b:3c:b5:5b:08:9a:83:24:75:4f:77:9d: dc:02:c8:31:be:1a:5e:24:23:1c:5f:2d:94:6c:cf: a6:d2:23:a1:52:88:c6:49:5a:1f:80:1b:c6:bb:e5: 26:84:12:b8:8d:9e:66:d9:b8:7d:19:5a:8c:b5:26: e9:3c:8e:aa:4b:01:3c:e3:12:82:f0:38:19:ca:d7: 5a:d8:92:ee:e8:84:2a:2f:d6:72:a1:a9:2b:82:da: 4a:71:86:77:7a:32:5b:cf:09:f4:33:47:5c:01:f3: 64:3a:bf:3e:ca:b9:de:5a:e0:16:22:9c:31:81:e3: 48:d0:8b:27:89:77:41:83:54:60:3f:dc:39:b1:dd: b6:84:10:0f:08:16:b7:5a:8a:e9:92:43:74:e5:67: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:4F:C8:0F:49:C2:09:5C:7F:9D:93:19:20:13:9B:B6:F7:7F:65 X509v3 Authority Key Identifier: keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:98:f4:78:a2:ac:67:a4:d2:3d:63:96:ff:43:3a:6b:18:55: b4:86:8c:fa:95:2f:ea:b4:90:cb:a8:5d:11:02:55:5d:20:99: 9e:2c:12:f7:cf:fc:7c:65:c6:62:2f:4f:1e:1f:f7:6b:59:4d: 44:41:41:57:62:1a:50:8a:12:c7:cb:0d:81:d4:47:98:70:99: 1c:e8:66:5c:4a:e3:ba:a2:12:53:55:d6:01:06:5b:1b:d6:3c: 3e:26:3d:22:bf:e8:96:25:40:8c:dc:6d:85:4a:ec:55:01:48: d6:4e:7e:26:73:7b:c4:55:d4:14:79:94:f5:9f:82:40:b3:c7: cb:13:ce:41:22:1b:e8:a9:23:b0:8e:03:43:d8:2b:f8:55:03: 32:33:f5:61:e5:cf:c6:a7:40:4e:65:77:af:34:c5:da:6a:56: 0e:fd:90:e5:8b:92:e4:f2:9d:fe:04:aa:26:6a:bf:cb:13:5d: 62:a2:12:fa:d8:37:a8:77:22:5e:99:ae:5e:f7:c5:61:be:1a: e4:44:83:1e:bc:82:33:3d:8f:c4:92:84:39:34:27:75:d7:8c: a7:d2:0f:01:5e:7a:fa:70:f1:99:2a:a0:4d:ad:35:85:ca:4e: 97:7e:1b:6b:cd:7b:72:40:4e:69:50:15:24:33:4f:28:82:ac: 8b:a5:41:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0 OUMyNDI5MkIwHhcNMjUxMTA1MDAxODI1WhcNMjUxMTEyMDAxODI1WjAYMRYwFAYD VQQDEw02OTBhOTdkMS1mY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvQQVnZYCvLujYRV7ang3XedJRVC16KHeyipVqeS5OXiHnwi173f82jh7v2V WJ20VAbEUmZ4TheacdnU8vNDwlW816FSJvOwuewUwKzc8koiTudlXmyzbfmCax76 cnPMOgIOcU8I1UiaGWJ7PLVbCJqDJHVPd53cAsgxvhpeJCMcXy2UbM+m0iOhUojG SVofgBvGu+UmhBK4jZ5m2bh9GVqMtSbpPI6qSwE84xKC8DgZytda2JLu6IQqL9Zy oakrgtpKcYZ3ejJbzwn0M0dcAfNkOr8+yrneWuAWIpwxgeNI0IsniXdBg1RgP9w5 sd22hBAPCBa3WorpkkN05We/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMyT8gP ScIJXH+dkxkgE5u2939lMB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2 QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPmPR4oqxnpNI9Y5b/QzprGFW0hoz6lS/qtJDLqF0RAlVdIJmeLBL3 z/x8ZcZiL08eH/drWU1EQUFXYhpQihLHyw2B1EeYcJkc6GZcSuO6ohJTVdYBBlsb 1jw+Jj0iv+iWJUCM3G2FSuxVAUjWTn4mc3vEVdQUeZT1n4JAs8fLE85BIhvoqSOw jgND2Cv4VQMyM/Vh5c/Gp0BOZXevNMXaalYO/ZDli5Lk8p3+BKomar/LE11iohL6 2DeodyJema5e98VhvhrkRIMevIIzPY/EkoQ5NCd114yn0g8BXnr6cPGZKqBNrTWF yk6XfhtrzXtyQE5pUBUkM08ogqyLpUFu -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:31 2025 by rpki-client