$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: df6W3o2wT/55n2eHLGnLW59EcZQ/ppd9rrl6Q3ZjBy4= Subject key identifier: 2F:E8:C4:A8:C0:CB:62:87:00:3B:63:20:61:0B:2D:82:6D:53:7D:3A Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01E7 Signing time: Mon 03 Nov 2025 02:37:56 +0000 Manifest this update: Mon 03 Nov 2025 02:37:55 +0000 Manifest next update: Mon 10 Nov 2025 02:37:55 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: 2EvUdyO/xQrIoy6U9HQC9VmncaCWSSPEG1tP4u5mXEk=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Nov 3 02:37:55 2025 GMT Not After : Nov 10 02:37:55 2025 GMT Subject: CN=69081583-dcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:97:22:d0:95:cc:af:98:f3:c3:b7:b1:50: 1a:e9:f1:3d:08:00:49:6d:27:50:d1:b8:7e:2a:55: ad:76:6e:eb:fd:5d:e5:8b:8f:74:c1:8a:2f:36:e1: 89:44:21:d0:7f:eb:2c:87:48:59:13:e4:bf:d9:cb: e0:77:9b:3b:23:d9:70:b6:a4:f8:7f:6d:03:40:9f: 44:c5:dc:60:77:cd:66:55:2d:ea:75:33:2a:c2:eb: f9:9a:c2:a3:da:e6:a6:e6:6b:2e:94:39:cb:1e:59: 9c:14:d2:fe:0d:5b:4a:23:34:c6:7d:9a:bd:22:20: ab:2d:d2:90:73:4c:44:78:ee:75:b6:5e:d9:80:92: c5:8e:26:e5:59:4b:bd:d2:18:50:36:46:30:77:d2: 71:ba:c7:94:4f:d0:8a:35:28:cb:81:eb:34:1b:e0: 7d:6b:f1:b5:b3:82:a4:63:4b:34:e7:43:0d:5f:32: 06:58:a0:6a:eb:9e:ef:63:d2:32:31:cf:33:5e:d4: c4:7b:39:72:dc:c9:59:69:17:e2:8f:ce:98:fd:24: b9:34:46:64:a2:a6:69:e1:83:bd:68:47:f1:47:97: b2:3f:93:3d:33:05:53:7b:c8:67:16:2c:aa:5c:24: da:82:73:9d:d6:71:2f:d6:ae:5c:1d:f4:eb:d5:d7: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:C4:A8:C0:CB:62:87:00:3B:63:20:61:0B:2D:82:6D:53:7D:3A X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d0:41:16:ed:19:17:97:19:11:32:32:dd:7f:43:02:e2:58: d6:c0:ce:de:ce:aa:d6:54:5c:57:45:67:a1:12:c8:54:32:87: b1:3f:18:3c:b4:6c:93:45:67:14:fa:16:12:7d:35:62:d1:c1: 78:63:8a:be:0d:ce:ca:25:2b:b6:e4:7c:51:fd:b3:10:f4:d1: 36:7f:3f:ee:4d:8d:07:68:2a:9f:61:f7:43:60:a0:83:6c:47: 6e:34:33:70:cb:a3:ca:b7:07:da:6b:46:40:48:65:e8:4b:9e: 6e:d5:e0:50:0e:8e:29:7f:28:1e:06:bb:ce:57:12:6f:0d:f6: 31:2a:bf:0f:b9:0d:e6:3c:1f:81:05:a4:f9:0f:2d:e5:7e:c3: 24:c7:bb:89:b5:f5:15:47:01:27:77:f5:e7:a2:c0:cf:8c:54: 1f:fa:d8:ae:47:20:ba:78:5b:71:b7:75:8b:39:c9:91:33:b2: 0c:77:f9:37:4d:4a:4d:6f:1e:14:5a:6c:9c:0a:94:33:9a:27: 1f:fc:2f:55:78:b7:53:16:aa:02:52:56:b7:79:b9:ed:b6:7f: 98:d4:f2:51:ff:7a:c6:cd:90:e7:de:b4:a1:ca:bb:98:71:65: 18:37:ae:c7:7b:7d:7b:8c:55:57:d8:cc:a9:82:e7:7e:1c:92: 6b:f1:ab:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUxMTAzMDIzNzU1WhcNMjUxMTEwMDIzNzU1WjAYMRYwFAYD VQQDEw02OTA4MTU4My1kY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr2XItCVzK+Y88O3sVAa6fE9CABJbSdQ0bh+KlWtdm7r/V3li490wYovNuGJ RCHQf+ssh0hZE+S/2cvgd5s7I9lwtqT4f20DQJ9Exdxgd81mVS3qdTMqwuv5msKj 2uam5msulDnLHlmcFNL+DVtKIzTGfZq9IiCrLdKQc0xEeO51tl7ZgJLFjiblWUu9 0hhQNkYwd9JxuseUT9CKNSjLges0G+B9a/G1s4KkY0s050MNXzIGWKBq657vY9Iy Mc8zXtTEezly3MlZaRfij86Y/SS5NEZkoqZp4YO9aEfxR5eyP5M9MwVTe8hnFiyq XCTagnOd1nEv1q5cHfTr1ddVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/oxKjA y2KHADtjIGELLYJtU306MB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY0EEW7RkXlxkRMjLdf0MC4ljWwM7ezqrWVFxXRWehEshUMoexPxg8 tGyTRWcU+hYSfTVi0cF4Y4q+Dc7KJSu25HxR/bMQ9NE2fz/uTY0HaCqfYfdDYKCD bEduNDNwy6PKtwfaa0ZASGXoS55u1eBQDo4pfygeBrvOVxJvDfYxKr8PuQ3mPB+B BaT5Dy3lfsMkx7uJtfUVRwEnd/XnosDPjFQf+tiuRyC6eFtxt3WLOcmRM7IMd/k3 TUpNbx4UWmycCpQzmicf/C9VeLdTFqoCUla3ebnttn+Y1PJR/3rGzZDn3rShyruY cWUYN67He317jFVX2Mypgud+HJJr8asF -----END CERTIFICATE-----Generated at Tue Nov 4 08:16:07 2025 by rpki-client