$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft File: o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json) Hash identifier: lVZbRI2NuuSZoH7KDX7FagkO5PfrmEl491T3k3znDK4= Subject key identifier: 8E:6A:CB:54:00:78:B2:8D:0F:3B:EA:A0:FF:D0:71:BF:F8:C3:D6:E2 Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 Certificate issuer: /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft Manifest number: 0961 Signing time: Tue 04 Nov 2025 20:12:50 +0000 Manifest this update: Tue 04 Nov 2025 20:12:49 +0000 Manifest next update: Tue 11 Nov 2025 20:12:49 +0000 Files and hashes: 1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: wy9m54ge7xBC29LHI06gnLRrdMw+j+nnQeGT+hs5V+A=) 2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: oh99riu32xDufqLh4s49Z+OfJBlHg4YCfXKo4NVguOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59 Validity Not Before: Nov 4 20:12:49 2025 GMT Not After : Nov 11 20:12:49 2025 GMT Subject: CN=690a5e42-7a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:d8:bc:2b:81:b0:e8:5a:5b:6e:96:23:8d: 95:19:ee:f0:d4:37:be:ff:40:11:5e:1d:50:4d:5d: 50:e0:46:c8:bf:1a:a4:b8:31:df:46:18:67:7b:1e: c8:2c:87:1a:04:7c:46:9a:34:31:23:98:8c:1c:ed: 45:6f:df:6e:54:04:93:c5:aa:79:ab:36:d6:c0:e2: 69:05:b3:e5:05:47:1f:04:03:39:3d:03:fd:42:53: 16:fa:0f:1b:d4:7f:3f:fd:ef:85:ba:cd:ee:f6:c8: 6d:2a:6c:3d:cd:be:77:f6:e9:ef:74:8a:5c:70:44: 24:20:33:ae:f5:3d:e3:0c:80:60:6c:88:7f:ea:ff: 6e:22:dc:b1:f8:34:65:6a:a6:f3:0c:7e:75:8f:19: 19:78:cc:ba:bb:f9:ba:c7:6b:c6:f6:4b:7b:35:dc: dc:be:50:21:30:db:50:4f:80:7c:4a:14:12:4e:af: fe:52:8b:e3:9e:a3:35:c7:2d:ba:43:52:88:d0:b1: 46:e1:6f:0c:04:7a:01:fd:9d:ec:47:d1:83:38:64: 4e:7e:26:77:f6:e8:33:c3:65:7e:1f:c0:28:80:52: 22:8c:ff:d9:5a:a3:5b:22:68:a3:d2:ea:f7:27:e1: f4:52:b5:fe:5e:ab:e7:ec:8b:12:c4:e1:c3:c7:37: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6A:CB:54:00:78:B2:8D:0F:3B:EA:A0:FF:D0:71:BF:F8:C3:D6:E2 X509v3 Authority Key Identifier: keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:8b:bd:15:a3:5b:af:92:47:75:04:8b:45:93:a8:36:31: db:b4:c2:f1:92:e6:78:49:1d:20:8e:cf:6c:7d:a4:84:23:79: 3d:7c:ec:e0:fb:76:87:98:47:3d:6e:b1:fe:08:a3:25:89:b6: e9:54:6d:3f:78:d4:99:59:e5:1e:cb:0a:8e:a1:67:bd:58:a7: 0f:b9:ab:cb:38:b4:45:2f:77:05:b4:92:7e:1b:78:ff:16:b7: b7:9a:b0:e5:3a:b6:5c:27:16:1c:c7:ab:4e:e6:b3:be:f5:b6: 23:52:2f:b5:71:1c:d1:d0:5a:0e:98:ed:61:f2:82:19:bb:43: f0:e1:85:7b:a5:8d:19:e4:79:28:a6:a2:5b:b5:4f:21:a4:f5: 88:4e:75:80:2a:27:9e:e9:f6:07:40:a5:55:a0:cb:07:36:66: c2:36:a6:ac:73:0f:87:07:8e:f4:78:d8:5d:0b:75:a8:12:62: 8b:42:b4:37:74:90:92:06:05:4f:a0:43:37:08:76:65:e7:cc: b9:b8:f2:7a:81:40:bf:58:0c:de:1c:4b:f2:e0:ab:a2:4e:0f: 02:7c:60:7d:5e:55:78:28:ef:06:97:7e:22:df:0d:6e:c9:13: 98:c3:54:5f:07:ad:47:9c:fc:11:c1:4a:01:32:8f:0e:25:df: 72:c6:82:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2MDQxMTAvBgNVBAUTKEEzREZCRTExQUY4QTc4RTU2MkNGQjQ1NzkwMENDQUI5 MDkwQzJCNTkwHhcNMjUxMTA0MjAxMjQ5WhcNMjUxMTExMjAxMjQ5WjAYMRYwFAYD VQQDEw02OTBhNWU0Mi03YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbvYvCuBsOhaW26WI42VGe7w1De+/0ARXh1QTV1Q4EbIvxqkuDHfRhhnex7I LIcaBHxGmjQxI5iMHO1Fb99uVASTxap5qzbWwOJpBbPlBUcfBAM5PQP9QlMW+g8b 1H8//e+Fus3u9shtKmw9zb539unvdIpccEQkIDOu9T3jDIBgbIh/6v9uItyx+DRl aqbzDH51jxkZeMy6u/m6x2vG9kt7NdzcvlAhMNtQT4B8ShQSTq/+UovjnqM1xy26 Q1KI0LFG4W8MBHoB/Z3sR9GDOGROfiZ39ugzw2V+H8AogFIijP/ZWqNbImij0ur3 J+H0UrX+Xqvn7IsSxOHDxzeejwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5qy1QA eLKNDzvqoP/Qcb/4w9biMB8GA1UdIwQYMBaAFKPfvhGvinjlYs+0V5AMyrkJDCtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTYwNC9CQ0VDNkM1RUE0 QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VPVml6N1JYa0F6S3VRa01L MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285LS1FYS1LZU9WaXo3UlhrQXpLdVFrTUsxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTYwNC9CQ0VDNkM1RUE0QTAxMUVBOEZCQUI0NURDNEY5QUUwMi9vOS0tRWEtS2VP Vml6N1JYa0F6S3VRa01LMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ5Yu9FaNbr5JHdQSLRZOoNjHbtMLxkuZ4SR0gjs9sfaSEI3k9fOzg +3aHmEc9brH+CKMlibbpVG0/eNSZWeUeywqOoWe9WKcPuavLOLRFL3cFtJJ+G3j/ Fre3mrDlOrZcJxYcx6tO5rO+9bYjUi+1cRzR0FoOmO1h8oIZu0Pw4YV7pY0Z5Hko pqJbtU8hpPWITnWAKiee6fYHQKVVoMsHNmbCNqascw+HB470eNhdC3WoEmKLQrQ3 dJCSBgVPoEM3CHZl58y5uPJ6gUC/WAzeHEvy4KuiTg8CfGB9XlV4KO8Gl34i3w1u yROYw1RfB61HnPwRwUoBMo8OJd9yxoLS -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:48 2025 by rpki-client