$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: msyqSf3e9f9CKsKwKUkHmUIhzfJd5awaQCmzlQa9zgU= Subject key identifier: 1D:8B:4B:E8:23:C0:55:A5:C5:9B:84:17:4C:34:64:21:4E:70:3B:04 Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 018E Signing time: Wed 05 Nov 2025 04:06:49 +0000 Manifest this update: Wed 05 Nov 2025 04:06:49 +0000 Manifest next update: Wed 12 Nov 2025 04:06:49 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: yxPk7h8H/7Ifry5+hHoQj7XidnTFXUwVJykAshfau/o=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: 1LEVeAmiTE8mfugUrgZ7PXJTh3jzct433M4/pCSC1j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Nov 5 04:06:49 2025 GMT Not After : Nov 12 04:06:49 2025 GMT Subject: CN=690acd59-ba35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:e2:e7:98:47:de:df:91:72:c0:71:b1:9a: fc:97:8b:77:cb:cf:62:6b:93:ec:bc:03:c0:42:aa: 5f:23:07:05:93:b8:99:8b:a0:24:c9:5c:14:6a:1f: 12:5a:2b:68:18:af:11:ac:7a:66:5d:0a:c0:9c:d5: 3e:0f:d8:7d:73:30:f0:9e:af:a8:34:9c:c9:47:a6: cd:f1:94:5b:63:cc:28:bf:a1:9a:25:5a:ea:6a:28: 39:b7:13:5c:13:06:52:e0:73:64:1b:fe:c6:1a:60: 6e:c3:6c:d0:37:cc:d3:2f:64:0f:66:a5:9c:ce:86: 2c:c6:fd:e1:8a:92:cf:b7:a8:fc:fa:1c:35:87:c6: 67:ef:62:5c:12:43:e8:78:20:d4:e0:9b:be:d0:af: 0f:df:be:3a:ad:a4:b1:5b:07:d5:5a:f4:75:f3:af: 8c:47:37:76:ca:36:e6:fe:a4:08:cc:52:a4:9d:f0: 57:b1:c2:bc:29:e8:2b:8f:be:f4:58:64:8c:4a:5e: 74:f4:89:e2:9c:08:fe:c4:95:2a:14:2c:47:b1:54: ab:24:07:52:23:85:64:86:cf:27:b7:3d:92:45:3b: 41:79:bc:1b:86:d8:85:f7:0c:b7:2c:b6:a2:96:ae: 87:fe:e6:ef:12:0b:73:74:52:a2:86:b1:5c:ff:d8: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:4B:E8:23:C0:55:A5:C5:9B:84:17:4C:34:64:21:4E:70:3B:04 X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:fd:15:c8:f2:2e:04:da:6e:7b:2c:eb:fc:77:3b:cd:77:4a: 39:51:75:10:49:0e:7b:6a:f6:19:4c:ab:b3:ed:80:75:de:58: 37:1f:30:84:a4:71:75:b0:de:58:f2:4a:e3:d9:ed:5b:20:0b: f2:d1:4c:23:2c:3c:89:77:5a:46:5a:82:84:f8:91:99:9a:51: 44:59:e5:ec:cd:c5:09:09:00:af:5b:06:f4:63:0d:0e:e2:7d: be:b6:04:69:65:d4:1e:35:1c:33:0d:6b:06:f5:00:94:e1:ca: 34:8e:66:ab:fb:71:62:c6:e8:0d:f1:29:70:5c:87:df:58:60: 5e:cf:15:39:96:73:20:82:a9:90:35:6d:de:86:e4:75:f0:d2: e6:40:06:e4:58:ed:a3:52:92:71:5f:4a:2e:94:59:f9:f4:37: 0d:50:e9:ee:8c:1f:35:78:0e:37:70:e8:f0:3a:3b:8f:d7:e1: e5:24:10:5b:9c:ad:6d:f6:35:88:b9:ef:b6:67:33:19:a7:a8: 7a:42:74:aa:29:e5:e6:58:98:fa:d5:cf:19:f2:50:32:f8:d1: 2f:20:1a:9c:9d:3a:0e:44:0a:a6:9a:3a:dc:21:24:58:b2:02: b5:6b:2b:01:86:54:68:fa:52:cc:b9:ae:ca:8e:42:a1:25:a2: 27:9b:0d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUxMTA1MDQwNjQ5WhcNMjUxMTEyMDQwNjQ5WjAYMRYwFAYD VQQDEw02OTBhY2Q1OS1iYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr/i55hH3t+RcsBxsZr8l4t3y89ia5PsvAPAQqpfIwcFk7iZi6AkyVwUah8S WitoGK8RrHpmXQrAnNU+D9h9czDwnq+oNJzJR6bN8ZRbY8wov6GaJVrqaig5txNc EwZS4HNkG/7GGmBuw2zQN8zTL2QPZqWczoYsxv3hipLPt6j8+hw1h8Zn72JcEkPo eCDU4Ju+0K8P3746raSxWwfVWvR186+MRzd2yjbm/qQIzFKknfBXscK8Kegrj770 WGSMSl509IninAj+xJUqFCxHsVSrJAdSI4Vkhs8ntz2SRTtBebwbhtiF9wy3LLai lq6H/ubvEgtzdFKihrFc/9hh0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2LS+gj wFWlxZuEF0w0ZCFOcDsEMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo/RXI8i4E2m57LOv8dzvNd0o5UXUQSQ57avYZTKuz7YB13lg3HzCE pHF1sN5Y8krj2e1bIAvy0UwjLDyJd1pGWoKE+JGZmlFEWeXszcUJCQCvWwb0Yw0O 4n2+tgRpZdQeNRwzDWsG9QCU4co0jmar+3FixugN8SlwXIffWGBezxU5lnMggqmQ NW3ehuR18NLmQAbkWO2jUpJxX0oulFn59DcNUOnujB81eA43cOjwOjuP1+HlJBBb nK1t9jWIue+2ZzMZp6h6QnSqKeXmWJj61c8Z8lAy+NEvIBqcnToORAqmmjrcISRY sgK1aysBhlRo+lLMua7KjkKhJaInmw3D -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:34 2025 by rpki-client