$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: zA9hOZrNuNUM1kUKYWfWzF5FY1C1nU2dTyL/UYj9mcM= Subject key identifier: 1C:E3:82:E3:17:7C:C6:41:A0:9F:80:F8:60:2A:20:52:B0:8B:C7:54 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C05 Signing time: Tue 04 Nov 2025 18:56:40 +0000 Manifest this update: Tue 04 Nov 2025 18:56:39 +0000 Manifest next update: Tue 11 Nov 2025 18:56:39 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: egHpBLBAhsWjnH8yTEp/KmyBqEhV6strGZiJurgL05U=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Nov 4 18:56:39 2025 GMT Not After : Nov 11 18:56:39 2025 GMT Subject: CN=690a4c67-201b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:da:c3:81:05:5c:15:40:f3:8b:d7:e1:62: ad:ea:ef:5d:65:66:44:12:85:65:f1:e6:e1:1e:e7: 4f:c1:7b:90:fc:a2:fa:9e:cd:ea:cf:55:a6:83:24: e2:65:46:f1:81:54:e6:cf:06:42:0f:95:7f:19:72: fe:9b:8f:09:8a:c0:4d:da:5e:77:0a:a5:d7:ea:64: f3:e8:f0:7a:d6:51:a0:e6:75:22:2e:34:b8:15:73: 20:06:cf:1c:a8:f5:3f:4b:99:8a:a7:ae:6e:69:9d: 75:19:5d:b5:5e:c7:18:2e:cc:40:4a:77:0d:5d:04: 35:69:b2:89:a1:e0:5f:a1:19:03:0f:d6:4d:e7:36: f5:0f:a4:dd:26:39:b8:93:b7:af:c8:3c:83:bf:2f: 23:9c:89:9c:c4:66:fd:9f:f6:40:c7:46:57:e9:79: 42:81:ea:54:01:59:87:be:e8:bc:a2:47:05:fe:ca: c9:0f:2b:6a:0b:6f:ca:48:22:47:8d:fb:9d:4a:26: 59:61:bd:2f:cc:aa:0a:81:7a:5b:02:9a:08:b4:8c: 50:c8:dd:25:30:d3:f6:e5:20:2d:27:d3:0c:a3:b6: 68:9c:3d:29:88:26:e8:f4:e3:69:98:f9:c6:cd:16: 0e:4c:01:bc:6b:bd:f7:94:d3:bd:c2:e4:f1:0f:79: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E3:82:E3:17:7C:C6:41:A0:9F:80:F8:60:2A:20:52:B0:8B:C7:54 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:5f:46:f1:2d:28:86:f7:22:92:d0:3f:98:7f:0b:0b:56:d4: b2:91:21:35:20:dc:1a:76:2a:b3:39:11:15:10:f7:17:37:c7: 57:c6:17:da:25:9c:ab:15:e8:d7:c4:5c:16:46:81:23:3a:44: 92:15:d3:a8:98:cd:31:19:6b:0a:5b:b2:e2:64:de:17:89:f4: 79:13:a1:8f:ff:63:8c:64:ac:a6:31:ec:2e:e1:27:36:4d:7a: 84:eb:66:68:80:6d:ce:d4:8f:8b:a8:95:ae:8d:1a:16:3d:22: 26:55:b7:4f:0e:74:66:d6:b4:78:22:53:29:0c:15:45:c0:78: 4d:4a:15:ef:9a:d9:a0:47:56:bd:d2:2f:32:1a:c4:8e:6b:89: 6d:fa:c8:0a:cf:fe:97:01:26:80:3a:fc:67:8a:5e:88:af:59: ed:67:64:52:01:17:a7:f5:f7:fb:70:80:72:ef:0f:a4:48:e1: 92:75:5b:39:24:18:39:63:8b:cd:43:95:6d:ec:84:24:46:c6: 93:2c:0f:4e:42:3a:ed:25:ec:25:a5:66:d9:6d:f0:72:61:ba: 06:19:2e:0b:1a:f6:76:b8:3d:81:b6:aa:8b:70:e8:85:5e:a6: a6:c9:1d:d9:76:db:12:39:8d:64:09:6e:d8:c6:eb:ea:ad:e3: 6a:64:ea:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjUxMTA0MTg1NjM5WhcNMjUxMTExMTg1NjM5WjAYMRYwFAYD VQQDEw02OTBhNGM2Ny0yMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhHaw4EFXBVA84vX4WKt6u9dZWZEEoVl8ebhHudPwXuQ/KL6ns3qz1WmgyTi ZUbxgVTmzwZCD5V/GXL+m48JisBN2l53CqXX6mTz6PB61lGg5nUiLjS4FXMgBs8c qPU/S5mKp65uaZ11GV21XscYLsxASncNXQQ1abKJoeBfoRkDD9ZN5zb1D6TdJjm4 k7evyDyDvy8jnImcxGb9n/ZAx0ZX6XlCgepUAVmHvui8okcF/srJDytqC2/KSCJH jfudSiZZYb0vzKoKgXpbApoItIxQyN0lMNP25SAtJ9MMo7ZonD0piCbo9ONpmPnG zRYOTAG8a733lNO9wuTxD3lntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzjguMX fMZBoJ+A+GAqIFKwi8dUMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxX0bxLSiG9yKS0D+YfwsLVtSykSE1INwadiqzOREVEPcXN8dXxhfa JZyrFejXxFwWRoEjOkSSFdOomM0xGWsKW7LiZN4XifR5E6GP/2OMZKymMewu4Sc2 TXqE62ZogG3O1I+LqJWujRoWPSImVbdPDnRm1rR4IlMpDBVFwHhNShXvmtmgR1a9 0i8yGsSOa4lt+sgKz/6XASaAOvxnil6Ir1ntZ2RSARen9ff7cIBy7w+kSOGSdVs5 JBg5Y4vNQ5Vt7IQkRsaTLA9OQjrtJewlpWbZbfByYboGGS4LGvZ2uD2BtqqLcOiF XqamyR3ZdtsSOY1kCW7YxuvqreNqZOqw -----END CERTIFICATE-----Generated at Wed Nov 5 15:47:51 2025 by rpki-client