$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: UPOuHWC5IZIj/YF5UHg22ehxiGcoRW7HyW1ZMJuGZs0= Subject key identifier: 78:3E:BB:96:23:93:DA:46:3C:80:80:1D:DD:87:1A:0B:49:D2:7B:BB Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0DC4 Signing time: Tue 04 Nov 2025 17:57:56 +0000 Manifest this update: Tue 04 Nov 2025 17:57:55 +0000 Manifest next update: Tue 11 Nov 2025 17:57:55 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: +/7c3XEtmBX6tugQ8/R61g8FwB4ULxMy3i+t0zacvxI=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Nov 4 17:57:55 2025 GMT Not After : Nov 11 17:57:55 2025 GMT Subject: CN=690a3ea4-5c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:ea:cb:b9:2e:f7:f7:a7:ec:ae:e1:1e:a6: 89:a0:04:bc:06:5d:4a:ee:12:62:b6:8c:31:40:63: 83:4d:24:bb:09:29:18:2d:4e:26:26:a6:a2:22:62: e0:5b:be:8e:7a:f1:16:b5:fb:65:2d:1a:b4:ac:e5: a0:52:ce:d9:57:3f:44:66:31:d8:b8:13:94:fb:32: 86:f0:44:1a:2d:8c:32:f9:04:3d:58:5e:a1:5c:14: c9:d6:88:09:61:e5:e0:ac:0a:6b:55:b4:92:60:e0: 0b:8a:34:f8:f5:28:24:cb:3f:24:71:db:17:3a:dc: 09:a6:a7:1c:b5:d5:f1:40:58:70:37:3e:a1:3c:43: 34:90:33:ca:31:13:ea:e9:3f:d5:83:b2:5d:ea:9f: 0b:ae:bb:c2:ad:d5:27:db:c0:ab:f3:36:7e:84:4d: 82:f4:1d:80:38:be:af:6e:70:b8:8e:cd:cf:f9:d5: ca:ba:bd:fd:64:8c:97:5a:cd:8c:bb:c1:36:38:9c: 02:b2:09:58:a5:00:a0:cb:f0:c9:67:31:09:42:fa: fa:d9:fa:f4:18:b8:ca:81:14:50:76:06:b1:dd:62: 35:bc:ad:fc:e9:62:01:ba:1f:0e:96:a4:0f:76:0f: 2b:4f:80:dc:62:4b:11:58:e4:f1:6d:1f:32:30:89: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:BB:96:23:93:DA:46:3C:80:80:1D:DD:87:1A:0B:49:D2:7B:BB X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5d:66:8b:27:94:83:d1:0d:9c:04:e2:84:de:f6:19:de:0e: e0:f0:9c:b1:54:89:95:44:22:17:66:0b:b4:fa:ff:0a:8f:6f: 51:53:53:53:b6:1b:98:73:4a:a6:e8:1a:e9:34:65:98:92:ea: 24:44:3e:58:65:de:c9:1f:3e:c7:67:af:d4:97:91:7b:58:57: d8:a8:57:5b:c7:4c:19:a3:5d:86:90:ac:dd:87:e2:74:b0:bc: 82:a2:f9:02:c8:18:fa:cf:53:46:c0:65:47:f7:09:27:63:ba: 38:06:bb:d1:6b:e4:83:47:06:2d:44:56:cb:b1:a7:4d:67:58: d9:37:2d:3f:25:92:a9:d6:e8:3d:2d:0e:06:8d:d9:71:d6:27: 84:6e:fc:2d:37:f6:a8:43:65:67:7c:44:c6:ef:88:c7:0f:36: ab:70:7a:58:ba:85:64:8c:c4:7c:38:82:99:c7:35:a2:d0:9d: ec:16:1d:ae:4c:71:83:3c:a7:34:53:8a:1e:b6:6b:37:45:07: 91:8c:3a:57:fc:c1:98:c6:69:64:f3:41:e2:a0:13:a2:a8:74: 46:ba:4f:99:5e:98:24:2f:f3:aa:44:0a:08:cb:01:66:f2:90: af:3b:df:68:90:2f:ba:91:3c:c5:4a:43:e1:d4:5a:c3:9c:97: 95:cd:ae:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjUxMTA0MTc1NzU1WhcNMjUxMTExMTc1NzU1WjAYMRYwFAYD VQQDEw02OTBhM2VhNC01Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvTqy7ku9/en7K7hHqaJoAS8Bl1K7hJitowxQGODTSS7CSkYLU4mJqaiImLg W76OevEWtftlLRq0rOWgUs7ZVz9EZjHYuBOU+zKG8EQaLYwy+QQ9WF6hXBTJ1ogJ YeXgrAprVbSSYOALijT49Sgkyz8kcdsXOtwJpqcctdXxQFhwNz6hPEM0kDPKMRPq 6T/Vg7Jd6p8LrrvCrdUn28Cr8zZ+hE2C9B2AOL6vbnC4js3P+dXKur39ZIyXWs2M u8E2OJwCsglYpQCgy/DJZzEJQvr62fr0GLjKgRRQdgax3WI1vK386WIBuh8OlqQP dg8rT4DcYksRWOTxbR8yMIlmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg+u5Yj k9pGPICAHd2HGgtJ0nu7MB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXXWaLJ5SD0Q2cBOKE3vYZ3g7g8JyxVImVRCIXZgu0+v8Kj29RU1NT thuYc0qm6BrpNGWYkuokRD5YZd7JHz7HZ6/Ul5F7WFfYqFdbx0wZo12GkKzdh+J0 sLyCovkCyBj6z1NGwGVH9wknY7o4BrvRa+SDRwYtRFbLsadNZ1jZNy0/JZKp1ug9 LQ4Gjdlx1ieEbvwtN/aoQ2VnfETG74jHDzarcHpYuoVkjMR8OIKZxzWi0J3sFh2u THGDPKc0U4oetms3RQeRjDpX/MGYxmlk80HioBOiqHRGuk+ZXpgkL/OqRAoIywFm 8pCvO99okC+6kTzFSkPh1FrDnJeVza4H -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:51 2025 by rpki-client