$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: 4kuvdGzDtLmK8l2Cxqc7LjFkPwsJPR79uhwYzN4oljY= Subject key identifier: BC:37:91:09:30:9E:F1:D4:9C:0E:CA:DB:08:AB:6D:6E:8A:CD:E5:50 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 245B Signing time: Sun 02 Nov 2025 15:48:17 +0000 Manifest this update: Sun 02 Nov 2025 15:48:17 +0000 Manifest next update: Sun 09 Nov 2025 15:48:17 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: 6/Bq+76rKVNaUkna4KdEtzKulloW5iyeo3CuCHMpgNc=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9329 (0x2471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Nov 2 15:48:17 2025 GMT Not After : Nov 9 15:48:17 2025 GMT Subject: CN=69077d41-0ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:92:dd:3a:8a:42:71:a6:70:ae:ed:2f:2c: 57:aa:10:de:47:cd:8a:5f:70:7f:cc:bb:ac:1e:d4: 8d:a8:8b:bf:1c:5e:50:36:06:66:9a:69:55:cc:11: ee:db:7d:8a:59:6d:f6:dc:57:4f:b2:eb:63:23:28: b7:74:d2:cf:79:99:5f:87:2e:68:78:55:3d:44:ab: b4:87:d6:37:79:8b:3b:5c:45:04:f3:b7:5f:7c:e3: 2b:cb:4c:65:4a:87:f7:5d:3d:ee:ef:a5:fc:27:5f: 9c:9c:52:86:1b:78:09:40:a4:c5:ff:9c:55:9c:4b: 2f:6c:4f:85:bb:fb:de:05:bb:c9:ec:3e:fc:25:51: ca:08:c6:71:76:fa:93:8d:60:3c:6c:e6:f6:db:2e: 88:e9:02:c9:ed:75:a4:b4:01:34:27:2d:a0:4e:ae: e5:06:2b:1b:aa:4b:e3:bb:eb:8d:cb:be:87:0d:7b: 2d:8c:18:6b:d4:50:46:65:57:fb:e7:31:8f:f9:97: 41:6d:1c:39:aa:e2:8a:59:05:0c:ee:5a:c7:2a:8d: 0d:13:8f:e5:aa:d8:65:f3:78:74:d5:ed:70:9b:26: 56:8c:b9:c1:ca:aa:21:e1:91:35:2e:80:f8:28:56: 57:da:b8:b9:88:a6:a5:16:a7:1e:a6:2f:bb:8d:83: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:37:91:09:30:9E:F1:D4:9C:0E:CA:DB:08:AB:6D:6E:8A:CD:E5:50 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2a:cf:06:f1:57:a6:99:48:6d:41:0b:3b:6d:f1:ae:e3:73: 38:ed:ef:8f:33:be:20:99:fe:21:1a:b7:6b:13:dc:bc:63:9a: 9d:de:7c:fb:95:87:51:c8:50:85:bf:7d:05:86:1f:0c:37:8a: 74:ba:fa:83:67:78:0e:be:17:67:a8:22:a6:98:1d:85:df:39: c7:90:f5:5c:db:88:d5:6c:a5:59:eb:80:56:fc:a0:27:b9:a0: 5b:92:32:32:e3:cd:0b:ee:e4:1e:fd:39:2e:0a:39:1e:3e:64: 10:e3:76:dd:22:87:f4:09:92:fd:03:00:0d:0b:66:81:92:6a: 9b:fb:71:67:87:be:66:02:6f:98:39:99:58:87:46:d7:08:a9: 5a:a9:7f:2a:76:0e:db:6c:d8:d8:63:71:61:bf:0e:02:45:40: c8:1a:a1:2b:a6:7e:4b:d4:79:06:53:b2:95:f1:03:70:bf:5d: 37:e5:4b:ac:af:da:52:d6:79:cb:f2:88:f1:ff:6c:d1:0b:4c: 0d:31:66:e6:87:4c:17:72:f2:33:9d:3a:e8:74:99:19:63:22: d3:93:43:53:b1:74:58:ef:f6:e6:da:f2:b7:c3:ca:23:c4:28: 68:fa:0e:6b:7f:bf:3f:aa:94:c6:92:8b:6d:f2:8a:85:92:33: 94:66:9b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUxMTAyMTU0ODE3WhcNMjUxMTA5MTU0ODE3WjAYMRYwFAYD VQQDEw02OTA3N2Q0MS0wZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2yS3TqKQnGmcK7tLyxXqhDeR82KX3B/zLusHtSNqIu/HF5QNgZmmmlVzBHu 232KWW323FdPsutjIyi3dNLPeZlfhy5oeFU9RKu0h9Y3eYs7XEUE87dffOMry0xl Sof3XT3u76X8J1+cnFKGG3gJQKTF/5xVnEsvbE+Fu/veBbvJ7D78JVHKCMZxdvqT jWA8bOb22y6I6QLJ7XWktAE0Jy2gTq7lBisbqkvju+uNy76HDXstjBhr1FBGZVf7 5zGP+ZdBbRw5quKKWQUM7lrHKo0NE4/lqthl83h01e1wmyZWjLnByqoh4ZE1LoD4 KFZX2ri5iKalFqcepi+7jYPx8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLw3kQkw nvHUnA7K2wirbW6KzeVQMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIKs8G8VemmUhtQQs7bfGu43M47e+PM74gmf4hGrdrE9y8Y5qd3nz7 lYdRyFCFv30Fhh8MN4p0uvqDZ3gOvhdnqCKmmB2F3znHkPVc24jVbKVZ64BW/KAn uaBbkjIy480L7uQe/TkuCjkePmQQ43bdIof0CZL9AwANC2aBkmqb+3Fnh75mAm+Y OZlYh0bXCKlaqX8qdg7bbNjYY3Fhvw4CRUDIGqErpn5L1HkGU7KV8QNwv1035Uus r9pS1nnL8ojx/2zRC0wNMWbmh0wXcvIznTrodJkZYyLTk0NTsXRY7/bm2vK3w8oj xCho+g5rf78/qpTGkott8oqFkjOUZpuM -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:00 2025 by rpki-client