$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: ufeK4xImE8lR1z0uNBn3920pwqpCu9ififYeONsJE0s= Subject key identifier: 6F:20:C0:FE:65:72:B8:95:40:A2:36:17:FB:37:74:C2:B9:9C:C2:B3 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 022F Signing time: Wed 05 Nov 2025 02:09:39 +0000 Manifest this update: Wed 05 Nov 2025 02:09:38 +0000 Manifest next update: Wed 12 Nov 2025 02:09:38 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: sxpliftHtECecwKUlyq7i2xKD30fofk/bMDaMo8LFuo=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Nov 5 02:09:38 2025 GMT Not After : Nov 12 02:09:38 2025 GMT Subject: CN=690ab1e2-7817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:d7:45:60:0b:75:8f:67:8b:37:49:a7:34: 14:f4:83:64:1a:d1:e2:28:f4:61:3d:3e:fa:2e:65: 56:7b:46:be:4f:ee:2c:60:b2:04:44:ad:a7:11:3d: 2f:e4:86:a5:80:e2:73:bb:77:01:c2:3e:2e:98:83: 0c:18:9b:35:5b:ba:52:fa:95:96:7b:76:ed:2a:ec: 95:76:20:53:cf:6b:a6:2f:4f:34:b7:ec:4f:70:5b: dc:5a:b7:15:23:f0:79:ce:0c:cf:c7:d9:1c:98:f7: 54:98:bf:17:fd:dd:1a:6b:24:15:6d:22:34:c0:62: 21:08:cb:40:40:4e:b1:58:1f:d8:4c:bd:d0:1c:4e: 9c:a9:b6:c4:51:d1:35:f0:bc:f3:bf:94:9d:91:36: a2:01:73:94:65:09:63:be:58:eb:69:59:48:e3:3b: 86:b9:bd:9c:c8:75:cd:e7:23:52:6f:30:75:25:55: 83:b1:a7:e6:49:8a:a0:e5:2b:04:f4:48:8d:6c:71: 91:fd:2e:1a:6c:fe:72:69:98:9f:ef:e4:bb:d5:dd: 7c:4c:71:e7:a6:aa:cf:6f:78:89:30:1c:b5:92:7f: 77:1a:58:75:93:20:ac:8a:89:19:47:c6:5f:03:8d: d7:b2:d5:3e:0a:11:24:10:40:88:ba:d8:8d:c1:26: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:C0:FE:65:72:B8:95:40:A2:36:17:FB:37:74:C2:B9:9C:C2:B3 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:22:83:13:1a:db:e3:70:bd:bc:06:d7:d1:0d:2c:8c:ce:28: e4:c7:b5:d5:58:21:6f:4f:ce:bd:2f:79:6f:f3:92:db:d4:8a: 51:d6:31:8d:a3:dc:58:a2:a8:90:bc:c6:6d:4f:09:bb:93:da: b2:60:d7:0a:a8:e2:07:e6:ea:1d:b5:f5:54:d0:e7:87:7c:80: 4e:eb:f8:c8:d1:dd:53:eb:c4:61:90:ce:99:f4:fd:40:f2:e4: 76:25:97:f9:5d:b8:2f:be:7e:0f:c5:40:0b:50:8e:b4:b1:57: 4b:4c:36:e0:b8:96:e9:4a:0c:65:cb:da:94:21:3a:34:85:ab: dd:6a:63:55:07:89:9e:03:57:57:8c:e7:f8:fa:14:f7:1f:26: b5:3a:33:a7:8c:0d:6e:4e:d0:e6:b3:89:59:35:e4:f2:69:dd: 6e:51:3d:8a:63:e2:34:76:a6:dc:4b:e2:7a:42:d7:eb:66:fb: f4:3d:23:f0:31:49:26:6e:5d:ee:5f:74:c8:69:a0:8b:af:18: 0c:e6:2c:c1:fa:d8:6b:21:7e:a5:06:0c:74:97:2c:c8:9d:f7: 2b:42:2d:6c:72:8f:bd:43:77:d3:30:99:1f:4b:2c:8b:35:67: 00:14:33:22:52:b8:eb:96:5c:3e:c2:06:f7:40:71:66:50:35: 7e:77:d2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUxMTA1MDIwOTM4WhcNMjUxMTEyMDIwOTM4WjAYMRYwFAYD VQQDEw02OTBhYjFlMi03ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutrXRWALdY9nizdJpzQU9INkGtHiKPRhPT76LmVWe0a+T+4sYLIERK2nET0v 5IalgOJzu3cBwj4umIMMGJs1W7pS+pWWe3btKuyVdiBTz2umL080t+xPcFvcWrcV I/B5zgzPx9kcmPdUmL8X/d0aayQVbSI0wGIhCMtAQE6xWB/YTL3QHE6cqbbEUdE1 8Lzzv5SdkTaiAXOUZQljvljraVlI4zuGub2cyHXN5yNSbzB1JVWDsafmSYqg5SsE 9EiNbHGR/S4abP5yaZif7+S71d18THHnpqrPb3iJMBy1kn93Glh1kyCsiokZR8Zf A43XstU+ChEkEECIutiNwSaGgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8gwP5l criVQKI2F/s3dMK5nMKzMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPIoMTGtvjcL28BtfRDSyMzijkx7XVWCFvT869L3lv85Lb1IpR1jGN o9xYoqiQvMZtTwm7k9qyYNcKqOIH5uodtfVU0OeHfIBO6/jI0d1T68RhkM6Z9P1A 8uR2JZf5Xbgvvn4PxUALUI60sVdLTDbguJbpSgxly9qUITo0havdamNVB4meA1dX jOf4+hT3Hya1OjOnjA1uTtDms4lZNeTyad1uUT2KY+I0dqbcS+J6QtfrZvv0PSPw MUkmbl3uX3TIaaCLrxgM5izB+thrIX6lBgx0lyzInfcrQi1sco+9Q3fTMJkfSyyL NWcAFDMiUrjrllw+wgb3QHFmUDV+d9Km -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:23 2025 by rpki-client