$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft File: 8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json) Hash identifier: 5w0LLEyyV34hWRls9T0DneG5NGLdptuJMgMm8H4Bic4= Subject key identifier: 84:C6:D7:64:1E:A5:43:E9:24:1F:24:89:98:2D:A0:B3:32:0A:96:C1 Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft Manifest number: 09AD Signing time: Tue 04 Nov 2025 20:07:18 +0000 Manifest this update: Tue 04 Nov 2025 20:07:18 +0000 Manifest next update: Tue 11 Nov 2025 20:07:18 +0000 Files and hashes: 1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: kvXO4NMb9HuCxUmyBcQZMSo+Kjxxg6G6J4SvuL++rdw=) 2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: Mf2+h64oIkKVCrmHAT8VYLEu5usAeOj24IncTZPlL1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Validity Not Before: Nov 4 20:07:18 2025 GMT Not After : Nov 11 20:07:18 2025 GMT Subject: CN=690a5cf6-5602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:7b:9a:1f:03:1d:43:ae:0e:e4:db:5b:81: 6d:e4:03:0e:2a:ac:c4:ee:07:00:de:72:c5:19:d2: 55:2f:6c:07:a1:f9:a1:9c:85:9b:6e:b1:fe:f3:7b: 5d:ed:57:40:d3:da:0f:65:f7:6e:89:0a:6c:c8:c7: 7a:cb:5e:43:9d:b2:4d:c1:06:41:91:64:22:66:f5: 79:f1:3b:4a:52:1d:5b:2c:8c:79:5a:ed:fd:dc:db: 47:72:14:82:28:41:a1:3e:ca:90:e9:e7:0c:be:97: 1a:ec:39:ac:8c:0e:66:0b:11:42:f5:57:cf:d4:95: 48:03:f2:26:9a:f8:d8:79:cf:c4:31:b2:b9:27:eb: 93:2e:7d:0e:c9:99:c0:40:41:b3:b7:60:b6:4b:dc: 63:01:49:90:aa:8d:c7:0a:12:60:98:a0:d9:16:34: 95:44:af:3c:2f:4b:81:22:12:0c:a9:20:12:0a:02: 0e:56:dc:fa:d8:bb:1a:6a:8e:06:ef:db:df:37:33: 91:0e:19:fc:d9:e2:68:38:d5:60:e4:75:26:f6:86: fe:b6:b8:00:88:86:f7:4a:9e:cd:79:1b:ff:f6:7c: da:c0:ee:34:af:7c:e8:ad:ba:9d:aa:98:7a:12:d0: 06:df:a6:98:a4:fb:34:fd:9b:d3:88:22:4c:6f:bf: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:D7:64:1E:A5:43:E9:24:1F:24:89:98:2D:A0:B3:32:0A:96:C1 X509v3 Authority Key Identifier: keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:c1:4c:94:9e:87:8b:e1:89:5c:39:f1:9e:53:2f:8f:db: 7c:31:cc:ee:24:11:ac:0d:a7:8c:3f:c0:3e:95:7f:1d:3a:db: 51:d0:05:62:f2:48:2d:28:59:54:34:df:dc:96:81:47:c9:22: 52:01:ae:7a:08:90:e2:7b:05:04:33:1d:68:fc:04:eb:6b:b5: 05:67:ec:a0:65:c7:3a:a0:6a:3e:98:5f:19:cc:89:8f:75:ab: 3e:65:5d:b9:2b:c9:28:29:4a:0d:a1:8b:b3:af:82:e2:f5:b7: 52:03:d0:0f:d4:9c:c8:99:7b:ba:8a:2c:0d:ba:95:31:8f:ab: c1:f3:73:46:19:e3:e2:55:25:b7:e3:ff:78:2c:ca:ad:2c:b4: 03:bf:fb:ee:9f:5b:a0:47:c8:27:aa:05:84:b4:36:93:6a:8d: 91:2b:b2:34:8b:26:3b:d4:5f:41:02:a4:c2:a0:32:28:1a:d9: b6:bb:d3:0c:31:23:6b:4d:76:05:11:a0:77:3a:b1:89:d2:80: bf:c0:89:c1:54:f9:c2:10:6c:44:7b:a2:3e:ac:5f:bb:a2:c3: 69:bd:02:0e:4d:1d:a3:24:a0:7c:05:00:37:fd:95:78:55:04: a6:a2:c6:43:b9:af:69:dc:e6:9a:3d:af:34:e4:2f:a0:5c:b9: ec:11:00:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE RkNBRENGRTYwHhcNMjUxMTA0MjAwNzE4WhcNMjUxMTExMjAwNzE4WjAYMRYwFAYD VQQDEw02OTBhNWNmNi01NjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0t7mh8DHUOuDuTbW4Ft5AMOKqzE7gcA3nLFGdJVL2wHofmhnIWbbrH+83td 7VdA09oPZfduiQpsyMd6y15DnbJNwQZBkWQiZvV58TtKUh1bLIx5Wu393NtHchSC KEGhPsqQ6ecMvpca7DmsjA5mCxFC9VfP1JVIA/ImmvjYec/EMbK5J+uTLn0OyZnA QEGzt2C2S9xjAUmQqo3HChJgmKDZFjSVRK88L0uBIhIMqSASCgIOVtz62Lsaao4G 79vfNzORDhn82eJoONVg5HUm9ob+trgAiIb3Sp7NeRv/9nzawO40r3zorbqdqph6 EtAG36aYpPs0/ZvTiCJMb7/cnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITG12Qe pUPpJB8kiZgtoLMyCpbBMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3 QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCMFMlJ6Hi+GJXDnxnlMvj9t8MczuJBGsDaeMP8A+lX8dOttR0AVi 8kgtKFlUNN/cloFHySJSAa56CJDiewUEMx1o/ATra7UFZ+ygZcc6oGo+mF8ZzImP das+ZV25K8koKUoNoYuzr4Li9bdSA9AP1JzImXu6iiwNupUxj6vB83NGGePiVSW3 4/94LMqtLLQDv/vun1ugR8gnqgWEtDaTao2RK7I0iyY71F9BAqTCoDIoGtm2u9MM MSNrTXYFEaB3OrGJ0oC/wInBVPnCEGxEe6I+rF+7osNpvQIOTR2jJKB8BQA3/ZV4 VQSmosZDua9p3OaaPa805C+gXLnsEQA4 -----END CERTIFICATE-----Generated at Wed Nov 5 15:16:56 2025 by rpki-client