$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json) Hash identifier: L0c/cr++i5WSGv3meFA3B3gqcwJP7qGDWHdkg9zK89Q= Subject key identifier: 5A:71:62:89:38:45:CA:99:B3:FF:33:55:07:F1:1D:3F:CF:DA:19:9E Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft Manifest number: 31 Signing time: Mon 03 Nov 2025 07:38:06 +0000 Manifest this update: Mon 03 Nov 2025 07:38:05 +0000 Manifest next update: Mon 10 Nov 2025 07:38:05 +0000 Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: bAaTeR9SB0d6FhaX+y7oiWPA7J0qgAdEQ+ywmeaW0dw=) 2: 4197AB74735611F080D68151C4F9AE02.roa (hash: uw93y6FGovmGq+bi/XnqUmoXwqLRFeM+9sTlrsvluUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Validity Not Before: Nov 3 07:38:05 2025 GMT Not After : Nov 10 07:38:05 2025 GMT Subject: CN=69085bde-d0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:9a:43:e9:3e:b5:7d:51:82:86:0b:ed:fe: 0b:96:6a:eb:e2:72:34:a4:e8:b8:cf:00:1d:7b:55: 96:d7:40:b9:9c:f7:c3:ce:5e:35:79:70:2d:b1:e5: a3:7c:43:9e:7b:86:2b:4f:b6:ea:fe:35:d4:1f:71: d2:9a:47:97:f5:e6:22:4e:4f:d3:fc:2a:27:db:f0: b3:f9:5e:b9:86:ec:a2:b8:32:83:08:dc:17:fe:bf: e9:6c:ce:1a:90:4c:44:d2:3e:9e:0b:43:81:f9:f0: 18:bf:d9:10:e0:3e:1c:91:70:dd:39:1f:86:9d:ae: 47:a3:93:51:40:39:db:ef:3b:ef:0a:d4:8b:cf:42: 51:37:e6:11:f9:6f:54:3a:c1:8d:8f:e1:5c:d8:7f: ef:3b:8f:2d:ba:92:58:5f:17:05:6d:62:c2:30:4e: 07:71:82:9c:f4:14:ac:c4:44:ca:bc:d6:00:7d:77: dd:28:78:6a:45:59:0c:0d:3f:e6:30:d0:46:a6:ad: 9d:a1:ed:4c:84:f4:0c:d4:86:a3:3a:f8:a7:7c:67: 7b:a2:10:9b:9a:3a:b0:59:91:2c:25:20:ae:8e:0a: 0d:f9:4e:f5:8e:5b:4d:9a:f6:4b:9a:53:83:42:77: 0c:97:49:57:cd:cf:e1:ee:89:8a:65:34:4e:b6:3a: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:71:62:89:38:45:CA:99:B3:FF:33:55:07:F1:1D:3F:CF:DA:19:9E X509v3 Authority Key Identifier: keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:42:e3:f0:d8:04:c6:7d:9f:dd:94:bf:e7:f7:37:44:f8:a0: d9:96:91:9a:d5:d8:5e:36:78:67:6d:6e:ec:24:ac:c1:60:60: 1f:83:35:84:6f:0e:a1:3a:1c:c8:1d:b6:07:3b:21:84:7b:58: c5:9b:09:b9:a7:ac:c1:7d:7a:e3:82:7e:eb:54:33:69:e1:ce: b0:42:6f:6a:1d:8a:03:0e:c9:9f:8c:a2:01:e0:4c:f5:7a:51: f1:e1:cf:69:09:f5:1a:fa:73:ee:0d:d5:9d:3c:3a:1b:e4:24: 9c:9c:c5:e8:08:66:fc:97:5e:f7:e5:f6:1f:aa:80:ae:a3:6a: 37:9c:93:8f:c8:56:e6:ac:b0:a9:0a:91:af:86:46:8a:61:14: ec:9f:4f:98:41:51:49:6d:b3:15:eb:e5:bc:f3:33:d3:17:0e: 16:8a:21:07:93:81:6e:19:60:88:8a:94:a6:c8:a6:06:f7:ac: f1:fd:d4:1a:b3:ac:fb:1c:02:d3:c6:99:dd:77:37:97:c1:5b: f5:77:a9:a0:69:e5:ff:53:6b:f9:0c:0d:3f:8a:8d:8b:7b:60: 04:ac:56:e0:ed:51:2e:d9:6d:3d:df:17:79:c2:d1:25:9b:d9: 4a:01:0a:7f:47:0c:7e:26:12:5b:ec:59:af:3c:6f:79:eb:1c: c5:c9:0f:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRDhFN0IxNUY5Q0I5MTY3NEU1MTI3RkQ0MDZEN0Q5RTcx OEUwOEFCMDAeFw0yNTExMDMwNzM4MDVaFw0yNTExMTAwNzM4MDVaMBgxFjAUBgNV BAMTDTY5MDg1YmRlLWQwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCslZpD6T61fVGChgvt/guWauvicjSk6LjPAB17VZbXQLmc98POXjV5cC2x5aN8 Q557hitPtur+NdQfcdKaR5f15iJOT9P8Kifb8LP5XrmG7KK4MoMI3Bf+v+lszhqQ TETSPp4LQ4H58Bi/2RDgPhyRcN05H4adrkejk1FAOdvvO+8K1IvPQlE35hH5b1Q6 wY2P4VzYf+87jy26klhfFwVtYsIwTgdxgpz0FKzERMq81gB9d90oeGpFWQwNP+Yw 0EamrZ2h7UyE9AzUhqM6+Kd8Z3uiEJuaOrBZkSwlIK6OCg35TvWOW02a9kuaU4NC dwyXSVfNz+HuiYplNE62OlT3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWnFiiThF ypmz/zNVB/EdP8/aGZ4wHwYDVR0jBBgwFoAU2OexX5y5FnTlEn/UBtfZ5xjgirAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzc2OUQyRDY2NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzJPZXhYNXk1Rm5UbEVuX1VCdGZaNXhqZ2ly QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMk9leFg1eTVGblRsRW5fVUJ0Zlo1eGpnaXJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzc2OUQyRDY2NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzJPZXhYNXk1Rm5U bEVuX1VCdGZaNXhqZ2lyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGNC4/DYBMZ9n92Uv+f3N0T4oNmWkZrV2F42eGdtbuwkrMFgYB+DNYRv DqE6HMgdtgc7IYR7WMWbCbmnrMF9euOCfutUM2nhzrBCb2odigMOyZ+MogHgTPV6 UfHhz2kJ9Rr6c+4N1Z08OhvkJJycxegIZvyXXvfl9h+qgK6jajeck4/IVuassKkK ka+GRophFOyfT5hBUUltsxXr5bzzM9MXDhaKIQeTgW4ZYIiKlKbIpgb3rPH91Bqz rPscAtPGmd13N5fBW/V3qaBp5f9Ta/kMDT+KjYt7YASsVuDtUS7ZbT3fF3nC0SWb 2UoBCn9HDH4mElvsWa88b3nrHMXJD1c= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:34 2025 by rpki-client