$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: N12qSPC3o4hduBKw2EnA3RoSnI+sP/PNjc0jETvC7mw= Subject key identifier: 9C:3C:40:C6:38:3A:25:02:03:1A:FA:A6:79:0C:C9:07:76:6A:25:BA Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 0680 Signing time: Tue 04 Nov 2025 22:35:03 +0000 Manifest this update: Tue 04 Nov 2025 22:35:02 +0000 Manifest next update: Tue 11 Nov 2025 22:35:02 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: VKupAsEJ3anb/gz1VJhXterKmf6DXHTX0B4u3pKXvno=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Nov 4 22:35:02 2025 GMT Not After : Nov 11 22:35:02 2025 GMT Subject: CN=690a7f96-8c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dc:2f:1e:ec:15:ba:b1:c7:8b:56:e5:ec:17: 6c:9b:cc:12:a5:29:37:b0:3b:f5:9c:ad:c2:9d:55: cc:01:4c:ea:4f:be:82:b0:4a:c7:1e:14:97:e6:4c: c9:a1:07:9c:0e:a2:6a:f7:ad:10:5b:11:18:ba:9a: 2e:50:8e:7e:d4:15:34:40:a4:46:27:22:4c:b8:2c: 2f:91:cf:82:ea:32:a6:cf:ab:9a:d1:45:8f:6d:24: 96:dc:03:b9:fe:fd:36:3e:c9:16:99:43:96:d7:75: a8:c9:99:db:0c:9d:4a:e1:55:ca:b1:2c:c8:7d:37: 6e:9f:53:20:c2:7f:90:09:ea:bc:24:a9:a9:9b:62: 64:d5:73:0d:6b:ba:8f:c2:f7:c2:08:4d:6a:7d:7d: e5:66:c0:bc:6c:2a:a6:c7:c4:70:65:16:95:60:f8: fc:bc:cc:5c:f5:9a:87:1e:86:43:e1:7f:a5:6f:6f: 29:9f:e5:b4:93:78:94:24:cc:81:c7:7d:04:04:c7: 17:5c:36:eb:b6:5b:34:1a:fb:d7:d7:19:61:8d:83: 34:e6:98:72:68:a5:25:c2:74:37:e5:56:06:8f:03: 09:a3:38:59:a7:e2:90:44:89:0a:9a:99:96:23:d2: 4c:f0:6b:36:6b:59:92:a9:3e:23:60:ab:ea:d7:3f: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:40:C6:38:3A:25:02:03:1A:FA:A6:79:0C:C9:07:76:6A:25:BA X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:39:6a:5e:e3:0d:a3:d8:fe:2a:7a:66:c9:d9:2b:f8:25:41: fb:3b:a8:63:39:89:8d:66:1a:85:b9:6d:74:14:cc:b9:67:f3: bf:57:81:db:c1:dd:86:c5:bf:4b:c3:cd:53:41:bb:7b:38:d8: 36:18:3f:61:80:1d:a6:d0:e8:b3:d3:22:c9:26:26:43:62:a4: f0:7c:b5:14:71:79:3e:13:d8:83:90:55:2b:7e:7c:6f:9e:6c: b2:7d:33:96:68:9a:2f:5f:cd:e3:b9:70:ce:af:a7:01:94:20: 0d:1e:d6:de:0a:2f:91:bb:d8:97:24:05:13:b3:d7:94:d5:de: a1:33:35:48:1a:f7:5d:0a:66:1b:27:47:5c:43:b2:19:63:bd: 39:70:79:71:f6:27:52:62:a2:76:0b:5c:a7:83:d9:48:73:43: ec:40:19:a1:69:aa:bd:49:2f:03:4f:20:40:83:a8:34:12:74: 4b:74:7e:c3:ae:65:ef:90:c2:9b:c5:3b:af:53:69:cc:c5:71: a6:56:ab:ac:bb:66:0a:b7:17:30:0d:bd:75:32:78:bb:42:3e: fd:0c:97:48:bf:51:e1:c1:c0:af:d2:95:4d:6e:7b:3d:2d:98: 21:f5:91:b8:0c:7e:e8:77:6f:d6:ec:85:e8:a2:01:69:90:14: 82:2d:66:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUxMTA0MjIzNTAyWhcNMjUxMTExMjIzNTAyWjAYMRYwFAYD VQQDEw02OTBhN2Y5Ni04YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7twvHuwVurHHi1bl7Bdsm8wSpSk3sDv1nK3CnVXMAUzqT76CsErHHhSX5kzJ oQecDqJq960QWxEYupouUI5+1BU0QKRGJyJMuCwvkc+C6jKmz6ua0UWPbSSW3AO5 /v02PskWmUOW13WoyZnbDJ1K4VXKsSzIfTdun1Mgwn+QCeq8JKmpm2Jk1XMNa7qP wvfCCE1qfX3lZsC8bCqmx8RwZRaVYPj8vMxc9ZqHHoZD4X+lb28pn+W0k3iUJMyB x30EBMcXXDbrtls0GvvX1xlhjYM05phyaKUlwnQ35VYGjwMJozhZp+KQRIkKmpmW I9JM8Gs2a1mSqT4jYKvq1z95cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw8QMY4 OiUCAxr6pnkMyQd2aiW6MB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOWpe4w2j2P4qembJ2Sv4JUH7O6hjOYmNZhqFuW10FMy5Z/O/V4Hb wd2Gxb9Lw81TQbt7ONg2GD9hgB2m0Oiz0yLJJiZDYqTwfLUUcXk+E9iDkFUrfnxv nmyyfTOWaJovX83juXDOr6cBlCANHtbeCi+Ru9iXJAUTs9eU1d6hMzVIGvddCmYb J0dcQ7IZY705cHlx9idSYqJ2C1yng9lIc0PsQBmhaaq9SS8DTyBAg6g0EnRLdH7D rmXvkMKbxTuvU2nMxXGmVqusu2YKtxcwDb11Mni7Qj79DJdIv1HhwcCv0pVNbns9 LZgh9ZG4DH7od2/W7IXoogFpkBSCLWb2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:23 2025 by rpki-client