$ rpki-client -vvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json) Hash identifier: 6H7uFKIqTRnltNGttCucRu5V1IwGMwAWAeQAwYhi1f0= Subject key identifier: E2:B7:EB:93:72:4B:67:9F:B7:D0:C6:BA:42:84:D5:8B:44:7C:9C:F0 Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft Manifest number: 0150 Signing time: Wed 05 Nov 2025 04:20:02 +0000 Manifest this update: Wed 05 Nov 2025 04:20:01 +0000 Manifest next update: Wed 12 Nov 2025 04:20:01 +0000 Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: Sneg7aSu8EK06vspqfEYB5N66EF9zifAzWiCNUsukIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Validity Not Before: Nov 5 04:20:01 2025 GMT Not After : Nov 12 04:20:01 2025 GMT Subject: CN=690ad071-1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d5:16:14:17:ac:60:22:da:24:bc:39:53:ee: 49:14:3f:72:da:92:1a:e9:85:54:10:a3:54:f0:49: c5:02:64:5c:3c:fa:0f:fa:93:00:de:6a:f2:83:09: f9:fd:44:63:73:7a:18:2b:de:68:0f:7c:6a:cd:0d: db:5d:06:b0:10:5d:ec:fb:92:88:a4:f3:04:31:f4: 5a:55:98:49:44:72:ae:da:ec:57:21:de:c4:0d:b3: 38:9a:d6:08:9b:a8:54:3e:3d:d1:e5:5e:c0:e3:a5: 39:b5:0a:58:ac:08:c7:d1:a5:db:58:e7:bc:54:dc: e5:98:11:ad:c5:ef:3b:d5:4b:00:a0:ac:f1:f7:db: ea:b1:22:cd:46:f7:65:7a:f7:e3:a0:a3:0b:ad:e0: 58:20:1e:ec:73:dd:ca:1f:e9:e8:f3:42:bf:d7:f5: 93:28:c7:99:cd:fa:f5:6e:ca:1d:11:32:96:69:d4: d3:c3:19:b8:6b:e1:37:7e:35:c5:04:e2:67:2b:0f: 36:8f:e6:7b:6d:43:ed:6f:ba:14:c5:68:8c:a8:29: 39:7e:26:89:22:59:ae:60:b3:8c:8f:42:50:74:06: 3a:5f:bf:8b:d2:4c:55:b9:bb:30:c0:9f:83:93:89: 72:cf:64:7f:dd:bc:b3:24:03:e8:e3:37:e5:6e:dd: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:EB:93:72:4B:67:9F:B7:D0:C6:BA:42:84:D5:8B:44:7C:9C:F0 X509v3 Authority Key Identifier: keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cb:95:81:22:63:28:39:55:41:e8:b3:d8:c9:af:85:46:c0: 71:fc:3f:e3:c1:2f:ed:56:ba:aa:ac:ad:72:39:a9:c4:59:52: 4d:16:03:66:e4:6a:ab:49:2c:bd:f8:67:26:57:b7:b9:59:8e: 88:53:d6:91:24:db:bd:7a:71:ff:69:75:d8:aa:2a:d8:35:b4: de:e7:c6:6e:bb:35:33:5e:fd:e9:d1:50:4c:08:a9:0f:d4:ee: 94:bb:bf:79:be:a0:25:94:c6:0a:0b:9a:4b:1a:4c:7a:a9:65: d5:3a:e1:c8:28:a9:59:f7:2f:6c:8d:52:30:ae:82:70:6b:55: ca:10:ba:04:8a:4a:4e:97:2c:1f:0c:5a:63:06:10:42:3e:89: f3:c8:29:de:70:4f:33:d2:6d:f4:04:b3:07:02:4d:ad:44:e8: 2b:15:a0:49:e4:1b:b1:b6:77:66:06:9c:5b:2a:01:19:7d:3f: 1a:9a:98:da:da:01:9c:9d:d0:2b:d5:89:e7:28:42:ac:ae:43: 39:9d:b8:07:48:46:26:b5:6f:a0:82:32:cd:7d:27:22:17:54: b0:ea:18:5c:70:67:7f:2a:1d:aa:b4:65:3a:6f:d2:92:9a:a9: 5c:85:3f:bf:e9:98:15:d4:ea:bf:73:a1:65:50:09:d9:03:e8: 59:67:8c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC ODk0MjlFRjUwHhcNMjUxMTA1MDQyMDAxWhcNMjUxMTEyMDQyMDAxWjAYMRYwFAYD VQQDEw02OTBhZDA3MS0xYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tUWFBesYCLaJLw5U+5JFD9y2pIa6YVUEKNU8EnFAmRcPPoP+pMA3mrygwn5 /URjc3oYK95oD3xqzQ3bXQawEF3s+5KIpPMEMfRaVZhJRHKu2uxXId7EDbM4mtYI m6hUPj3R5V7A46U5tQpYrAjH0aXbWOe8VNzlmBGtxe871UsAoKzx99vqsSLNRvdl evfjoKMLreBYIB7sc93KH+no80K/1/WTKMeZzfr1bsodETKWadTTwxm4a+E3fjXF BOJnKw82j+Z7bUPtb7oUxWiMqCk5fiaJIlmuYLOMj0JQdAY6X7+L0kxVubswwJ+D k4lyz2R/3byzJAPo4zflbt3JXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK365Ny S2eft9DGukKE1YtEfJzwMB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0 QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY MGxmVkd4VF9YRFc0bENudlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEy5WBImMoOVVB6LPYya+FRsBx/D/jwS/tVrqqrK1yOanEWVJNFgNm 5GqrSSy9+GcmV7e5WY6IU9aRJNu9enH/aXXYqirYNbTe58ZuuzUzXv3p0VBMCKkP 1O6Uu795vqAllMYKC5pLGkx6qWXVOuHIKKlZ9y9sjVIwroJwa1XKELoEikpOlywf DFpjBhBCPonzyCnecE8z0m30BLMHAk2tROgrFaBJ5BuxtndmBpxbKgEZfT8ampja 2gGcndAr1YnnKEKsrkM5nbgHSEYmtW+ggjLNfSciF1Sw6hhccGd/Kh2qtGU6b9KS mqlchT+/6ZgV1Oq/c6FlUAnZA+hZZ4w4 -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:05 2025 by rpki-client