$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json) Hash identifier: UPIsmbLKsqB+VjhhA3cqBiDkxL7hTiyAZ8E5sNbimuI= Subject key identifier: 0C:5A:4E:01:B6:0F:41:B2:FC:11:9B:73:83:A4:BF:07:F6:3D:7A:C9 Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Certificate serial: 107F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft Manifest number: 105D Signing time: Tue 04 Nov 2025 17:29:20 +0000 Manifest this update: Tue 04 Nov 2025 17:29:19 +0000 Manifest next update: Tue 11 Nov 2025 17:29:19 +0000 Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: 123tEcmrm2+eNj15BvCOb4q4OoOWPvWwRztIM8fTbQg=) 2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=) 3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=) 4: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=) 5: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=) 6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4223 (0x107f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Validity Not Before: Nov 4 17:29:19 2025 GMT Not After : Nov 11 17:29:19 2025 GMT Subject: CN=690a37f0-2a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:e0:63:28:a9:c9:31:b9:45:69:7f:85:64: 65:8d:34:82:83:7f:e9:f1:b5:6a:5e:0c:44:e3:c0: 75:b4:82:f1:32:de:ad:05:58:ec:a8:3c:2a:91:f7: ac:74:d6:28:aa:3f:33:92:c3:c5:44:c1:bd:34:0b: c2:17:a3:d1:e2:1a:76:fa:34:3d:6d:01:cc:cb:f5: 31:05:0e:01:29:59:af:f7:d0:83:68:ab:b7:c3:4b: 51:6e:85:57:ba:a5:0c:ea:ba:8c:c4:3f:c4:fb:27: fd:02:43:91:95:8d:b9:21:e5:ef:f7:63:ca:16:ce: 8f:c9:32:6f:c1:61:2d:df:aa:72:ba:c1:bb:d3:52: 33:99:06:85:af:ff:94:d2:50:dd:2b:e0:78:dd:11: 4b:ec:36:ea:37:86:67:6f:03:fd:ca:b0:e7:09:78: 09:be:5a:db:37:9b:36:08:dd:37:0e:5f:fa:34:16: 1a:45:fb:40:06:cb:55:5c:4d:aa:94:bd:62:8b:a3: f8:6d:d0:be:7e:d9:2b:f7:15:cf:2e:e0:86:fd:68: 49:24:aa:a6:51:f6:fe:5f:3f:e9:db:01:71:b8:60: 38:d7:a5:6f:e2:f6:52:01:6d:8a:1b:a2:a8:2f:cf: b9:ca:19:ac:1e:8d:0a:04:30:b7:8e:58:75:59:cf: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5A:4E:01:B6:0F:41:B2:FC:11:9B:73:83:A4:BF:07:F6:3D:7A:C9 X509v3 Authority Key Identifier: keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:fe:35:6c:96:54:95:9c:be:f5:6c:98:c6:bf:2a:9d:2e:8d: 5d:1c:b3:33:d2:8b:33:5a:65:90:0c:8b:4c:b5:12:d9:fd:2d: 5a:f6:7d:db:ca:d0:68:06:5f:9e:79:c5:b1:16:c9:80:a0:7c: 4e:d6:cc:e3:8a:24:f6:a3:46:4b:07:f1:2c:cf:90:c6:20:73: b4:4a:21:6b:46:9c:47:3d:25:76:26:e7:d4:80:db:8f:0a:bb: d7:7e:ac:b4:bb:83:5b:92:13:ba:d9:4e:af:f8:13:07:2e:2d: 3c:89:20:d9:75:46:fb:cd:e3:11:db:48:03:f8:c9:5f:fa:e6: 9d:2a:9b:19:95:0e:dd:fd:ee:b3:8c:5d:8f:29:3d:69:d2:3e: 61:fd:63:36:d1:58:bb:8c:4d:10:c4:c1:dd:64:73:39:3d:48: c5:7f:6f:f1:5c:0d:d9:8d:bb:f9:57:00:c3:aa:ef:2c:c2:b0: 4c:b5:59:b5:01:15:6c:4d:12:34:9f:1a:70:c3:fa:9f:d8:3e: db:bb:6a:5a:ef:95:7f:21:5c:39:1e:c2:96:7c:d4:d2:ed:91: 1e:6d:00:c4:af:86:1f:65:67:71:27:98:18:c4:83:ec:bf:46: 44:0f:57:45:5f:a7:b4:86:67:ae:c9:01:95:64:5b:95:66:b5: 49:f8:0d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG QjA2MDk4OUIwHhcNMjUxMTA0MTcyOTE5WhcNMjUxMTExMTcyOTE5WjAYMRYwFAYD VQQDEw02OTBhMzdmMC0yYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyingYyipyTG5RWl/hWRljTSCg3/p8bVqXgxE48B1tILxMt6tBVjsqDwqkfes dNYoqj8zksPFRMG9NAvCF6PR4hp2+jQ9bQHMy/UxBQ4BKVmv99CDaKu3w0tRboVX uqUM6rqMxD/E+yf9AkORlY25IeXv92PKFs6PyTJvwWEt36pyusG701IzmQaFr/+U 0lDdK+B43RFL7DbqN4ZnbwP9yrDnCXgJvlrbN5s2CN03Dl/6NBYaRftABstVXE2q lL1ii6P4bdC+ftkr9xXPLuCG/WhJJKqmUfb+Xz/p2wFxuGA416Vv4vZSAW2KG6Ko L8+5yhmsHo0KBDC3jlh1Wc+1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxaTgG2 D0Gy/BGbc4Okvwf2PXrJMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2 b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs/jVsllSVnL71bJjGvyqdLo1dHLMz0oszWmWQDItMtRLZ/S1a9n3b ytBoBl+eecWxFsmAoHxO1szjiiT2o0ZLB/Esz5DGIHO0SiFrRpxHPSV2JufUgNuP CrvXfqy0u4NbkhO62U6v+BMHLi08iSDZdUb7zeMR20gD+Mlf+uadKpsZlQ7d/e6z jF2PKT1p0j5h/WM20Vi7jE0QxMHdZHM5PUjFf2/xXA3Zjbv5VwDDqu8swrBMtVm1 ARVsTRI0nxpww/qf2D7bu2pa75V/IVw5HsKWfNTS7ZEebQDEr4YfZWdxJ5gYxIPs v0ZED1dFX6e0hmeuyQGVZFuVZrVJ+A1f -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:30 2025 by rpki-client