$ rpki-client -vvf rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft File: oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft (raw, json) Hash identifier: XZZtWG/c1px6YjIY3yvA15rEVOLyaQ9Ysa0S0USKsEg= Subject key identifier: CF:C4:B2:AF:22:81:0F:79:A7:0B:A8:B4:7A:33:AF:83:8A:1C:55:F0 Authority key identifier: A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 Certificate issuer: /CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft Manifest number: 0197 Signing time: Wed 05 Nov 2025 03:31:24 +0000 Manifest this update: Wed 05 Nov 2025 03:31:23 +0000 Manifest next update: Wed 12 Nov 2025 03:31:23 +0000 Files and hashes: 1: oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl (hash: VrvmOQs8ejoh77G3fD7cvAnMu1ZH3zlHxGdkAoU9hMI=) 2: E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa (hash: 5JFgGi1zcqLdr4l1Ei+0uqRhphNnP2rP0bMb+qfmJXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AAA1, serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Validity Not Before: Nov 5 03:31:23 2025 GMT Not After : Nov 12 03:31:23 2025 GMT Subject: CN=690ac50c-7cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b9:3a:b7:56:98:f0:b9:e1:f8:f7:e2:e7:12: d5:cc:5a:8f:ab:7f:3e:82:69:d6:86:3b:cd:f8:8e: c0:2f:6b:47:d6:8f:06:f6:7c:97:29:46:40:b1:1e: e5:ff:7b:cd:5b:ba:2c:cb:5a:f2:bf:8b:d7:87:cd: 4a:fa:98:70:73:e6:4e:7a:8c:ad:58:e8:37:e4:23: 98:f0:37:d9:a3:02:0c:d6:3e:83:fe:8f:e8:ec:13: e1:3a:fc:a9:72:cb:94:d1:97:bc:d1:6c:bf:b0:00: 84:22:ff:45:b7:88:f0:c7:f5:c3:fa:95:54:2a:fa: ae:ab:83:ca:e1:d5:6f:37:84:79:05:93:a9:3d:b6: 1f:24:98:cb:f7:65:ba:25:e0:1a:5d:76:f9:d2:25: cc:4a:eb:5b:49:d2:76:88:e6:d4:4a:53:ae:17:7b: 99:5c:97:37:82:d8:bf:78:eb:69:ba:54:fe:87:94: e0:78:5b:8d:ad:cc:40:38:aa:02:ec:18:c5:c0:45: 80:7c:cc:93:e3:be:9c:b6:55:9f:6c:d8:15:24:6a: 4e:e2:aa:62:9a:fa:32:38:48:a6:61:0d:6c:74:5a: 3c:4f:b3:c7:ba:ac:fc:99:40:2d:9a:79:c3:de:5d: 29:96:5e:58:24:f0:aa:a8:c0:8c:07:ef:60:40:22: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:B2:AF:22:81:0F:79:A7:0B:A8:B4:7A:33:AF:83:8A:1C:55:F0 X509v3 Authority Key Identifier: keyid:A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9a:8f:f9:aa:77:f5:60:a2:3b:96:2b:13:e7:40:6f:d9:85: 5e:a3:f8:3f:6d:ff:ce:54:c9:53:e4:9d:a2:ee:d4:be:88:ec: ae:17:4b:31:d5:9c:e3:bf:f7:93:1d:b3:ac:37:8f:fc:c5:2e: cb:23:42:4c:cf:71:ad:91:8c:0a:0f:75:43:b0:04:aa:b2:55: dd:c1:0b:71:3b:12:19:f3:6b:2e:64:50:0a:f6:3d:e4:95:4d: 0a:ed:29:b4:24:53:62:c1:de:48:49:d2:11:7c:26:ef:7f:68: 5b:0a:28:f9:7e:4d:ee:98:e7:38:f0:d8:96:b7:40:1c:cb:1e: a3:db:0a:65:25:25:1d:e6:85:d7:a2:1a:5a:90:d1:68:01:de: 3f:3f:cf:7b:f6:e0:91:26:4d:87:8d:49:8c:56:16:52:cc:b9: 6d:0a:fa:67:4d:95:59:98:cf:43:fd:52:4c:cf:04:d7:0b:cc: 33:d9:3d:67:6c:f7:00:ac:50:11:10:26:fa:89:a9:74:20:c7: 3d:40:1a:1f:5f:75:00:79:3e:f1:6d:76:fd:63:5a:5b:a3:b3: 2b:b3:6c:a5:b3:80:d7:5f:2b:c4:33:ba:28:80:8e:6c:b3:a1: 66:88:8f:2f:2e:70:e3:89:a8:2c:df:ac:4b:eb:03:a3:af:92: 81:52:8c:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQTExMTAvBgNVBAUTKEEyREEzNjM3RDMyNTNGODk5N0Q4OEQwQkQ4REE5NTk4 Rjc4M0Y5OTEwHhcNMjUxMTA1MDMzMTIzWhcNMjUxMTEyMDMzMTIzWjAYMRYwFAYD VQQDEw02OTBhYzUwYy03Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bk6t1aY8Lnh+Pfi5xLVzFqPq38+gmnWhjvN+I7AL2tH1o8G9nyXKUZAsR7l /3vNW7osy1ryv4vXh81K+phwc+ZOeoytWOg35COY8DfZowIM1j6D/o/o7BPhOvyp csuU0Ze80Wy/sACEIv9Ft4jwx/XD+pVUKvquq4PK4dVvN4R5BZOpPbYfJJjL92W6 JeAaXXb50iXMSutbSdJ2iObUSlOuF3uZXJc3gti/eOtpulT+h5TgeFuNrcxAOKoC 7BjFwEWAfMyT476ctlWfbNgVJGpO4qpimvoyOEimYQ1sdFo8T7PHuqz8mUAtmnnD 3l0pll5YJPCqqMCMB+9gQCIUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/Esq8i gQ95pwuotHozr4OKHFXwMB8GA1UdIwQYMBaAFKLaNjfTJT+Jl9iNC9jalZj3g/mR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFBMS84MTE0Qzc5QzQ4 NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0bVgySTBMMk5xVm1QZUQt WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290bzJOOU1sUDRtWDJJMEwyTnFWbVBlRC1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFBMS84MTE0Qzc5QzQ4NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0 bVgySTBMMk5xVm1QZUQtWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmo/5qnf1YKI7lisT50Bv2YVeo/g/bf/OVMlT5J2i7tS+iOyuF0sx 1Zzjv/eTHbOsN4/8xS7LI0JMz3GtkYwKD3VDsASqslXdwQtxOxIZ82suZFAK9j3k lU0K7Sm0JFNiwd5ISdIRfCbvf2hbCij5fk3umOc48NiWt0Acyx6j2wplJSUd5oXX ohpakNFoAd4/P8979uCRJk2HjUmMVhZSzLltCvpnTZVZmM9D/VJMzwTXC8wz2T1n bPcArFARECb6ial0IMc9QBofX3UAeT7xbXb9Y1pbo7Mrs2yls4DXXyvEM7oogI5s s6FmiI8vLnDjiags36xL6wOjr5KBUowo -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:11 2025 by rpki-client