$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: aQf/6R9xAM/hFHzMtojOfMADWzhCf2V4csZnz/5QcXs= Subject key identifier: B8:5D:4C:69:7C:A9:46:DA:41:10:79:E0:A5:2A:4A:8A:45:2E:4C:86 Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0AC8 Signing time: Sun 02 Nov 2025 19:44:17 +0000 Manifest this update: Sun 02 Nov 2025 19:44:16 +0000 Manifest next update: Sun 09 Nov 2025 19:44:16 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: 5FdCtjcKaGDZy4YCOe1f+hbmgam+sb2BYUZDYVe+yv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Nov 2 19:44:16 2025 GMT Not After : Nov 9 19:44:16 2025 GMT Subject: CN=6907b490-4f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:9f:82:b5:0b:11:79:e3:40:c2:2c:44:bf: 4c:8f:8f:af:3c:4c:7c:68:1b:cf:6f:96:e8:60:b2: cf:47:d6:41:44:e4:92:28:9c:0f:33:8e:ff:35:35: 7c:32:51:27:d0:8a:4a:82:57:79:c4:00:32:55:bb: 58:8e:8f:27:5b:c6:76:6b:9b:e1:7f:0f:32:ba:79: 3d:fa:9e:24:05:64:d7:49:4d:95:f9:91:13:9f:96: 22:49:23:88:9f:fe:c8:a3:32:ab:c3:64:d7:6b:e0: 70:8e:7d:5d:cd:26:8f:fb:a5:04:02:ae:cb:cb:e0: 94:61:5f:00:9c:5e:cb:b9:45:42:f6:2b:0d:70:4d: e9:5e:e6:c4:9a:f4:8c:9e:18:d0:36:90:42:49:e4: 99:21:99:1c:cc:f4:1b:c8:12:47:9c:bf:2b:fb:fe: db:46:c7:0c:8a:99:c7:c8:21:12:05:8f:71:e6:83: d9:4c:55:f3:88:35:4a:55:7f:1b:f9:d8:09:1e:18: a8:c4:f4:40:6a:9a:8e:3d:6f:11:74:95:7a:6b:92: d9:31:e9:5e:c2:8c:ee:ad:36:41:42:06:a8:00:32: 3b:95:49:fe:35:93:93:ba:d0:b6:99:17:5f:91:54: e4:73:43:00:20:0d:bf:19:57:7b:b5:cb:c6:7b:1f: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5D:4C:69:7C:A9:46:DA:41:10:79:E0:A5:2A:4A:8A:45:2E:4C:86 X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5e:74:e7:cc:0d:f7:f9:cf:b8:a4:f1:f2:fa:a4:ab:88:a9: 8a:bf:b8:3a:ff:53:e3:50:3a:4c:4b:e1:05:68:e5:1b:3a:17: b3:d1:ab:11:50:76:f5:c2:4e:e0:52:d4:cd:dd:f1:32:3a:11: 11:05:93:05:00:b3:ff:5d:88:9e:d9:61:ce:bf:0d:12:11:6b: d9:bc:21:53:43:3e:67:e2:08:b1:3e:73:d4:08:b5:2c:d2:6c: 98:41:83:c2:6d:c1:f2:38:45:e8:fc:a8:55:9d:13:a2:b4:f7: 5a:5f:0e:3e:66:2c:67:4b:99:78:7b:55:3a:6a:df:94:34:5f: 3d:42:56:af:da:20:e0:24:84:60:68:e7:d5:8a:91:47:1c:74: 11:19:4b:26:0d:70:b7:d2:e5:5b:26:08:bd:7f:a6:5e:37:e2: 24:44:a1:14:c0:03:d3:92:6d:1e:35:b5:a5:f3:75:2c:8c:fa: 20:b1:01:e1:d9:d6:7f:1a:e0:7a:c3:9c:7e:63:8b:89:de:fb: 6e:82:79:ca:11:f7:7a:9a:22:30:2c:43:4d:e3:b1:e8:ec:3e: 29:9c:06:cc:2e:1b:2d:bb:41:a9:fe:52:56:f8:71:59:43:f2: 1a:be:e5:ea:da:f9:1c:57:88:99:3b:39:31:f8:01:6c:5a:91: 4d:bb:31:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjUxMTAyMTk0NDE2WhcNMjUxMTA5MTk0NDE2WjAYMRYwFAYD VQQDEw02OTA3YjQ5MC00ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uWfgrULEXnjQMIsRL9Mj4+vPEx8aBvPb5boYLLPR9ZBROSSKJwPM47/NTV8 MlEn0IpKgld5xAAyVbtYjo8nW8Z2a5vhfw8yunk9+p4kBWTXSU2V+ZETn5YiSSOI n/7IozKrw2TXa+Bwjn1dzSaP+6UEAq7Ly+CUYV8AnF7LuUVC9isNcE3pXubEmvSM nhjQNpBCSeSZIZkczPQbyBJHnL8r+/7bRscMipnHyCESBY9x5oPZTFXziDVKVX8b +dgJHhioxPRAapqOPW8RdJV6a5LZMelewozurTZBQgaoADI7lUn+NZOTutC2mRdf kVTkc0MAIA2/GVd7tcvGex9n2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhdTGl8 qUbaQRB54KUqSopFLkyGMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWXnTnzA33+c+4pPHy+qSriKmKv7g6/1PjUDpMS+EFaOUbOhez0asR UHb1wk7gUtTN3fEyOhERBZMFALP/XYie2WHOvw0SEWvZvCFTQz5n4gixPnPUCLUs 0myYQYPCbcHyOEXo/KhVnROitPdaXw4+ZixnS5l4e1U6at+UNF89Qlav2iDgJIRg aOfVipFHHHQRGUsmDXC30uVbJgi9f6ZeN+IkRKEUwAPTkm0eNbWl83UsjPogsQHh 2dZ/GuB6w5x+Y4uJ3vtugnnKEfd6miIwLENN47Ho7D4pnAbMLhstu0Gp/lJW+HFZ Q/IavuXq2vkcV4iZOzkx+AFsWpFNuzF9 -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:54 2025 by rpki-client