$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: p760VoWAm0nBZeBk5QHKcSoE+xJD0DS+sFRT21SQB1w= Subject key identifier: A5:64:26:0A:8B:B1:33:EF:1C:B6:3C:10:F6:78:FE:6C:0D:04:CD:A4 Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 0154 Signing time: Mon 03 Nov 2025 04:12:00 +0000 Manifest this update: Mon 03 Nov 2025 04:11:59 +0000 Manifest next update: Mon 10 Nov 2025 04:11:59 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: BU9DDEEzQ4QnNowsoIrI2Blp16d2EkbwA4oDgKipjSs=) 2: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: 3pfVChkV7zELWja+oHQv3Km6INJzdWSQS1Y4XK0gQXg=) 3: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: sp0oN6M3b0vKQWiSIdTtVM/z4x+pZK5BNETB2TbgZ2E=) 4: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: ipvSSCsuIB7+MwYDiVzzG4/g5ky54F8EF1XYBBpIM6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Nov 3 04:11:59 2025 GMT Not After : Nov 10 04:11:59 2025 GMT Subject: CN=69082b90-5d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:6f:47:e8:ae:02:fb:fe:7c:28:09:ba:09: b3:5b:fb:47:a8:06:4d:36:e4:d4:44:fe:c5:00:7b: f7:3d:a7:f3:49:21:be:01:56:c2:68:2e:f2:26:3d: a0:07:b3:4f:3b:00:97:4f:36:da:33:47:ee:9a:56: 32:ac:3d:eb:a4:b4:df:10:e9:54:59:54:c7:2c:12: e8:ee:8e:9a:b1:21:c0:f4:e8:93:82:0f:ce:fe:af: 2f:2a:be:c9:dc:9f:10:d8:6b:40:1b:26:46:5f:db: f6:da:b8:34:27:81:ad:74:9b:2c:e1:15:c7:fd:cd: 1b:00:a5:1d:a3:39:67:79:fb:81:cf:1f:9a:b1:6d: de:54:9d:99:26:05:2c:84:ca:62:83:43:16:d4:db: 79:05:6c:cc:90:01:06:12:f0:5d:e7:20:d7:07:e9: 88:4c:11:ea:85:57:23:34:79:83:96:9c:67:bb:4b: 68:d2:db:c9:c4:12:52:ff:9c:c2:a2:f2:cd:a8:ff: 24:73:47:4b:ac:de:81:bc:09:33:78:a3:e0:22:35: 53:86:29:18:02:ac:cd:c3:aa:17:ad:7d:73:09:c2: cf:8c:6a:c8:9e:f8:9d:9e:b5:ef:87:57:cd:13:ab: b7:ea:d3:f1:d5:82:5d:36:41:c8:98:5a:6c:10:2b: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:26:0A:8B:B1:33:EF:1C:B6:3C:10:F6:78:FE:6C:0D:04:CD:A4 X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e2:e8:a1:92:ca:70:a2:be:e8:b5:6a:e1:50:35:a3:4f:eb: fa:3a:6a:d0:b6:d4:ba:f3:82:01:22:e7:5c:fd:92:7f:ca:7b: f9:cc:7a:ee:cc:51:59:89:56:6e:14:34:f4:f4:6e:01:9a:f2: 7a:f3:a1:b9:c4:71:34:4f:cb:b9:c5:43:e7:78:f8:59:b6:25: 07:5c:7c:1d:43:25:f9:55:20:d7:9e:0d:ea:67:ba:d2:04:a8: cf:be:4e:c9:95:b1:a0:06:ff:55:64:aa:60:13:3e:e6:50:ba: 93:b4:0d:29:9b:69:50:f9:c7:95:28:b6:11:92:83:bb:15:4f: 58:0e:0e:b9:1e:5c:7e:17:9d:c7:37:c2:93:e3:76:a8:07:58: 11:2a:b3:d8:bc:7b:f4:0f:51:22:2f:f4:18:6e:bd:e4:cd:a3: 77:7d:d7:8f:c0:72:59:5d:6d:bc:57:85:04:2e:a2:af:c4:f9: 0c:6d:e9:d9:e6:ef:fa:83:36:b7:12:5a:0d:5c:32:bb:5f:e6: da:20:91:b0:5e:4c:f6:f3:49:8b:f7:aa:8d:20:95:b1:b1:47: 0d:ee:c3:3d:99:27:e3:68:cf:fd:95:87:5d:53:0b:54:d2:16: 98:ce:fe:bb:07:f1:85:15:07:f2:3f:58:a3:42:db:a5:c8:dd: a7:54:66:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjUxMTAzMDQxMTU5WhcNMjUxMTEwMDQxMTU5WjAYMRYwFAYD VQQDEw02OTA4MmI5MC01ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uxvR+iuAvv+fCgJugmzW/tHqAZNNuTURP7FAHv3PafzSSG+AVbCaC7yJj2g B7NPOwCXTzbaM0fumlYyrD3rpLTfEOlUWVTHLBLo7o6asSHA9OiTgg/O/q8vKr7J 3J8Q2GtAGyZGX9v22rg0J4GtdJss4RXH/c0bAKUdozlnefuBzx+asW3eVJ2ZJgUs hMpig0MW1Nt5BWzMkAEGEvBd5yDXB+mITBHqhVcjNHmDlpxnu0to0tvJxBJS/5zC ovLNqP8kc0dLrN6BvAkzeKPgIjVThikYAqzNw6oXrX1zCcLPjGrInvidnrXvh1fN E6u36tPx1YJdNkHImFpsECvRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVkJgqL sTPvHLY8EPZ4/mwNBM2kMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC34uihkspwor7otWrhUDWjT+v6OmrQttS684IBIudc/ZJ/ynv5zHru zFFZiVZuFDT09G4BmvJ686G5xHE0T8u5xUPnePhZtiUHXHwdQyX5VSDXng3qZ7rS BKjPvk7JlbGgBv9VZKpgEz7mULqTtA0pm2lQ+ceVKLYRkoO7FU9YDg65Hlx+F53H N8KT43aoB1gRKrPYvHv0D1EiL/QYbr3kzaN3fdePwHJZXW28V4UELqKvxPkMbenZ 5u/6gza3EloNXDK7X+baIJGwXkz280mL96qNIJWxsUcN7sM9mSfjaM/9lYddUwtU 0haYzv67B/GFFQfyP1ijQtulyN2nVGb0 -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:50 2025 by rpki-client