$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: foexeI5phs/zycOznRTE8vLd/Ha24h57dg62h9g7NXk= Subject key identifier: 74:27:99:AF:F8:B6:97:BC:B6:08:BB:BD:19:70:28:86:3B:FA:65:0E Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 0861 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 0859 Signing time: Tue 04 Nov 2025 20:43:48 +0000 Manifest this update: Tue 04 Nov 2025 20:43:48 +0000 Manifest next update: Tue 11 Nov 2025 20:43:48 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: FOH26JoLXDjP2/c7d8oHxeL+e1ysjhpoLdXQeZUj8zM=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: +rqRhoF7M98jyOj7ilINYsh86Lj18TGDOqtK2wOwgR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2145 (0x861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Nov 4 20:43:48 2025 GMT Not After : Nov 11 20:43:48 2025 GMT Subject: CN=690a6584-dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:33:19:1f:2a:27:a0:3e:80:6c:be:13:2f: 48:cc:56:41:d3:36:4f:d6:c3:cc:9a:f9:a4:b8:b6: 57:69:21:42:54:61:ed:0f:ea:e3:0c:22:84:4a:78: 99:64:f1:ac:aa:d3:c3:41:ef:80:50:09:fb:39:1b: f5:44:d9:74:a1:b5:8b:d1:a5:2e:fa:e1:73:91:a1: 09:d0:d4:df:44:30:9b:e9:1f:bc:b4:f7:fc:b7:4c: b8:83:90:d3:c0:01:b9:5a:bb:cb:c0:88:d8:03:3f: a5:04:1b:2b:58:b0:ab:2d:83:c7:3f:d0:34:d5:27: f4:7c:86:d6:b3:f8:81:4d:09:03:b8:d0:ce:10:0e: 36:a4:12:36:6c:f9:33:e4:b9:58:2c:36:e8:c5:75: e3:83:3a:49:63:f7:39:08:5f:60:f9:ef:26:c0:82: e5:54:56:9d:68:36:2c:c8:e9:0b:6b:2e:3a:30:87: b0:3b:d3:78:ee:c1:8a:aa:63:a3:12:51:71:cb:73: 99:ed:92:f9:05:bb:06:c7:4d:96:3e:46:b3:bc:55: e4:0a:8f:32:37:57:e0:08:d7:b9:2e:a5:48:8c:c1: e1:3e:b8:03:93:c3:d9:ab:49:ff:0a:80:69:ad:2b: 92:13:bc:73:68:f5:99:46:c0:28:ec:3e:60:a1:82: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:99:AF:F8:B6:97:BC:B6:08:BB:BD:19:70:28:86:3B:FA:65:0E X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:23:51:aa:aa:72:ec:08:e5:ac:58:9c:6f:aa:0c:20:60:a1: f5:4e:d0:3e:9e:e7:74:c5:59:bc:bc:4a:cd:a6:33:49:37:68: ed:6f:3f:e3:0e:c0:54:fb:5d:a7:c7:79:04:35:7b:92:08:a7: 77:b1:80:46:c4:9c:f1:ed:2a:8f:5f:ec:c1:73:6e:b5:18:2d: 48:32:47:d3:50:c4:ce:13:43:d9:b0:bd:63:a4:a3:bd:d2:10: af:53:f1:90:77:f1:1d:2e:1f:fb:24:ff:10:28:57:0e:f2:60: 10:68:72:bc:5f:e5:c9:52:b2:dd:14:3a:a3:7e:cc:e0:14:81: 8a:2e:08:77:20:00:da:5e:f0:f6:0a:50:01:47:e1:b3:df:f8: 3f:fc:e4:dc:09:99:52:c0:31:2f:c0:50:fa:22:8e:12:c8:24: d9:5d:67:b4:c9:fa:1f:9b:aa:9a:04:a5:17:f0:45:21:0f:85: c0:de:0f:33:1e:b7:4d:be:f8:c3:0d:1d:70:d0:18:56:06:8e: 63:97:49:3a:e9:4b:10:dc:f2:96:87:e1:fe:de:38:22:f5:cd: 67:48:3e:68:fe:22:2c:5b:66:98:00:c0:ba:89:5e:0e:fb:7e: 91:99:e3:16:c2:31:c0:a8:7e:a8:2e:fa:12:7c:f1:8e:c7:83: f8:3b:f8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjUxMTA0MjA0MzQ4WhcNMjUxMTExMjA0MzQ4WjAYMRYwFAYD VQQDEw02OTBhNjU4NC1kZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArawzGR8qJ6A+gGy+Ey9IzFZB0zZP1sPMmvmkuLZXaSFCVGHtD+rjDCKESniZ ZPGsqtPDQe+AUAn7ORv1RNl0obWL0aUu+uFzkaEJ0NTfRDCb6R+8tPf8t0y4g5DT wAG5WrvLwIjYAz+lBBsrWLCrLYPHP9A01Sf0fIbWs/iBTQkDuNDOEA42pBI2bPkz 5LlYLDboxXXjgzpJY/c5CF9g+e8mwILlVFadaDYsyOkLay46MIewO9N47sGKqmOj ElFxy3OZ7ZL5BbsGx02WPkazvFXkCo8yN1fgCNe5LqVIjMHhPrgDk8PZq0n/CoBp rSuSE7xzaPWZRsAo7D5goYK4cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQnma/4 tpe8tgi7vRlwKIY7+mUOMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcI1GqqnLsCOWsWJxvqgwgYKH1TtA+nud0xVm8vErNpjNJN2jtbz/j DsBU+12nx3kENXuSCKd3sYBGxJzx7SqPX+zBc261GC1IMkfTUMTOE0PZsL1jpKO9 0hCvU/GQd/EdLh/7JP8QKFcO8mAQaHK8X+XJUrLdFDqjfszgFIGKLgh3IADaXvD2 ClABR+Gz3/g//OTcCZlSwDEvwFD6Io4SyCTZXWe0yfofm6qaBKUX8EUhD4XA3g8z HrdNvvjDDR1w0BhWBo5jl0k66UsQ3PKWh+H+3jgi9c1nSD5o/iIsW2aYAMC6iV4O +36RmeMWwjHAqH6oLvoSfPGOx4P4O/gV -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:10 2025 by rpki-client