$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft File: OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json) Hash identifier: bpZ7KcSBsQJl3CmmFvxVbc31yVIBI2N7lAOH423ut6Y= Subject key identifier: 72:6F:9F:A2:D6:E4:75:BD:DE:84:B2:43:03:DB:98:AA:0E:08:B0:D7 Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 Certificate issuer: /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft Manifest number: 01FA Signing time: Wed 05 Nov 2025 02:32:53 +0000 Manifest this update: Wed 05 Nov 2025 02:32:53 +0000 Manifest next update: Wed 12 Nov 2025 02:32:53 +0000 Files and hashes: 1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: hRCsmtqcZx4HZoIqdo8RvOxWY8li59H0cCC6pExlj1U=) 2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: KiSgunw3k37SA5qIOSFD0yKCbhYgrY4Gzd+tIVRajoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Validity Not Before: Nov 5 02:32:53 2025 GMT Not After : Nov 12 02:32:53 2025 GMT Subject: CN=690ab755-6d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:63:0e:88:05:1e:b4:26:2e:12:1b:be:a7:c9: 47:64:61:1a:ad:d3:c7:6a:e7:69:c0:31:a5:89:9b: 6b:e9:5d:09:59:94:26:40:14:a3:8b:25:64:8d:57: 0b:36:22:cb:2f:a5:84:d3:39:a8:fe:1e:8e:2e:43: 0e:bf:30:2c:3c:66:f2:e8:45:84:61:b5:b1:a4:cc: 80:58:41:25:6a:79:4a:36:e6:29:d2:c2:f1:ec:d8: 28:d7:86:44:66:a2:80:59:9d:81:ac:b6:52:a6:38: 2b:c4:fe:8b:ba:18:92:c8:a8:68:9b:57:5e:e7:69: 94:0c:ed:b4:eb:d0:7f:60:f9:b0:4a:ca:be:a4:02: ba:0a:bb:b4:6b:55:e1:0a:5d:b3:0e:da:8a:a7:05: 9d:bc:f9:40:06:42:c8:63:a7:46:a1:29:dd:5b:17: b6:16:ab:98:b6:74:77:e5:a8:af:1d:dd:0f:da:7d: 66:3d:f9:36:21:da:6e:75:23:1a:21:2c:5a:1f:a4: 11:3a:d2:ba:09:ab:7c:bd:76:51:e6:a9:0c:d5:16: 25:5f:ab:9a:38:f3:c7:dc:6c:d0:3f:fd:3e:9c:65: a5:a6:a7:58:6b:65:eb:ab:ed:2c:51:2d:b6:ad:d4: da:9d:60:ee:7e:e8:78:2c:fd:38:43:dd:28:a1:82: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6F:9F:A2:D6:E4:75:BD:DE:84:B2:43:03:DB:98:AA:0E:08:B0:D7 X509v3 Authority Key Identifier: keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1d:8d:28:95:36:4d:31:7e:f8:da:2f:17:3c:d9:ce:47:04: 74:f4:e3:5a:61:6f:03:5a:0e:fa:0c:14:10:8d:72:10:ab:b9: d8:df:84:bc:e0:80:1d:03:b2:c3:fe:63:01:26:b3:cf:6d:58: 55:f7:03:87:c1:15:39:97:f2:b4:5b:9c:ed:d3:87:41:cd:9d: 62:b4:00:62:e8:8c:fa:38:6d:72:ad:8d:c4:f9:25:c7:ff:99: 9d:ba:66:eb:37:24:f6:bd:7f:f1:a6:2e:5e:c2:d1:1c:52:d6: d3:48:09:82:9e:28:2f:84:42:37:35:55:04:39:dc:b0:f3:ad: fe:47:41:08:0a:b6:e9:4b:43:8c:70:09:d4:d7:d0:c7:2a:d1: f6:91:e8:d4:ed:ea:5c:86:58:c4:4e:f1:25:47:78:23:78:bd: 9d:76:49:2f:3e:5c:65:e1:71:1f:13:b4:54:46:a8:4e:9b:50: bc:98:49:dd:27:fd:18:c7:15:96:fe:ee:2c:09:59:65:31:e4: 75:42:85:7a:1e:24:d4:de:09:24:99:2b:25:0b:83:b1:73:b1: 7c:a1:e6:1e:dd:ac:c2:f1:26:a7:81:c9:8c:d2:36:6d:c6:6a: ac:0e:33:40:ac:bc:ab:5a:07:28:60:7f:4e:9f:52:24:4c:8c: 5c:66:b3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMTgxMTAvBgNVBAUTKDNBRjlFQ0JDNDVFNEUyOTdEMjlCQTZDNDExRjFBMDVD OEI5REE5RTMwHhcNMjUxMTA1MDIzMjUzWhcNMjUxMTEyMDIzMjUzWjAYMRYwFAYD VQQDEw02OTBhYjc1NS02ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9WMOiAUetCYuEhu+p8lHZGEardPHaudpwDGliZtr6V0JWZQmQBSjiyVkjVcL NiLLL6WE0zmo/h6OLkMOvzAsPGby6EWEYbWxpMyAWEElanlKNuYp0sLx7Ngo14ZE ZqKAWZ2BrLZSpjgrxP6LuhiSyKhom1de52mUDO2069B/YPmwSsq+pAK6Cru0a1Xh Cl2zDtqKpwWdvPlABkLIY6dGoSndWxe2FquYtnR35aivHd0P2n1mPfk2IdpudSMa ISxaH6QROtK6Cat8vXZR5qkM1RYlX6uaOPPH3GzQP/0+nGWlpqdYa2Xrq+0sUS22 rdTanWDufuh4LP04Q90ooYIm1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJvn6LW 5HW93oSyQwPbmKoOCLDXMB8GA1UdIwQYMBaAFDr57LxF5OKX0pumxBHxoFyLnanj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExOC82RDA1OUJCQ0Ix QjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRwZlNtNmJFRWZHZ1hJdWRx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL092bnN2RVhrNHBmU202YkVFZkdnWEl1ZHFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExOC82RDA1OUJCQ0IxQjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRw ZlNtNmJFRWZHZ1hJdWRxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOHY0olTZNMX742i8XPNnORwR09ONaYW8DWg76DBQQjXIQq7nY34S8 4IAdA7LD/mMBJrPPbVhV9wOHwRU5l/K0W5zt04dBzZ1itABi6Iz6OG1yrY3E+SXH /5mdumbrNyT2vX/xpi5ewtEcUtbTSAmCnigvhEI3NVUEOdyw863+R0EICrbpS0OM cAnU19DHKtH2kejU7epchljETvElR3gjeL2ddkkvPlxl4XEfE7RURqhOm1C8mEnd J/0YxxWW/u4sCVllMeR1QoV6HiTU3gkkmSslC4Oxc7F8oeYe3azC8SangcmM0jZt xmqsDjNArLyrWgcoYH9On1IkTIxcZrM2 -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:03 2025 by rpki-client