$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: L6zhR4QXea3ISF7yMJhxywO7cgPRFag0QKCeaR+u/SM= Subject key identifier: 37:25:F3:68:44:7B:AC:1C:65:EB:D3:4E:BA:C9:80:F4:BE:4E:77:76 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 243A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 60A0 Signing time: Tue 04 Nov 2025 14:15:18 +0000 Manifest this update: Tue 04 Nov 2025 14:15:17 +0000 Manifest next update: Tue 11 Nov 2025 14:15:17 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: YzWdt3QwafXyBrGSitPKCJu33qbTBJemsXY3tCLyeeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9274 (0x243a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Nov 4 14:15:17 2025 GMT Not After : Nov 11 14:15:17 2025 GMT Subject: CN=690a0a76-2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:4f:d9:19:41:e0:6b:eb:fd:20:8d:19:b4: 6d:ff:d1:92:81:b1:9b:46:4b:0f:71:af:77:ab:44: 53:9b:0e:b2:90:2e:6d:fd:df:3b:b2:8e:7e:0a:44: 11:3a:3a:10:8f:66:cd:d6:46:a5:b8:3a:6d:93:9f: 0f:84:23:98:67:7b:d7:5d:66:d8:bb:e0:f5:3a:41: 07:45:67:88:26:7a:e3:80:23:80:4f:2c:3a:fd:d9: 69:f2:26:8e:ae:08:bf:83:10:98:ad:44:f5:bd:d2: a9:16:23:83:6f:f8:2a:fc:90:d2:9e:ee:51:99:02: 1e:dd:b6:e5:3c:6a:cb:94:4e:33:b3:88:65:34:b0: d8:ed:bd:00:56:32:57:e3:a8:61:f7:c3:ed:81:07: 29:6f:d0:44:21:c7:2d:4d:44:c1:d0:0f:39:52:35: ab:11:80:0a:0d:f4:96:ed:8a:e4:5d:3b:44:12:75: a5:d6:ce:16:de:30:a9:ea:1f:59:6a:ff:4e:49:ff: 34:11:9b:ad:81:31:10:8b:d1:02:dd:92:4b:5a:ad: e1:29:3f:e7:69:fb:2a:c8:f7:24:e0:96:67:17:c5: 7f:09:39:e4:9b:d4:ce:ec:22:39:22:55:b4:d9:60: 7c:ae:da:ad:82:d1:89:d9:a9:ab:4a:76:0b:09:95: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:F3:68:44:7B:AC:1C:65:EB:D3:4E:BA:C9:80:F4:BE:4E:77:76 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ab:74:fc:b8:53:37:58:f8:1b:6d:0b:13:a3:ac:03:ec:68: 7b:40:a4:17:a0:b7:44:50:fd:6d:4f:6f:c9:e0:41:15:11:12: 1f:e5:40:06:9c:e7:6a:68:82:7b:5a:ef:c5:26:96:df:5a:99: 9c:ef:7a:d1:ee:64:e3:9e:fc:37:11:b2:4e:5c:af:d0:91:e7: a1:a9:5b:97:c0:4d:58:d3:54:7f:60:88:02:b5:d2:4a:a3:61: a4:23:00:8a:f0:2a:52:19:93:68:ea:fc:a8:d6:73:78:3f:45: 3a:9e:b8:a3:83:9a:95:ef:ce:3e:43:0a:0d:a7:0d:45:55:4f: 6b:ad:fc:ba:e2:a9:80:03:cf:c2:43:d3:be:3d:82:df:8b:cf: d5:ed:d9:63:9a:af:8c:2b:7e:17:2a:fe:29:cd:7f:29:50:9e: e0:f8:d8:58:54:aa:3f:8c:bd:fb:de:dd:1f:7d:9b:90:06:94: d8:29:40:15:43:c3:d4:89:e7:41:b6:97:9d:46:fd:ef:d7:6c: 7f:b1:47:f0:2f:9a:bb:c9:cc:43:68:9f:71:0c:05:9e:e7:eb: 20:c9:85:1b:b6:34:e8:42:b1:64:d1:0c:18:b1:bd:a4:d7:f4: cb:9b:0b:06:4c:db:3e:1d:d1:33:28:e5:0c:af:49:6d:e6:82: 48:ba:1b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUxMTA0MTQxNTE3WhcNMjUxMTExMTQxNTE3WjAYMRYwFAYD VQQDEw02OTBhMGE3Ni0yYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW5P2RlB4Gvr/SCNGbRt/9GSgbGbRksPca93q0RTmw6ykC5t/d87so5+CkQR OjoQj2bN1kaluDptk58PhCOYZ3vXXWbYu+D1OkEHRWeIJnrjgCOATyw6/dlp8iaO rgi/gxCYrUT1vdKpFiODb/gq/JDSnu5RmQIe3bblPGrLlE4zs4hlNLDY7b0AVjJX 46hh98PtgQcpb9BEIcctTUTB0A85UjWrEYAKDfSW7YrkXTtEEnWl1s4W3jCp6h9Z av9OSf80EZutgTEQi9EC3ZJLWq3hKT/nafsqyPck4JZnF8V/CTnkm9TO7CI5IlW0 2WB8rtqtgtGJ2amrSnYLCZVkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcl82hE e6wcZevTTrrJgPS+Tnd2MB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+q3T8uFM3WPgbbQsTo6wD7Gh7QKQXoLdEUP1tT2/J4EEVERIf5UAG nOdqaIJ7Wu/FJpbfWpmc73rR7mTjnvw3EbJOXK/QkeehqVuXwE1Y01R/YIgCtdJK o2GkIwCK8CpSGZNo6vyo1nN4P0U6nrijg5qV784+QwoNpw1FVU9rrfy64qmAA8/C Q9O+PYLfi8/V7dljmq+MK34XKv4pzX8pUJ7g+NhYVKo/jL373t0ffZuQBpTYKUAV Q8PUiedBtpedRv3v12x/sUfwL5q7ycxDaJ9xDAWe5+sgyYUbtjToQrFk0QwYsb2k 1/TLmwsGTNs+HdEzKOUMr0lt5oJIuhvz -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:55 2025 by rpki-client