$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: jxsHoYUvFNwt9Zzk5ruTFOABbIAblbNi2KBWNzzy1N0= Subject key identifier: 03:50:8C:29:57:BF:0E:24:57:B9:1F:87:D3:8B:0F:A0:9D:AF:91:96 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 020D Signing time: Mon 03 Nov 2025 02:16:38 +0000 Manifest this update: Mon 03 Nov 2025 02:16:37 +0000 Manifest next update: Mon 10 Nov 2025 02:16:37 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: HtUh/jIuc2Kiog5Em7XnyrLKiTBYIowb6kNM/vPkYnQ=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Nov 3 02:16:37 2025 GMT Not After : Nov 10 02:16:37 2025 GMT Subject: CN=69081086-5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:c6:cd:88:5b:fd:8a:ff:dd:3f:04:0e:65: 2d:48:73:ba:e0:40:0b:be:b5:ed:ac:06:08:58:40: ab:1f:42:34:fa:c5:9d:f4:67:d7:e7:dc:04:f6:0f: 95:1f:06:3c:a1:24:25:4f:b1:2c:4c:f6:f1:5f:7d: 7d:26:aa:d6:4f:a5:96:c8:52:1f:16:52:bb:1a:37: d2:c8:1d:c9:82:4b:f1:42:04:6a:96:59:06:c8:eb: 7b:c2:f4:1d:aa:96:26:39:ce:fe:d6:ac:fe:fa:57: 40:21:82:a9:96:c1:f7:17:52:a8:6f:b3:e3:22:a2: 34:55:29:cc:15:55:4c:d9:36:3f:8e:65:25:79:d6: 5e:6a:0c:c5:17:a4:ad:57:6e:07:6b:7b:16:e1:a0: 62:4c:23:34:d3:9b:7c:1b:2c:b6:be:60:fd:6a:81: 9a:c0:96:bd:44:07:bb:b3:1a:cd:25:d6:f4:cf:ea: 11:04:e9:b7:a9:b8:22:4f:9a:fb:69:af:ab:ef:1c: 3d:c1:08:b9:34:4f:f9:d2:4e:33:37:60:64:9c:2e: b8:55:f6:7f:31:ff:e6:47:82:76:af:6f:cc:87:b0: 66:09:8a:46:46:44:02:07:73:e4:5b:9c:64:9d:16: a5:8d:e7:e8:e4:9b:f9:2e:9b:b7:61:d7:30:fc:95: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:8C:29:57:BF:0E:24:57:B9:1F:87:D3:8B:0F:A0:9D:AF:91:96 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a5:ec:7b:7a:d6:53:9b:35:5e:98:b0:b9:79:80:97:d8:53: 00:6a:03:34:b1:f4:db:16:12:80:d5:c3:6b:dc:f4:3d:d5:8e: f1:a3:2f:fd:4a:61:fc:4c:98:b7:03:9e:c8:56:d1:6f:eb:1a: 35:d9:2b:7e:be:00:1c:6a:ef:0e:eb:58:d7:da:04:89:18:b1: 3f:03:c0:a3:81:ed:39:9f:65:50:85:d9:81:1d:7f:14:fa:4e: c8:92:a8:2c:40:fc:a7:25:75:19:1c:9e:93:26:11:7c:35:bb: a0:5b:36:30:4e:46:9d:46:03:4d:1f:62:24:c0:30:26:b4:cc: 97:99:32:de:da:3d:c3:34:98:78:f7:67:44:95:40:20:2a:5e: 02:4f:93:0f:b3:8b:b9:dc:37:d3:4c:a6:fe:0e:ca:26:57:ec: 2e:b3:5c:0f:2f:47:d4:d4:31:13:56:a2:4f:25:1c:cb:e8:66: 10:00:a0:a7:ba:26:99:3f:c5:95:1c:4f:ab:04:f4:14:78:12: 33:f2:19:cf:19:92:81:7c:09:27:2d:d8:e0:b1:1c:c0:5e:ee: 6c:a3:84:14:75:75:99:47:ab:dc:fb:db:5e:cf:84:fc:fa:11: 59:ed:4d:2c:fe:ae:f8:78:96:c7:76:2f:ec:e5:56:5a:5f:7f: d5:e8:f2:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUxMTAzMDIxNjM3WhcNMjUxMTEwMDIxNjM3WjAYMRYwFAYD VQQDEw02OTA4MTA4Ni01ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa/GzYhb/Yr/3T8EDmUtSHO64EALvrXtrAYIWECrH0I0+sWd9GfX59wE9g+V HwY8oSQlT7EsTPbxX319JqrWT6WWyFIfFlK7GjfSyB3JgkvxQgRqllkGyOt7wvQd qpYmOc7+1qz++ldAIYKplsH3F1Kob7PjIqI0VSnMFVVM2TY/jmUledZeagzFF6St V24Ha3sW4aBiTCM005t8Gyy2vmD9aoGawJa9RAe7sxrNJdb0z+oRBOm3qbgiT5r7 aa+r7xw9wQi5NE/50k4zN2BknC64VfZ/Mf/mR4J2r2/Mh7BmCYpGRkQCB3PkW5xk nRaljefo5Jv5Lpu3Ydcw/JX51QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANQjClX vw4kV7kfh9OLD6Cdr5GWMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEpex7etZTmzVemLC5eYCX2FMAagM0sfTbFhKA1cNr3PQ91Y7xoy/9 SmH8TJi3A57IVtFv6xo12St+vgAcau8O61jX2gSJGLE/A8Cjge05n2VQhdmBHX8U +k7IkqgsQPynJXUZHJ6TJhF8NbugWzYwTkadRgNNH2IkwDAmtMyXmTLe2j3DNJh4 92dElUAgKl4CT5MPs4u53DfTTKb+DsomV+wus1wPL0fU1DETVqJPJRzL6GYQAKCn uiaZP8WVHE+rBPQUeBIz8hnPGZKBfAknLdjgsRzAXu5so4QUdXWZR6vc+9tez4T8 +hFZ7U0s/q74eJbHdi/s5VZaX3/V6PLK -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:02 2025 by rpki-client