$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json) Hash identifier: FVZX70gHdCkjFFIXETaLO9fqntmqSlqTntsEfH6lHjI= Subject key identifier: 7E:09:23:67:03:DB:7E:17:94:F1:1B:2D:4E:53:FB:61:05:94:23:3E Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft Manifest number: 0424 Signing time: Wed 05 Nov 2025 00:26:20 +0000 Manifest this update: Wed 05 Nov 2025 00:26:19 +0000 Manifest next update: Wed 12 Nov 2025 00:26:19 +0000 Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: swABdfhHAIlyhqodlMMvBJTvMeFu2kg2w2GQSHMV0AM=) 2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22 Validity Not Before: Nov 5 00:26:19 2025 GMT Not After : Nov 12 00:26:19 2025 GMT Subject: CN=690a99ac-5ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:82:1c:1e:39:22:a9:43:5c:82:f5:c7:f0: d8:e7:14:46:d9:63:42:2e:32:53:45:d7:a9:12:d7: ba:39:12:21:f6:4c:32:1a:c7:79:c8:e7:ea:d1:f8: 33:90:0f:ef:b6:20:8c:b7:3f:73:b9:09:a7:15:2b: b4:9f:91:bc:9d:7e:50:b1:b8:3e:86:f1:5c:40:3a: 37:42:b3:8e:8f:d4:74:a7:70:a3:a1:32:0e:6f:52: 50:2c:fb:f6:1d:57:ee:6f:10:96:2d:2a:e9:76:2d: 5b:de:bf:e4:99:57:e8:8c:b2:73:5a:04:a1:1f:ed: df:fe:71:ee:26:4a:b5:a0:f4:bc:ca:54:39:ee:eb: 55:5d:43:f0:07:90:1c:c7:03:bc:67:41:d9:4f:33: d5:84:e9:d8:84:53:f5:8d:cf:4d:52:15:6f:e8:ec: 14:32:ea:d3:58:f5:fc:c4:9d:35:08:ed:69:6c:3f: dc:9b:a6:57:8e:ed:65:82:5b:23:2c:56:a9:29:89: 17:17:8e:20:a4:69:c7:7b:15:f2:18:96:0c:6f:b6: 9e:a2:e7:ee:29:f6:ca:e5:f3:68:ac:00:a4:31:a4: a5:af:f2:8a:10:fc:70:34:7d:c9:a8:b1:bb:aa:3e: 1f:53:21:3b:32:45:e0:40:ab:b9:8e:b0:2a:ce:d4: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:09:23:67:03:DB:7E:17:94:F1:1B:2D:4E:53:FB:61:05:94:23:3E X509v3 Authority Key Identifier: keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b8:05:eb:9b:d0:78:8d:ff:66:a5:10:22:3c:c9:d5:d8:d8: 79:b8:11:0d:67:cb:01:d5:27:ff:c4:87:9d:5e:4c:3e:fe:8a: 82:61:72:ff:3a:cd:8a:51:04:12:b4:13:68:c3:ab:1e:54:bf: 62:c1:fe:e4:7d:a6:e6:9a:a7:e6:9f:1a:1d:28:b7:f9:9f:39: ca:28:8f:1b:db:5a:49:a9:c9:75:d4:47:2a:e5:0b:aa:49:21: 19:d9:2e:12:32:cd:f8:a0:a7:a3:29:15:1a:48:20:fd:d3:9d: 85:e8:84:3a:fc:60:d6:0d:7b:c0:79:45:3e:4b:f8:77:3a:91: f5:15:61:53:db:76:9f:49:c7:30:e6:af:ac:8b:5f:3d:00:12: 91:db:57:16:a7:76:54:81:2a:31:fb:98:76:48:9d:77:cf:4f: ab:24:42:cf:13:3e:4e:8e:24:a3:04:d2:20:bf:50:48:1e:89: 70:a5:fa:f5:d9:9f:49:b9:bb:37:2a:96:89:f5:2a:a1:eb:dc: 4d:b3:09:09:0d:45:a3:76:e0:2b:d4:87:1d:7e:da:cb:dd:39: d8:79:9b:dc:83:ce:a3:57:da:ff:72:d2:0f:9a:74:4d:1a:07: 5a:ff:a6:0a:e4:9f:02:77:79:37:3c:ac:e0:62:69:13:ff:fe: 13:5e:ba:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4RjEwNDgzREMx RkE1RDNFMjIwHhcNMjUxMTA1MDAyNjE5WhcNMjUxMTEyMDAyNjE5WjAYMRYwFAYD VQQDEw02OTBhOTlhYy01ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u2CHB45IqlDXIL1x/DY5xRG2WNCLjJTRdepEte6ORIh9kwyGsd5yOfq0fgz kA/vtiCMtz9zuQmnFSu0n5G8nX5Qsbg+hvFcQDo3QrOOj9R0p3CjoTIOb1JQLPv2 HVfubxCWLSrpdi1b3r/kmVfojLJzWgShH+3f/nHuJkq1oPS8ylQ57utVXUPwB5Ac xwO8Z0HZTzPVhOnYhFP1jc9NUhVv6OwUMurTWPX8xJ01CO1pbD/cm6ZXju1lglsj LFapKYkXF44gpGnHexXyGJYMb7aeoufuKfbK5fNorACkMaSlr/KKEPxwNH3JqLG7 qj4fUyE7MkXgQKu5jrAqztRFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4JI2cD 234XlPEbLU5T+2EFlCM+MB8GA1UdIwQYMBaAFKIGr8lmpp5wtImzjxBIPcH6XT4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI2QS9CNDgxMzM0Mjg0 RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5uQzBpYk9QRUVnOXdmcGRQ aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29nYXZ5V2Ftbm5DMGliT1BFRWc5d2ZwZFBpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdhbW5u QzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtuAXrm9B4jf9mpRAiPMnV2Nh5uBENZ8sB1Sf/xIedXkw+/oqCYXL/ Os2KUQQStBNow6seVL9iwf7kfabmmqfmnxodKLf5nznKKI8b21pJqcl11Ecq5Quq SSEZ2S4SMs34oKejKRUaSCD9052F6IQ6/GDWDXvAeUU+S/h3OpH1FWFT23afSccw 5q+si189ABKR21cWp3ZUgSox+5h2SJ13z0+rJELPEz5OjiSjBNIgv1BIHolwpfr1 2Z9Jubs3KpaJ9Sqh69xNswkJDUWjduAr1IcdftrL3TnYeZvcg86jV9r/ctIPmnRN Ggda/6YK5J8Cd3k3PKzgYmkT//4TXrrE -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:47 2025 by rpki-client