$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: vOh+/c+QCg8Ig1axBz18PNCgJrffEsidCUyKnl5hI6w= Subject key identifier: 16:A6:19:7B:57:E9:CF:47:90:6F:8D:3A:20:0E:D8:85:75:A6:8E:F0 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0E04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0DEF Signing time: Wed 08 Oct 2025 17:50:32 +0000 Manifest this update: Wed 08 Oct 2025 17:50:31 +0000 Manifest next update: Wed 15 Oct 2025 17:50:31 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: osOpbnKkGvNHGAmF16/OmwtFi28OdfWOH17JXCsyp7I=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: P63HmzuTgX6+OxmcbQTN/m0eCDcj1q5olNwP8Hf8SvI=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: jkm23RvGSquZwL1DUARD3YaIj647wpqnNA3CvWP1hl8=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 17:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3588 (0xe04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Oct 8 17:50:31 2025 GMT Not After : Oct 15 17:50:31 2025 GMT Subject: CN=68e6a468-a672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:a8:01:b6:e8:dd:39:17:29:d6:78:3c:af: 88:61:7f:73:ce:36:2a:d2:08:0b:d8:77:62:75:41: 04:01:57:1e:c2:44:bf:ca:e3:b3:a8:ff:ae:86:ac: c6:c9:3a:8a:81:98:b1:4d:f2:83:f1:36:15:4e:64: eb:41:9e:08:d9:fd:f6:bc:12:1b:84:36:5d:92:8b: 7b:e5:a4:d6:79:03:7c:20:47:0a:08:f6:a2:8c:40: fe:9e:2e:2b:44:dd:0a:4f:3c:a7:50:b6:5d:d5:63: 0c:08:6c:f6:52:b3:32:c6:71:5a:bb:16:9e:4f:1c: 06:aa:91:22:b6:d9:d6:27:0d:d1:ba:80:c1:c9:96: c1:df:3d:2a:24:ea:98:02:c9:3e:0d:d0:22:c9:49: cb:0e:59:ee:c0:cd:fc:5d:e8:f5:28:b4:97:9c:a3: 42:05:dc:15:22:6b:ee:00:59:1c:82:86:94:68:48: 79:f8:a1:b7:52:ff:6f:36:da:f4:b6:f8:1d:e9:64: 65:f5:2f:aa:09:35:37:4a:e9:3a:d2:9d:0a:57:fa: 53:7f:f5:92:fd:3a:32:ae:73:6e:ff:47:22:74:c3: cc:3a:38:24:ce:5e:40:32:0a:3a:e2:e6:99:a5:4f: 49:ec:58:05:37:e5:4b:f1:e1:b9:b4:b6:39:d0:8d: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A6:19:7B:57:E9:CF:47:90:6F:8D:3A:20:0E:D8:85:75:A6:8E:F0 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:66:a9:39:2e:3f:1f:ea:54:9a:9a:1e:c5:53:7b:4d:e9:b8: c5:1a:f2:b9:f4:c8:aa:3d:30:49:b8:78:d7:8e:ee:bd:4b:c1: ff:b6:eb:1d:32:e5:33:61:ea:16:b7:0c:2a:fe:e4:93:39:44: 2d:7d:56:f6:af:2f:3b:60:eb:cc:38:26:4e:7b:15:63:89:65: 6b:6c:28:9d:e2:70:d4:3f:71:d9:17:27:75:35:9d:76:7e:e8: 95:dd:0e:f3:55:1b:fa:0c:f8:56:74:10:12:6a:1e:a2:ff:1a: bf:dc:39:76:5d:50:ed:82:bb:02:64:82:67:a8:a0:c5:02:98: 47:80:c5:73:70:c0:82:8f:91:7c:d3:ae:9c:78:92:da:38:97: 0e:7a:5c:6e:49:0e:f9:1c:8e:a2:62:e1:a2:96:df:3c:ff:6f: c5:2a:73:67:9b:70:0b:23:aa:dc:b4:6c:a6:94:43:ed:56:07: 46:0c:a5:9e:e7:f6:f3:f0:39:86:0f:08:f9:10:4b:e7:25:93: 8e:23:97:a0:b3:9b:44:b6:55:8b:a1:eb:42:a2:b7:1e:db:b4: 81:c0:ee:6e:1e:f8:dd:2a:3e:3f:c1:d1:ae:74:b2:89:a3:3e: 38:51:14:2b:03:ba:a0:ef:d3:9a:eb:d0:c2:73:fa:b4:93:01: be:72:f7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjUxMDA4MTc1MDMxWhcNMjUxMDE1MTc1MDMxWjAYMRYwFAYD VQQDEw02OGU2YTQ2OC1hNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF+oAbbo3TkXKdZ4PK+IYX9zzjYq0ggL2HdidUEEAVcewkS/yuOzqP+uhqzG yTqKgZixTfKD8TYVTmTrQZ4I2f32vBIbhDZdkot75aTWeQN8IEcKCPaijED+ni4r RN0KTzynULZd1WMMCGz2UrMyxnFauxaeTxwGqpEittnWJw3RuoDByZbB3z0qJOqY Ask+DdAiyUnLDlnuwM38Xej1KLSXnKNCBdwVImvuAFkcgoaUaEh5+KG3Uv9vNtr0 tvgd6WRl9S+qCTU3Suk60p0KV/pTf/WS/ToyrnNu/0cidMPMOjgkzl5AMgo64uaZ pU9J7FgFN+VL8eG5tLY50I2uKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBamGXtX 6c9HkG+NOiAO2IV1po7wMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiZqk5Lj8f6lSamh7FU3tN6bjFGvK59MiqPTBJuHjXju69S8H/tusd MuUzYeoWtwwq/uSTOUQtfVb2ry87YOvMOCZOexVjiWVrbCid4nDUP3HZFyd1NZ12 fuiV3Q7zVRv6DPhWdBASah6i/xq/3Dl2XVDtgrsCZIJnqKDFAphHgMVzcMCCj5F8 066ceJLaOJcOelxuSQ75HI6iYuGilt88/2/FKnNnm3ALI6rctGymlEPtVgdGDKWe 5/bz8DmGDwj5EEvnJZOOI5egs5tEtlWLoetCorce27SBwO5uHvjdKj4/wdGudLKJ oz44URQrA7qg79Oa69DCc/q0kwG+cvfU -----END CERTIFICATE-----Generated at Thu Oct 9 01:27:00 2025 by rpki-client