$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: ZhhVJLB1Z8u2yxrFvl+03t07xaZNwCa5Q3Zj6388KQI= Subject key identifier: B0:BE:FE:E1:E0:DB:FE:59:BA:62:E5:9C:47:28:40:E7:6C:74:83:10 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 2B Signing time: Sat 11 Oct 2025 11:32:50 +0000 Manifest this update: Sat 11 Oct 2025 11:32:50 +0000 Manifest next update: Sat 18 Oct 2025 11:32:50 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: /BcMKGEX54gC2VJu4H0M8IDe4oHQXpgI8FqpCLG+g2w=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 11:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Oct 11 11:32:50 2025 GMT Not After : Oct 18 11:32:50 2025 GMT Subject: CN=68ea4062-1de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:3a:92:8a:0f:2f:2c:26:b5:ca:64:52:51: f4:f2:b0:ef:ea:74:30:ce:c8:3f:f5:81:82:d8:bd: 4e:32:c4:53:11:f7:d9:75:00:ae:1c:19:09:59:2b: 5a:d5:16:a8:f9:7d:af:49:02:4d:f7:24:db:f4:ea: 87:63:f9:b1:63:33:15:f8:1d:12:f1:b7:7e:76:cb: 81:da:99:7c:ea:ec:c2:c1:b3:a4:a5:06:c8:0b:ae: 2e:a3:5c:5d:1b:92:2f:62:3f:25:74:70:77:1a:67: 43:da:2f:dc:07:21:97:55:80:e4:80:e3:81:96:83: 15:db:18:fc:ee:0a:35:d4:55:56:2f:15:35:16:ad: e2:16:9a:f0:20:bc:16:0e:38:9f:80:0e:2f:9a:08: 9f:29:83:66:0c:5e:65:73:c4:9f:3c:62:b4:55:70: 4a:d2:26:f1:75:ef:2c:92:ff:25:88:6a:5e:3d:4f: e4:88:89:c8:7a:04:3b:3f:3e:f6:61:a6:f0:5b:a9: 44:48:da:76:57:2b:87:e3:c2:fd:90:23:08:e1:76: b2:81:3b:b9:7d:b5:38:32:61:e0:9e:ec:8c:30:b3: 5d:cf:7c:c5:4a:46:ee:20:26:9e:74:62:e5:b8:3f: 0c:07:d0:3c:0a:e3:44:0e:78:f6:df:22:51:dd:6f: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:FE:E1:E0:DB:FE:59:BA:62:E5:9C:47:28:40:E7:6C:74:83:10 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:42:7d:86:1c:fb:0e:03:a1:83:52:8f:47:e7:67:63:74:b5: 6a:04:89:07:f2:d7:1e:79:42:ad:5a:bd:d3:83:ed:4e:ff:7b: 36:88:4b:ad:2a:94:5b:c5:da:cf:69:db:d1:c0:5c:4b:7a:1e: 4b:ce:24:f7:5c:25:c7:75:9f:1e:b3:31:1f:24:8a:84:31:14: 34:9e:6c:e1:3f:48:7b:10:f5:4b:3e:b6:3d:e5:46:6f:61:68: 0f:f0:7d:d0:0a:be:84:e2:bb:63:da:13:0d:91:bb:73:09:27: b2:7b:00:0c:82:62:7d:7c:8d:08:5c:3e:12:3e:40:22:73:74: 78:03:04:96:9c:0b:2d:8c:42:b0:49:5d:84:3d:bb:f1:7e:e2: 11:db:c5:fa:7f:f6:83:29:07:41:b2:3d:7c:64:41:f2:9c:ac: 5d:24:ca:46:de:b2:7b:9b:57:af:db:d0:50:a9:30:5a:0b:3e: 9c:d0:4a:27:31:38:45:35:d0:72:f6:48:89:c7:06:5a:f7:b3: b9:82:92:5f:f2:e7:bc:14:3a:44:67:de:54:2f:00:20:eb:49: 4b:59:82:33:88:18:58:cf:ce:fe:cb:2d:3a:12:f3:8d:ba:a2: 65:8d:a3:34:39:f7:9e:60:72:da:e4:ed:ea:f9:42:95:e5:fb: e7:84:cb:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTEwMTExMTMyNTBaFw0yNTEwMTgxMTMyNTBaMBgxFjAUBgNV BAMTDTY4ZWE0MDYyLTFkZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0UDqSig8vLCa1ymRSUfTysO/qdDDOyD/1gYLYvU4yxFMR99l1AK4cGQlZK1rV Fqj5fa9JAk33JNv06odj+bFjMxX4HRLxt352y4HamXzq7MLBs6SlBsgLri6jXF0b ki9iPyV0cHcaZ0PaL9wHIZdVgOSA44GWgxXbGPzuCjXUVVYvFTUWreIWmvAgvBYO OJ+ADi+aCJ8pg2YMXmVzxJ88YrRVcErSJvF17yyS/yWIal49T+SIich6BDs/PvZh pvBbqURI2nZXK4fjwv2QIwjhdrKBO7l9tTgyYeCe7Iwws13PfMVKRu4gJp50YuW4 PwwH0DwK40QOePbfIlHdb1qpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsL7+4eDb /lm6YuWcRyhA52x0gxAwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5CfYYc+w4DoYNSj0fnZ2N0tWoEiQfy1x55Qq1avdOD7U7/ezaIS60q lFvF2s9p29HAXEt6HkvOJPdcJcd1nx6zMR8kioQxFDSebOE/SHsQ9Us+tj3lRm9h aA/wfdAKvoTiu2PaEw2Ru3MJJ7J7AAyCYn18jQhcPhI+QCJzdHgDBJacCy2MQrBJ XYQ9u/F+4hHbxfp/9oMpB0GyPXxkQfKcrF0kykbesnubV6/b0FCpMFoLPpzQSicx OEU10HL2SInHBlr3s7mCkl/y57wUOkRn3lQvACDrSUtZgjOIGFjPzv7LLToS8426 omWNozQ5955gctrk7er5QpXl++eEy64= -----END CERTIFICATE-----Generated at Sat Oct 11 20:17:52 2025 by rpki-client