$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: /FfM2GDTXyWhCd6T5DQbfy30PZE/osrfq5s1KNvrV3c= Subject key identifier: 7C:AE:24:3B:AF:91:9B:51:7E:76:56:08:5A:49:B8:A5:B7:03:F3:D4 Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0C31 Signing time: Wed 08 Oct 2025 18:38:21 +0000 Manifest this update: Wed 08 Oct 2025 18:38:20 +0000 Manifest next update: Wed 15 Oct 2025 18:38:20 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: OB+Boz6FzFFCqKU7sGTW3FC59/YWQgesZHzmYZgeqNg=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 18:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Oct 8 18:38:20 2025 GMT Not After : Oct 15 18:38:20 2025 GMT Subject: CN=68e6af9c-2b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:8f:2a:a6:fe:bc:a7:79:3f:53:47:b3:7a: d0:35:a8:eb:e4:1e:6f:6f:b8:4b:12:af:e9:37:87: 94:1f:53:cd:d7:d9:52:11:95:51:6d:24:9f:b4:88: 3e:0f:13:b5:15:a4:58:c4:f5:6a:88:6e:37:d2:f4: 17:df:0e:d2:1b:4a:bc:a8:39:fd:0c:d6:b1:f2:a0: d9:29:88:a9:d3:59:50:8c:71:b7:c5:39:c3:a9:1a: 0b:df:45:92:31:1d:ff:94:53:be:b1:47:ac:08:5b: e3:87:26:3d:5b:54:a2:5b:aa:ff:4d:e1:58:5c:84: 1b:83:2c:3a:5a:fb:0a:eb:96:87:da:c8:55:f2:c6: 07:15:9b:0c:61:1c:29:fa:0e:26:1c:9b:91:8f:4f: 6d:2d:e4:5c:c4:9e:17:25:f1:7c:0d:d9:14:10:74: 30:79:7c:02:1b:f7:73:c9:84:12:ff:e4:c2:b4:3e: d2:ba:55:ec:fb:ca:c2:97:9c:92:f4:1e:84:4c:35: 0e:55:84:10:e0:66:a3:29:7f:bd:c7:1d:3e:c6:de: 67:27:11:27:93:41:c2:52:3f:2e:95:b4:8e:93:d1: 34:7e:03:fd:f3:cf:32:67:42:b7:ea:59:42:5d:80: ab:88:57:b2:45:39:2e:d8:83:89:cd:24:92:8a:d1: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AE:24:3B:AF:91:9B:51:7E:76:56:08:5A:49:B8:A5:B7:03:F3:D4 X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:f0:84:7f:db:7d:ea:96:ff:29:b0:72:bb:c3:63:fc:9c: 5c:97:7a:8a:7a:4b:76:8c:0c:80:11:87:97:83:32:11:04:e2: 32:9d:86:b5:cd:a7:40:e4:65:1b:05:f9:34:80:52:12:c6:2b: 42:85:72:74:0c:24:56:a0:e3:cb:e1:ec:45:7f:07:cb:95:bc: 2e:d8:8f:4f:9b:2b:3a:e3:01:df:11:6d:85:6a:30:6c:18:2b: d0:ec:c4:43:d9:08:a1:7a:83:3d:87:a4:e6:a0:56:53:10:01: 48:f3:15:41:2e:8d:2c:1b:76:51:0d:4e:1f:15:4b:db:7b:f2: 76:7b:af:ee:e6:a4:f5:96:66:38:a3:5f:ee:8a:13:6a:8f:e5: 1b:24:f0:73:14:67:9a:97:f0:c9:ba:b4:97:b2:a4:98:08:66: 1e:f1:46:34:81:f6:28:55:6b:d8:23:76:8d:3d:0b:c8:51:79: 58:91:64:99:3c:90:43:46:64:85:60:04:7e:86:95:2c:85:6c: d6:b7:11:29:5a:34:73:b1:5f:f3:92:c3:bf:ca:06:cc:ee:9b: 4a:e9:d4:d2:0e:e4:d2:28:ae:84:2d:10:d8:df:5b:8d:01:ed: d6:56:cb:f1:25:ae:36:dd:21:02:e9:c8:44:6c:4a:8e:1f:f3: 90:a6:fb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjUxMDA4MTgzODIwWhcNMjUxMDE1MTgzODIwWjAYMRYwFAYD VQQDEw02OGU2YWY5Yy0yYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDKPKqb+vKd5P1NHs3rQNajr5B5vb7hLEq/pN4eUH1PN19lSEZVRbSSftIg+ DxO1FaRYxPVqiG430vQX3w7SG0q8qDn9DNax8qDZKYip01lQjHG3xTnDqRoL30WS MR3/lFO+sUesCFvjhyY9W1SiW6r/TeFYXIQbgyw6WvsK65aH2shV8sYHFZsMYRwp +g4mHJuRj09tLeRcxJ4XJfF8DdkUEHQweXwCG/dzyYQS/+TCtD7SulXs+8rCl5yS 9B6ETDUOVYQQ4GajKX+9xx0+xt5nJxEnk0HCUj8ulbSOk9E0fgP9888yZ0K36llC XYCriFeyRTku2IOJzSSSitH4hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyuJDuv kZtRfnZWCFpJuKW3A/PUMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlW/CEf9t96pb/KbByu8Nj/Jxcl3qKekt2jAyAEYeXgzIRBOIynYa1 zadA5GUbBfk0gFISxitChXJ0DCRWoOPL4exFfwfLlbwu2I9Pmys64wHfEW2FajBs GCvQ7MRD2QiheoM9h6TmoFZTEAFI8xVBLo0sG3ZRDU4fFUvbe/J2e6/u5qT1lmY4 o1/uihNqj+UbJPBzFGeal/DJurSXsqSYCGYe8UY0gfYoVWvYI3aNPQvIUXlYkWSZ PJBDRmSFYAR+hpUshWzWtxEpWjRzsV/zksO/ygbM7ptK6dTSDuTSKK6ELRDY31uN Ae3WVsvxJa423SEC6chEbEqOH/OQpvuW -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:22 2025 by rpki-client