$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json) Hash identifier: Flzh1hDa3maKUYG1z1uHQwp1Ax6RlPgQeooVYpCPMLA= Subject key identifier: 7D:65:3E:AF:6E:E1:BE:E7:1B:94:CC:CE:D5:8D:57:87:2B:86:16:9C Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 07:59:53 +0000 Manifest this update: Mon 03 Nov 2025 07:59:53 +0000 Manifest next update: Mon 10 Nov 2025 07:59:53 +0000 Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: TrfQktiqNzXoOBb49QSZDwbak4Y9XkaAar7+jqeKr2I=) 2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: FoI4HeON78cJuhYbJvTWNmf/HypRelSKwk6lwHyGL/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Validity Not Before: Nov 3 07:59:53 2025 GMT Not After : Nov 10 07:59:53 2025 GMT Subject: CN=690860f9-26d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:ab:c8:8e:2b:75:de:34:40:8c:7f:e5:97: 58:89:e6:14:a3:d2:e6:0e:97:20:e9:28:06:96:b6: 9d:08:4a:52:67:33:25:3b:e6:c4:1e:29:00:7f:16: c0:40:78:dd:2f:d0:6e:fc:dc:d5:8c:46:af:de:be: 9f:f3:2a:f7:83:a8:09:33:e0:aa:46:be:df:27:2f: 69:28:42:00:b5:e6:f0:c1:a6:8e:eb:8c:c9:b4:38: 7c:88:7a:7c:c6:bc:2d:cb:e1:dc:65:c7:f8:4b:c0: 5d:15:d8:6d:5b:0e:1c:49:e9:d7:01:b6:2d:39:5c: 2c:17:d0:18:a7:f4:b1:fa:2d:0c:b9:89:90:d6:41: 84:c3:6a:82:c8:15:ba:bc:a7:df:49:9d:f0:4b:16: 4b:b7:fc:7f:09:b1:26:20:ef:b3:89:24:a0:1e:89: d4:5f:39:08:c1:a7:f6:cd:32:54:dd:04:a1:d5:8f: 01:94:90:ec:8f:9d:71:8d:7c:46:36:f0:c7:f5:18: 1d:93:3e:76:f6:40:5d:cb:d8:02:18:0c:1a:10:a6: c6:28:4e:5b:ca:39:ab:7a:f7:13:d8:7f:78:2b:d0: 1d:ce:94:40:dd:98:2e:64:0e:db:ba:1f:cd:0c:8f: 21:08:0e:0b:f9:3b:4d:bb:bd:d0:03:15:a2:37:51: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:3E:AF:6E:E1:BE:E7:1B:94:CC:CE:D5:8D:57:87:2B:86:16:9C X509v3 Authority Key Identifier: keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:43:40:82:f1:e4:3b:c5:84:d7:80:fc:8e:ed:1a:c4:da:85: 8e:1e:18:e9:b2:26:aa:8e:ed:32:4c:ae:d9:8d:8e:6b:27:ed: 15:e7:6e:a3:94:35:13:48:4a:c1:4a:e1:05:0d:4c:45:ab:8c: f0:9a:84:f8:3a:7a:1e:43:aa:b5:b0:65:10:a9:6d:a0:6a:44: 07:ff:77:ee:a7:e1:7f:3e:bf:56:0f:6e:e7:db:28:83:b9:c7: 1e:39:d8:21:95:24:53:74:27:26:09:dd:7f:eb:6e:5d:70:06: e9:f3:de:b0:81:ab:2d:bb:53:ab:f3:a7:36:cb:0c:45:c9:e1: ed:3b:cc:49:af:e1:8a:be:1c:3a:5f:6b:d3:00:1c:dd:71:5f: e6:06:3c:65:e0:5c:a0:d6:b8:bd:93:98:4e:da:1b:9b:65:2d: 16:ca:01:a8:6a:75:4c:eb:86:76:34:e9:cb:b1:78:37:3e:e3: 00:cd:00:92:b5:b8:5f:5b:fd:ae:8e:b3:bf:96:f2:87:d5:f3: ac:da:87:dd:40:34:ba:6a:1f:3f:5e:0f:34:6f:48:e2:f9:b5: ef:57:23:f6:02:31:2f:91:a7:90:94:2c:fd:a5:00:0d:98:e6: bc:54:9c:22:82:55:56:c2:a5:9c:c8:8c:d3:df:98:a6:d8:c0: 2f:00:06:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUU3NDExMC8GA1UEBRMoMzk4REI2NDIzRkM1RTBGNzc3NEYyQTMzMzFEN0RCQ0M0 QURCRjUzNjAeFw0yNTExMDMwNzU5NTNaFw0yNTExMTAwNzU5NTNaMBgxFjAUBgNV BAMTDTY5MDg2MGY5LTI2ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb+avIjit13jRAjH/ll1iJ5hSj0uYOlyDpKAaWtp0ISlJnMyU75sQeKQB/FsBA eN0v0G783NWMRq/evp/zKveDqAkz4KpGvt8nL2koQgC15vDBpo7rjMm0OHyIenzG vC3L4dxlx/hLwF0V2G1bDhxJ6dcBti05XCwX0Bin9LH6LQy5iZDWQYTDaoLIFbq8 p99JnfBLFku3/H8JsSYg77OJJKAeidRfOQjBp/bNMlTdBKHVjwGUkOyPnXGNfEY2 8Mf1GB2TPnb2QF3L2AIYDBoQpsYoTlvKOat69xPYf3gr0B3OlEDdmC5kDtu6H80M jyEIDgv5O027vdADFaI3Udq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfWU+r27h vucblMzO1Y1XhyuGFpwwHwYDVR0jBBgwFoAUOY22Qj/F4Pd3TyozMdfbzErb9TYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRTc0LzM3QjE1OUZFQUIz RjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBkM1R5b3pNZGZiekVyYjlU WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1kyMlFqX0Y0UGQzVHlvek1kZmJ6RXJiOVRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RTc0LzM3QjE1OUZFQUIzRjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBk M1R5b3pNZGZiekVyYjlUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADhDQILx5DvFhNeA/I7tGsTahY4eGOmyJqqO7TJMrtmNjmsn7RXnbqOU NRNISsFK4QUNTEWrjPCahPg6eh5DqrWwZRCpbaBqRAf/d+6n4X8+v1YPbufbKIO5 xx452CGVJFN0JyYJ3X/rbl1wBunz3rCBqy27U6vzpzbLDEXJ4e07zEmv4Yq+HDpf a9MAHN1xX+YGPGXgXKDWuL2TmE7aG5tlLRbKAahqdUzrhnY06cuxeDc+4wDNAJK1 uF9b/a6Os7+W8ofV86zah91ANLpqHz9eDzRvSOL5te9XI/YCMS+Rp5CULP2lAA2Y 5rxUnCKCVVbCpZzIjNPfmKbYwC8ABsw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:51 2025 by rpki-client