$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: cCcIgNburNsFuBWxINKAS6wArlJiPKhhvHtVzCdNlNo= Subject key identifier: DF:D0:50:0C:8B:16:1E:5E:AE:F9:38:C8:31:97:A1:BE:92:1C:7E:DE Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 3D Signing time: Fri 07 Nov 2025 02:44:39 +0000 Manifest this update: Fri 07 Nov 2025 02:44:39 +0000 Manifest next update: Fri 14 Nov 2025 02:44:39 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: mOLDzvjvxoNWvk7reaNMFzAm20p3b6k07dCnI8Y8GtI=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Nov 7 02:44:39 2025 GMT Not After : Nov 14 02:44:39 2025 GMT Subject: CN=690d5d17-de73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:a5:ce:85:52:27:e0:bc:77:22:d4:c4:af: c0:13:be:f7:21:d5:e2:7e:5e:29:c9:5c:ba:44:49: 2e:cd:b3:65:32:84:2b:eb:c3:a2:26:7c:50:42:92: fc:db:98:5e:03:c4:90:a6:ab:9a:48:fb:de:af:90: 82:ec:ab:fc:c0:0a:33:83:84:81:7c:cc:b3:da:cb: 13:ad:b2:ef:ec:80:b6:4c:cf:da:01:cf:ec:ba:ac: ff:3a:12:67:5c:2f:da:81:ca:43:c0:05:e8:8d:c9: e6:15:b5:f9:07:a1:fc:af:0c:9c:8f:ed:e3:18:1c: fd:b8:4b:d4:74:25:25:2d:37:87:42:20:d6:99:9d: 2d:b9:26:94:1e:79:41:a7:de:29:38:ce:47:b7:01: 03:0c:24:50:eb:14:54:7a:10:0f:b1:e1:17:4c:2b: 55:65:e2:59:4b:0c:ad:96:86:b5:ef:90:28:3f:eb: 8c:fd:98:fd:33:e1:80:30:58:a6:64:9c:79:a4:2c: de:64:8f:9c:fb:4b:c3:63:84:9e:b5:5a:43:26:6c: 41:2e:82:3d:45:1c:37:db:0e:17:cb:9c:8a:14:62: 45:5b:e3:bc:cb:db:a4:83:a1:e6:12:45:55:dc:21: 4f:1c:95:60:88:7e:54:26:dd:fb:42:d1:9a:32:12: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D0:50:0C:8B:16:1E:5E:AE:F9:38:C8:31:97:A1:BE:92:1C:7E:DE X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:f9:ee:57:31:9c:d8:bd:63:90:a3:68:ff:cb:51:d8:87: 6c:09:64:5e:73:31:f1:6b:6c:59:be:14:ac:b6:2f:a7:d4:96: 68:11:87:fa:33:72:2b:f6:de:1c:71:4a:2a:95:f6:f5:99:d6: 08:cf:95:15:c8:68:6f:3b:61:cc:e6:14:0f:39:91:6c:8b:f9: 3f:03:8b:8d:54:ac:32:cd:19:2e:a9:fb:25:d1:3d:86:21:d9: 89:f9:78:c5:19:b5:d0:7e:fb:7e:97:6e:a7:38:39:71:43:00: bf:10:39:0c:d9:c2:43:7f:95:ac:d8:f4:b2:0c:ba:d7:f1:fa: 33:23:83:40:36:c2:08:0e:59:95:b0:6f:88:36:a1:e0:3d:ce: 9e:97:ea:14:96:8d:a9:8e:f4:c0:43:45:bc:06:38:e2:78:a5: 3d:3b:70:ef:05:49:5e:0d:ea:31:1d:76:b9:d0:22:55:c6:d3: 57:08:c2:f0:e4:0d:a1:30:bb:e0:ca:31:52:b1:de:34:a5:31: b1:69:aa:5f:77:76:af:95:12:ba:45:fb:1f:31:e0:ef:65:07: bc:1c:ac:a6:95:9f:52:d1:0f:13:8d:17:87:0b:a8:7f:8e:10: ae:6a:83:85:6a:37:95:27:84:ff:91:99:f5:6f:ff:54:c7:40: cc:f7:43:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoM0FDRjQ0NUNGQ0VDRkJCMjkxM0IzNDdENjdBODI4RTA0 MEExNUExRDAeFw0yNTExMDcwMjQ0MzlaFw0yNTExMTQwMjQ0MzlaMBgxFjAUBgNV BAMTDTY5MGQ1ZDE3LWRlNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCekaXOhVIn4Lx3ItTEr8ATvvch1eJ+XinJXLpESS7Ns2UyhCvrw6ImfFBCkvzb mF4DxJCmq5pI+96vkILsq/zACjODhIF8zLPayxOtsu/sgLZMz9oBz+y6rP86Emdc L9qBykPABeiNyeYVtfkHofyvDJyP7eMYHP24S9R0JSUtN4dCINaZnS25JpQeeUGn 3ik4zke3AQMMJFDrFFR6EA+x4RdMK1Vl4llLDK2WhrXvkCg/64z9mP0z4YAwWKZk nHmkLN5kj5z7S8NjhJ61WkMmbEEugj1FHDfbDhfLnIoUYkVb47zL26SDoeYSRVXc IU8clWCIflQm3ftC0ZoyEkY/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU39BQDIsW Hl6u+TjIMZehvpIcft4wHwYDVR0jBBgwFoAUOs9EXPzs+7KROzR9Z6go4EChWh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzVEQjc0QjBBNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT3M5RVhQenMtN0tST3pSOVo2Z280RUNoV2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzVEQjc0QjBBNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL09zOUVYUHpzLTdL Uk96UjlaNmdvNEVDaFdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJV/+e5XMZzYvWOQo2j/y1HYh2wJZF5zMfFrbFm+FKy2L6fUlmgRh/oz civ23hxxSiqV9vWZ1gjPlRXIaG87YczmFA85kWyL+T8Di41UrDLNGS6p+yXRPYYh 2Yn5eMUZtdB++36Xbqc4OXFDAL8QOQzZwkN/lazY9LIMutfx+jMjg0A2wggOWZWw b4g2oeA9zp6X6hSWjamO9MBDRbwGOOJ4pT07cO8FSV4N6jEddrnQIlXG01cIwvDk DaEwu+DKMVKx3jSlMbFpql93dq+VErpF+x8x4O9lB7wcrKaVn1LRDxONF4cLqH+O EK5qg4VqN5UnhP+RmfVv/1THQMz3Q4w= -----END CERTIFICATE-----Generated at Fri Nov 7 17:06:50 2025 by rpki-client