$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json) Hash identifier: RZlaKVAILLIilCU8XAUtXezJ+R4MJcZnQEjjO3UjXI4= Subject key identifier: DF:39:4C:F1:08:78:A5:00:28:85:E5:61:50:1E:09:9D:0C:1E:24:83 Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Certificate serial: 031F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft Manifest number: 030E Signing time: Mon 03 Nov 2025 01:08:53 +0000 Manifest this update: Mon 03 Nov 2025 01:08:52 +0000 Manifest next update: Mon 10 Nov 2025 01:08:52 +0000 Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: NnNfD9nEDUxkmOcYQKHZ5T0xp2YGPlYitlwWjgTe+W4=) 2: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: JOoE8cEv4QilU5Ombvm92A0+Tjd4xN4kgW5mBEFenZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699 Validity Not Before: Nov 3 01:08:52 2025 GMT Not After : Nov 10 01:08:52 2025 GMT Subject: CN=690800a4-9445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:a2:c2:ba:4e:d2:cf:cb:f4:b5:58:c3:7d: 60:e5:93:44:bb:76:08:99:43:de:53:93:5a:ff:12: bf:c6:24:3f:0e:3d:29:48:c6:84:51:ca:eb:6d:80: 5e:aa:11:1c:ed:4b:64:91:1f:8a:9f:32:6e:f3:1b: 82:3d:5e:df:95:62:44:95:da:39:36:2f:b0:fd:77: 30:c0:b0:f3:85:f5:a6:b6:f3:92:95:7e:6d:6a:ec: af:47:a7:3f:b9:88:b0:f7:aa:2c:32:41:48:8c:53: 3f:1d:b9:88:89:3a:96:ad:5e:7e:fb:3a:a2:5a:72: 5e:04:e3:35:2f:3b:55:b2:09:bd:6e:ac:6a:9b:35: b3:fa:21:c1:09:31:69:6d:f9:7d:49:5c:1e:fd:f7: 3c:97:41:1c:71:88:84:89:52:18:d5:80:9b:23:2e: 1b:d0:3f:09:d8:11:16:85:cc:c3:88:c8:55:3b:91: 56:14:dc:4b:0f:2f:08:53:9f:3a:6e:43:cf:8e:76: 00:6d:1a:9b:5e:50:fe:91:e9:1d:69:c2:50:af:1b: b6:2d:85:a1:d2:c8:48:77:92:ba:6a:09:fe:30:2b: a4:58:3a:7b:5a:d0:2b:e7:d9:7d:46:3a:2e:35:43: 39:6e:d9:07:56:b4:5a:3d:af:fc:1e:96:a5:6e:bf: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:39:4C:F1:08:78:A5:00:28:85:E5:61:50:1E:09:9D:0C:1E:24:83 X509v3 Authority Key Identifier: keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:00:34:ab:ae:53:90:82:b9:69:68:cc:66:9d:31:21:51:01: bb:67:d3:a7:ba:29:fd:8c:21:1a:17:1d:c6:7f:dc:38:cf:a9: 87:ab:8b:14:1f:dd:c2:13:fe:f3:65:9b:24:3c:3f:55:dd:23: dd:6e:06:1e:20:03:0b:41:e0:90:d1:db:18:c3:45:62:6a:18: 7d:b0:34:ad:bc:a4:4f:4a:b7:d2:6e:77:11:88:86:74:4d:31: 3b:22:11:2e:87:f3:ca:52:a1:a0:e8:fe:0e:82:8d:d4:d5:06: e6:e3:54:4f:de:fa:3c:45:31:eb:aa:63:00:22:f6:fe:5a:8c: 66:52:79:d6:1c:19:9a:21:9b:bf:55:29:ae:a2:49:7f:74:9a: 87:f4:dc:28:e0:12:30:97:5e:ab:5e:0f:c0:c4:ad:3a:e2:30: 21:3f:3e:84:d3:59:f2:08:07:8c:72:3a:b9:8e:c6:f5:a6:db: 3e:24:f8:83:36:6f:d0:9a:a1:bb:cf:08:39:66:f4:05:dc:df: 2e:23:d0:a6:5d:c4:0e:6c:ec:42:c9:c3:25:f6:be:c3:81:cd: 25:82:47:9d:dc:53:e3:fa:c7:59:67:dc:2c:fc:ea:3c:0a:c6: 65:83:a5:93:0a:ec:90:06:44:f6:a4:51:63:1c:f4:49:35:b2: 76:95:d6:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy MkEyRTQ2OTkwHhcNMjUxMTAzMDEwODUyWhcNMjUxMTEwMDEwODUyWjAYMRYwFAYD VQQDEw02OTA4MDBhNC05NDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUaiwrpO0s/L9LVYw31g5ZNEu3YImUPeU5Na/xK/xiQ/Dj0pSMaEUcrrbYBe qhEc7UtkkR+KnzJu8xuCPV7flWJEldo5Ni+w/XcwwLDzhfWmtvOSlX5tauyvR6c/ uYiw96osMkFIjFM/HbmIiTqWrV5++zqiWnJeBOM1LztVsgm9bqxqmzWz+iHBCTFp bfl9SVwe/fc8l0EccYiEiVIY1YCbIy4b0D8J2BEWhczDiMhVO5FWFNxLDy8IU586 bkPPjnYAbRqbXlD+kekdacJQrxu2LYWh0shId5K6agn+MCukWDp7WtAr59l9Rjou NUM5btkHVrRaPa/8Hpalbr/jqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN85TPEI eKUAKIXlYVAeCZ0MHiSDMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4 NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJADSrrlOQgrlpaMxmnTEhUQG7Z9Onuin9jCEaFx3Gf9w4z6mHq4sU H93CE/7zZZskPD9V3SPdbgYeIAMLQeCQ0dsYw0Viahh9sDStvKRPSrfSbncRiIZ0 TTE7IhEuh/PKUqGg6P4Ogo3U1Qbm41RP3vo8RTHrqmMAIvb+WoxmUnnWHBmaIZu/ VSmuokl/dJqH9Nwo4BIwl16rXg/AxK064jAhPz6E01nyCAeMcjq5jsb1pts+JPiD Nm/QmqG7zwg5ZvQF3N8uI9CmXcQObOxCycMl9r7Dgc0lgked3FPj+sdZZ9ws/Oo8 CsZlg6WTCuyQBkT2pFFjHPRJNbJ2ldac -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:11 2025 by rpki-client