$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: HDH0lNgHBicMlbX9/6QHGgHF/ZakSfu7UtTIaClIAYM= Subject key identifier: 9E:DA:5A:37:2E:54:E3:6B:94:52:A0:88:68:E1:A8:66:59:38:65:EE Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C8F Signing time: Sun 02 Nov 2025 18:30:04 +0000 Manifest this update: Sun 02 Nov 2025 18:30:04 +0000 Manifest next update: Sun 09 Nov 2025 18:30:04 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 05oNxMKdtdL8+ugq2Huge9frqO7+yYIn+R0Y1codJxM=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Nov 2 18:30:04 2025 GMT Not After : Nov 9 18:30:04 2025 GMT Subject: CN=6907a32c-dffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:c8:0d:c3:e9:2e:40:de:04:2c:c7:64:be: d1:90:b5:ee:e0:b5:e4:79:c5:3e:56:43:1c:dd:98: 39:62:3b:91:60:1a:c7:ce:b9:82:4c:57:96:ad:7e: 78:b0:21:0d:f2:03:f1:44:44:e8:37:6e:bd:6c:a2: ca:52:11:8f:5e:15:77:2e:f7:5c:38:c9:d1:dd:e1: 0c:30:3c:5c:d1:b8:83:33:71:28:85:fc:58:80:20: 9d:1d:87:5d:45:bf:59:4b:f4:73:7a:2a:68:96:b7: 8f:49:4f:ce:7e:78:86:fe:01:16:88:cd:6e:3b:70: b5:46:ae:5b:81:0e:d1:ea:c2:0a:63:12:b0:e8:ed: 37:12:e3:e9:78:b4:b5:3c:64:ee:fb:1b:3a:13:4c: 89:65:b5:4e:56:10:02:31:5c:e5:63:bc:73:61:28: 0f:6c:67:dd:03:58:e2:d5:c6:9e:25:be:4a:03:43: 32:d9:b7:4d:82:7e:d8:39:ac:a7:8e:73:66:f6:04: 00:67:c1:b2:b4:db:cf:2d:5d:4f:e1:d6:da:a3:30: c4:f6:36:7b:4a:33:d3:61:c8:65:c1:b3:b1:d9:2d: 09:51:7c:f4:ee:4b:d8:86:f4:e0:ad:d6:30:04:f0: 7e:db:a3:0c:44:18:d7:c7:f3:55:a6:95:80:92:44: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DA:5A:37:2E:54:E3:6B:94:52:A0:88:68:E1:A8:66:59:38:65:EE X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:31:4c:d8:48:b0:a3:ea:64:a9:db:ad:52:03:0a:40:0d: 09:e3:cf:00:f4:f7:69:b1:c2:c6:33:3a:f5:ee:75:a4:f8:10: 36:7a:34:66:46:bf:af:ce:ef:65:7b:3c:39:93:e1:2d:ee:59: 0b:e6:7b:18:4a:da:9d:de:c4:06:e6:ae:be:c9:e6:22:e6:d4: 98:f0:f7:1c:9b:63:50:9d:2b:b3:9e:37:b7:fc:55:81:ba:ae: d8:87:22:31:88:12:6e:0a:6b:42:03:db:88:5e:ac:f7:64:65: 3c:6b:47:2e:fa:3d:fe:e4:35:a4:fd:b2:36:b0:66:bd:7e:0e: 73:59:b9:7e:18:8e:51:cc:19:cc:0a:02:55:ce:cb:4f:8e:b8: 3a:43:40:a7:77:2e:fe:8f:98:a8:8e:b5:62:f2:6a:3b:13:fc: 0e:8b:91:4f:16:54:a2:a2:95:18:01:fd:d7:f7:71:ee:e7:d8: ff:10:8e:44:81:90:f4:71:9a:51:fa:cf:79:90:b4:dd:c4:9e: c5:b9:4b:7f:58:e3:3f:bc:66:41:ec:6b:f2:62:e3:fb:e7:ed: a0:15:ba:8b:12:96:0a:03:99:3b:43:0b:5c:9c:99:7b:f4:6e: 16:b1:bd:af:ae:7b:64:53:a4:dd:10:d7:b3:f6:26:8a:1b:b0: 5e:96:c9:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUxMTAyMTgzMDA0WhcNMjUxMTA5MTgzMDA0WjAYMRYwFAYD VQQDEw02OTA3YTMyYy1kZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWHIDcPpLkDeBCzHZL7RkLXu4LXkecU+VkMc3Zg5YjuRYBrHzrmCTFeWrX54 sCEN8gPxREToN269bKLKUhGPXhV3LvdcOMnR3eEMMDxc0biDM3EohfxYgCCdHYdd Rb9ZS/RzeipolrePSU/OfniG/gEWiM1uO3C1Rq5bgQ7R6sIKYxKw6O03EuPpeLS1 PGTu+xs6E0yJZbVOVhACMVzlY7xzYSgPbGfdA1ji1caeJb5KA0My2bdNgn7YOayn jnNm9gQAZ8GytNvPLV1P4dbaozDE9jZ7SjPTYchlwbOx2S0JUXz07kvYhvTgrdYw BPB+26MMRBjXx/NVppWAkkSPHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7aWjcu VONrlFKgiGjhqGZZOGXuMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMTFM2Eiwo+pkqdutUgMKQA0J488A9PdpscLGMzr17nWk+BA2ejRm Rr+vzu9lezw5k+Et7lkL5nsYStqd3sQG5q6+yeYi5tSY8Pccm2NQnSuznje3/FWB uq7YhyIxiBJuCmtCA9uIXqz3ZGU8a0cu+j3+5DWk/bI2sGa9fg5zWbl+GI5RzBnM CgJVzstPjrg6Q0Cndy7+j5iojrVi8mo7E/wOi5FPFlSiopUYAf3X93Hu59j/EI5E gZD0cZpR+s95kLTdxJ7FuUt/WOM/vGZB7GvyYuP75+2gFbqLEpYKA5k7QwtcnJl7 9G4Wsb2vrntkU6TdENez9iaKG7BelskG -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:44 2025 by rpki-client