$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: JWEd1UBzlHsYW5Nrb49XpX15Wdls4aTif/BSZUpPovo= Subject key identifier: AF:94:AA:06:15:16:43:46:93:BF:6D:51:3D:4B:20:35:45:34:B7:E6 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 7E Signing time: Mon 03 Nov 2025 06:45:28 +0000 Manifest this update: Mon 03 Nov 2025 06:45:28 +0000 Manifest next update: Mon 10 Nov 2025 06:45:27 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: b1bbPNOzq0MD7Yru90A/m5mc+EmOK/HZGhXDzZ+CUK8=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Nov 3 06:45:28 2025 GMT Not After : Nov 10 06:45:27 2025 GMT Subject: CN=69084f88-7c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:53:5f:ad:47:4e:0c:9b:24:7b:be:79:aa: 10:d2:ca:47:d0:c7:c2:bf:0c:6a:ed:a4:3a:00:ad: c5:e6:e7:a7:59:6d:df:d9:53:6c:26:86:a7:bb:1c: 73:f1:91:48:2f:d7:fb:04:ad:78:e4:a2:68:0b:21: 39:62:f5:04:f0:19:73:47:ea:41:f7:7e:bb:fd:7a: 70:cd:31:04:de:1c:13:b6:a8:88:ce:48:6a:0c:4f: 06:1a:72:6b:44:25:a8:9a:1b:6e:6e:a5:f0:60:65: f7:db:82:72:84:e0:dc:d6:78:db:f9:4c:2c:10:84: 12:52:e6:e9:db:be:8b:88:2f:f5:99:fd:d9:d1:e0: 6c:0b:2e:4f:d2:af:60:68:cb:9b:0a:0b:72:25:ad: bb:b7:36:29:eb:47:fc:65:2a:b6:76:c0:43:07:30: ad:45:63:0f:80:31:8f:1a:59:be:3f:d4:42:c7:56: 35:44:f3:dc:dd:c7:12:24:c6:ae:ae:8e:30:39:2c: 51:ed:ad:d5:37:47:99:6d:50:cb:fe:e4:4a:97:31: 09:7a:96:d7:92:ad:e7:52:55:4b:09:42:fc:36:90: 59:b1:c0:83:dc:8a:58:d7:04:fc:7b:34:08:f4:38: 2b:74:46:86:8b:79:84:eb:2a:5f:6f:e2:24:8b:40: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:AA:06:15:16:43:46:93:BF:6D:51:3D:4B:20:35:45:34:B7:E6 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:48:51:5e:96:51:00:a3:b5:56:8d:56:a0:a4:df:b2:40:41: 65:7f:3a:cf:fc:f7:83:32:18:e4:31:75:f8:ed:58:6a:57:74: d6:ea:64:b8:3c:db:0e:1e:7e:db:20:33:db:5c:ad:c2:eb:61: e5:b2:8d:f1:ae:be:1b:9c:2e:39:83:37:ee:9c:90:67:e7:54: b0:2f:4b:d4:dc:1a:19:74:d6:55:22:83:56:f3:6f:ed:98:a8: 4f:44:95:ba:ce:5b:fa:b5:d1:20:56:c2:0c:c9:45:15:79:81: 9a:20:81:3b:5b:a5:a8:7c:27:fc:67:19:38:2e:ce:d2:ad:14: 99:c4:50:da:5d:7a:5d:d4:7c:07:7c:2c:53:97:2d:2e:9a:5e: ba:a5:27:6e:b3:e2:5c:7c:c3:13:35:7f:22:fd:42:6b:0e:38: 9c:24:4f:23:e5:7d:c6:8b:c0:e1:a2:8a:ad:47:a1:5a:02:74: 1d:ab:bb:0f:98:36:d0:0c:59:b0:08:c2:94:5c:cd:96:4e:aa: 5a:8f:fb:b9:ce:00:af:59:5b:50:af:79:23:ba:9e:0c:08:fc: db:15:25:bd:c3:88:d3:42:54:84:ba:6b:d8:fe:54:a8:73:22: 88:ac:38:2a:91:6c:98:e4:6b:05:31:30:e7:0e:30:82:4e:66: 6c:e0:6d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5 MjU0QTY5MUMwHhcNMjUxMTAzMDY0NTI4WhcNMjUxMTEwMDY0NTI3WjAYMRYwFAYD VQQDEw02OTA4NGY4OC03YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmI9TX61HTgybJHu+eaoQ0spH0MfCvwxq7aQ6AK3F5uenWW3f2VNsJoanuxxz 8ZFIL9f7BK145KJoCyE5YvUE8BlzR+pB9367/XpwzTEE3hwTtqiIzkhqDE8GGnJr RCWomhtubqXwYGX324JyhODc1njb+UwsEIQSUubp276LiC/1mf3Z0eBsCy5P0q9g aMubCgtyJa27tzYp60f8ZSq2dsBDBzCtRWMPgDGPGlm+P9RCx1Y1RPPc3ccSJMau ro4wOSxR7a3VN0eZbVDL/uRKlzEJepbXkq3nUlVLCUL8NpBZscCD3IpY1wT8ezQI 9DgrdEaGi3mE6ypfb+Iki0CHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+UqgYV FkNGk79tUT1LIDVFNLfmMB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVy a0ZSNG96enZKM21TVkthUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvSFFellEAo7VWjVagpN+yQEFlfzrP/PeDMhjkMXX47VhqV3TW6mS4 PNsOHn7bIDPbXK3C62Hlso3xrr4bnC45gzfunJBn51SwL0vU3BoZdNZVIoNW82/t mKhPRJW6zlv6tdEgVsIMyUUVeYGaIIE7W6WofCf8Zxk4Ls7SrRSZxFDaXXpd1HwH fCxTly0uml66pSdus+JcfMMTNX8i/UJrDjicJE8j5X3Gi8DhooqtR6FaAnQdq7sP mDbQDFmwCMKUXM2WTqpaj/u5zgCvWVtQr3kjup4MCPzbFSW9w4jTQlSEumvY/lSo cyKIrDgqkWyY5GsFMTDnDjCCTmZs4G22 -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:14 2025 by rpki-client