$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: JIn8s2DLNfvOe28+Q4pRjkMuJda+ldtfbvigiiTBsCI= Subject key identifier: 47:48:EF:DD:C3:76:2A:B2:AD:45:88:CB:7E:48:8B:D3:7F:96:AF:B1 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0861 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 085A Signing time: Tue 04 Nov 2025 20:46:39 +0000 Manifest this update: Tue 04 Nov 2025 20:46:38 +0000 Manifest next update: Tue 11 Nov 2025 20:46:38 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: BKQJp0PQ5hgS6KeRYuodtzRHxNrCgupgvh605wb8wmM=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2145 (0x861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Nov 4 20:46:38 2025 GMT Not After : Nov 11 20:46:38 2025 GMT Subject: CN=690a662e-65f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:59:e1:8e:0c:ca:fa:9d:64:e4:6e:df:7d: 17:8c:a9:6e:4c:73:0c:6b:bd:3f:8a:9b:e3:7d:20: d5:2b:e8:23:85:ec:0a:58:4d:df:75:4a:be:27:c5: 06:dc:b6:4a:e9:5e:ce:cd:e6:a0:fc:08:27:9c:22: 90:dc:05:75:1d:79:e8:52:31:b1:60:47:5e:ea:c9: d9:31:01:73:ff:be:56:01:85:f6:46:4a:16:ad:00: cd:b3:bb:52:7a:f5:51:de:93:99:f9:11:c1:cf:0c: 96:3d:45:1d:a5:7d:67:60:a8:13:4d:b9:6d:4b:24: e6:21:b4:55:1b:ae:4d:6e:c3:60:10:ce:77:44:37: a2:c1:d9:fe:81:71:1f:1b:a4:42:23:ae:96:ac:26: 26:df:27:f1:3f:17:c9:2a:23:83:c6:2e:33:81:5a: a4:45:f3:8f:76:13:a5:57:6a:48:02:2f:ea:0d:53: e0:57:34:6a:07:ad:c6:9f:d5:a0:e1:64:66:f4:d3: a7:b2:b6:43:86:62:eb:25:71:84:4f:c3:c8:6c:b3: 03:cc:7b:6b:c0:8b:42:2c:f9:28:fa:44:05:0e:71: 7e:21:21:b0:d8:80:af:69:6b:cb:1a:c0:06:13:60: 37:7e:82:e2:2d:b9:59:f4:d7:b9:53:72:87:9d:50: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:EF:DD:C3:76:2A:B2:AD:45:88:CB:7E:48:8B:D3:7F:96:AF:B1 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:06:f8:be:36:df:6d:f5:82:23:7a:85:13:8c:8f:0d:63:06: b7:fd:6b:71:1d:1c:f0:21:e3:ba:b1:33:2e:33:30:2d:7d:26: 0f:64:c1:cc:a3:d8:21:3f:01:db:9d:f6:d1:17:35:19:7d:05: 54:07:37:80:13:3e:a7:9f:dc:0b:ba:59:27:48:ec:15:22:1e: 3c:7b:da:73:78:b5:97:29:46:a5:55:a4:36:f2:cf:dc:5c:20: 5f:cb:ff:56:a1:df:83:d4:15:fc:ae:50:93:5c:c6:98:c1:ff: b7:2a:95:9f:fc:60:e8:5f:23:ba:d2:77:2c:06:82:d8:15:6c: 44:23:ad:0c:a1:67:65:c1:86:c9:6a:9e:69:3e:91:8e:de:d2: 90:72:fb:1c:f3:d5:8b:14:d8:69:0a:ea:bc:33:96:96:cb:96: ac:d4:21:dc:69:e4:e4:12:fc:79:0f:33:d8:e2:30:69:f6:7b: 59:42:55:39:f8:b5:03:37:8e:f2:04:29:56:4a:a0:f4:53:24: a8:2f:1e:1a:d6:07:2e:f3:c9:92:5a:cc:a2:7b:a2:f7:1c:e6: 74:e7:21:f7:e9:4d:d8:2a:da:61:3e:01:94:ee:2c:2e:c1:11: dc:ed:17:b2:5f:ca:76:00:f1:bc:50:8d:23:6d:fb:d2:60:a4: 7b:60:cd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjUxMTA0MjA0NjM4WhcNMjUxMTExMjA0NjM4WjAYMRYwFAYD VQQDEw02OTBhNjYyZS02NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTpZ4Y4MyvqdZORu330XjKluTHMMa70/ipvjfSDVK+gjhewKWE3fdUq+J8UG 3LZK6V7Ozeag/AgnnCKQ3AV1HXnoUjGxYEde6snZMQFz/75WAYX2RkoWrQDNs7tS evVR3pOZ+RHBzwyWPUUdpX1nYKgTTbltSyTmIbRVG65NbsNgEM53RDeiwdn+gXEf G6RCI66WrCYm3yfxPxfJKiODxi4zgVqkRfOPdhOlV2pIAi/qDVPgVzRqB63Gn9Wg 4WRm9NOnsrZDhmLrJXGET8PIbLMDzHtrwItCLPko+kQFDnF+ISGw2ICvaWvLGsAG E2A3foLiLblZ9Ne5U3KHnVA9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdI793D diqyrUWIy35Ii9N/lq+xMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHBvi+Nt9t9YIjeoUTjI8NYwa3/WtxHRzwIeO6sTMuMzAtfSYPZMHM o9ghPwHbnfbRFzUZfQVUBzeAEz6nn9wLulknSOwVIh48e9pzeLWXKUalVaQ28s/c XCBfy/9Wod+D1BX8rlCTXMaYwf+3KpWf/GDoXyO60ncsBoLYFWxEI60MoWdlwYbJ ap5pPpGO3tKQcvsc89WLFNhpCuq8M5aWy5as1CHcaeTkEvx5DzPY4jBp9ntZQlU5 +LUDN47yBClWSqD0UySoLx4a1gcu88mSWsyie6L3HOZ05yH36U3YKtphPgGU7iwu wRHc7ReyX8p2APG8UI0jbfvSYKR7YM1h -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:20 2025 by rpki-client