$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: fpWkb2cuDuAFzjgazIALJwraWVhfM4X/9W0gd/DZOJQ= Subject key identifier: 4B:99:80:29:60:9C:0A:B7:F1:D7:CB:38:A8:AA:F1:0B:AE:0B:34:A4 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D7F Signing time: Fri 24 Oct 2025 16:25:48 +0000 Manifest this update: Fri 24 Oct 2025 16:25:47 +0000 Manifest next update: Fri 31 Oct 2025 16:25:47 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: 5CssukVVyUhpbL9A8fQewTRu4GNaCnZIMp2XMyowx7o=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7566 (0x1d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Oct 24 16:25:47 2025 GMT Not After : Oct 31 16:25:47 2025 GMT Subject: CN=68fba88c-c50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:97:b9:66:d8:dc:f1:fa:85:70:ea:04:d5: 92:76:10:b5:24:b6:64:c9:d9:a9:0c:5b:1e:7b:ff: bb:de:5c:1b:f5:4d:38:61:70:52:77:8e:04:ab:83: 14:f3:12:b1:a9:c9:f5:cd:7a:2f:a9:b6:71:5c:21: 14:df:b7:f9:4a:fe:f6:ea:06:8f:11:96:f4:d9:1f: e8:17:8f:ac:51:79:a1:16:de:6b:80:03:55:2e:bf: 0f:66:3a:57:47:d6:45:8e:4c:a6:92:65:33:82:c6: 48:ae:81:09:66:23:28:a7:e5:53:79:46:2c:5c:b0: b6:b4:47:cb:7e:87:52:48:f4:a7:d8:e9:35:0c:eb: 61:ee:dc:a8:4b:61:1e:40:0f:dd:fc:6f:87:5e:3d: 64:1e:95:bb:d5:14:f8:53:5c:77:3f:62:d4:80:5c: ac:d4:4f:c8:12:09:36:f7:1d:a9:7b:4b:b2:0c:12: f0:9b:cd:c5:59:40:0c:e5:f8:bf:0b:a9:7e:9b:0a: 9d:b9:4e:67:8f:e1:7f:ed:34:84:8e:b5:88:7a:e0: 22:76:42:dc:97:51:cd:de:70:e2:eb:ad:62:29:10: 12:8d:6a:b7:11:5b:db:a7:25:02:aa:38:67:66:70: 2d:af:83:ef:c3:e6:1b:91:40:7f:cb:ea:14:08:e5: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:99:80:29:60:9C:0A:B7:F1:D7:CB:38:A8:AA:F1:0B:AE:0B:34:A4 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b0:bd:ed:8e:18:08:35:38:c1:81:72:e8:b5:0f:36:e2:48: 98:8a:d0:56:7a:a4:06:aa:d6:3b:4e:db:f3:5a:ab:f4:62:76: d2:6d:e5:5e:92:04:d7:0e:eb:30:e8:21:ba:de:4d:45:58:89: d7:26:33:48:fe:0e:eb:53:64:b2:42:ff:3d:99:79:ab:0e:31: d1:1a:08:cf:62:ee:a7:64:0c:b9:c8:0b:57:95:fe:b4:8c:ea: ca:a1:95:49:31:da:8c:8c:28:2b:fb:75:f4:1c:f8:ea:e6:66: d8:3e:8e:c1:c4:46:7d:e7:2f:f2:87:d6:29:a8:e9:bb:d8:00: 4c:40:6a:7b:b3:02:ed:91:f4:91:14:ea:a1:55:12:c1:35:05: 05:c1:12:30:b2:91:3f:f1:63:27:16:91:ff:0c:d5:3f:66:ad: 48:b9:f1:6a:79:57:58:01:95:01:29:de:12:bc:32:cc:dd:20: e9:20:f2:7a:d3:7b:e3:d9:13:17:97:13:e3:95:1a:d0:dc:3f: 97:7f:8f:e5:54:59:8a:ce:2c:9e:05:76:0b:37:01:23:f4:83: 39:a2:1d:70:0f:3e:ba:3c:d9:ce:e0:bf:a2:82:23:a0:38:65: 16:c7:1e:7d:ca:0d:54:83:f1:d5:34:e6:c9:17:c4:fa:65:27: fa:14:79:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUxMDI0MTYyNTQ3WhcNMjUxMDMxMTYyNTQ3WjAYMRYwFAYD VQQDEw02OGZiYTg4Yy1jNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPqXuWbY3PH6hXDqBNWSdhC1JLZkydmpDFsee/+73lwb9U04YXBSd44Eq4MU 8xKxqcn1zXovqbZxXCEU37f5Sv726gaPEZb02R/oF4+sUXmhFt5rgANVLr8PZjpX R9ZFjkymkmUzgsZIroEJZiMop+VTeUYsXLC2tEfLfodSSPSn2Ok1DOth7tyoS2Ee QA/d/G+HXj1kHpW71RT4U1x3P2LUgFys1E/IEgk29x2pe0uyDBLwm83FWUAM5fi/ C6l+mwqduU5nj+F/7TSEjrWIeuAidkLcl1HN3nDi661iKRASjWq3EVvbpyUCqjhn ZnAtr4Pvw+YbkUB/y+oUCOUANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuZgClg nAq38dfLOKiq8QuuCzSkMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZsL3tjhgINTjBgXLotQ824kiYitBWeqQGqtY7TtvzWqv0YnbSbeVe kgTXDusw6CG63k1FWInXJjNI/g7rU2SyQv89mXmrDjHRGgjPYu6nZAy5yAtXlf60 jOrKoZVJMdqMjCgr+3X0HPjq5mbYPo7BxEZ95y/yh9YpqOm72ABMQGp7swLtkfSR FOqhVRLBNQUFwRIwspE/8WMnFpH/DNU/Zq1IufFqeVdYAZUBKd4SvDLM3SDpIPJ6 03vj2RMXlxPjlRrQ3D+Xf4/lVFmKziyeBXYLNwEj9IM5oh1wDz66PNnO4L+igiOg OGUWxx59yg1Ug/HVNObJF8T6ZSf6FHna -----END CERTIFICATE-----Generated at Sun Oct 26 05:19:55 2025 by rpki-client