$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft File: oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json) Hash identifier: +ykbxjWJ2ARvC8dij2oA8LcxPUKHo2H4gJ3LulVtaoQ= Subject key identifier: 02:CA:C9:D1:7B:15:3B:58:8F:6B:62:05:38:A8:69:8B:B1:AC:F6:A9 Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft Manifest number: 01BE Signing time: Mon 03 Nov 2025 02:57:44 +0000 Manifest this update: Mon 03 Nov 2025 02:57:43 +0000 Manifest next update: Mon 10 Nov 2025 02:57:43 +0000 Files and hashes: 1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: 5FxBhDf0z3y/oIDZSkXnKjKHGJcbGd63h8A5RPni21Q=) 2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: e38NftZeclZtbzcVCk509TYbTR+zv3+tyooBUtjix+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Validity Not Before: Nov 3 02:57:43 2025 GMT Not After : Nov 10 02:57:43 2025 GMT Subject: CN=69081a28-9ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:5c:5e:63:67:43:46:5a:dd:e3:60:82:7c: 3d:5a:77:6a:f4:70:7d:60:c8:d2:fd:0f:96:52:c3: e5:8a:d7:56:38:d4:5b:50:7d:22:73:a5:c6:bb:f0: 4b:14:b9:43:bf:5c:df:a1:0e:fa:f1:6c:a1:5f:5a: 80:bb:66:28:6b:d6:7e:b0:01:bd:c6:41:15:f2:7d: 9d:b2:e8:ee:75:81:56:fe:a7:98:74:e8:ef:45:a9: 49:af:ad:e6:bb:18:6e:fc:f0:19:63:7f:1d:d7:96: b1:b4:34:78:0a:6b:7e:08:5e:62:cc:d0:ae:f8:97: 6d:d4:93:62:33:e8:2d:2c:6b:61:ff:77:c2:63:9e: 7b:01:c6:60:9f:9d:24:b5:c8:51:b4:2a:da:8c:07: 7e:e5:50:a3:3c:79:e3:02:fe:0f:7c:91:53:05:ec: fd:b1:60:65:8b:81:5f:7c:d2:59:9c:37:e9:d3:1b: ef:39:72:4f:60:3e:cd:c7:5b:11:7e:fe:e5:24:04: 4e:9f:44:31:99:14:64:14:3f:4b:16:37:1e:84:88: ab:6c:2c:f7:d4:da:a9:d5:3d:28:50:f1:88:15:85: 4f:82:c1:4b:f6:f3:8f:e7:78:fb:5e:c2:8e:2b:2c: 57:6b:f9:d7:87:2e:ee:38:08:7f:5e:01:6b:ac:9c: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:C9:D1:7B:15:3B:58:8F:6B:62:05:38:A8:69:8B:B1:AC:F6:A9 X509v3 Authority Key Identifier: keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:62:1b:0b:a7:99:91:1e:bf:3e:8f:ed:4b:47:c9:90:aa:ed: 71:b0:21:55:92:84:14:9a:04:c4:a7:30:fd:de:be:6e:c4:50: ff:78:81:36:75:8e:92:f6:70:b0:28:1e:ff:c2:20:50:c5:20: 97:92:24:69:21:4e:b0:ab:2d:01:03:2a:7d:3b:d6:28:81:58: b9:6f:a1:1e:94:10:0c:f0:05:7a:6b:5c:31:2d:83:86:9e:78: e9:5c:76:dc:b5:23:c8:67:5d:74:08:e9:0e:63:5a:c1:34:2d: 6a:c1:75:02:9c:56:09:58:d4:71:61:99:e2:1a:5b:31:9f:be: 80:8a:5e:98:f3:88:c3:72:98:a2:18:0c:d3:4c:f3:44:7c:97: af:3a:1f:10:53:15:da:1b:3c:e4:0c:52:5c:bb:76:2b:2d:da: f1:46:be:50:f5:d9:98:b5:9e:35:ce:24:b3:80:c5:26:45:b5: 25:be:9c:da:53:cf:d9:7a:9d:ab:39:38:87:4a:f2:e8:37:ea: 1f:80:36:45:52:a9:56:fc:f2:df:11:e9:80:a8:5a:5d:29:b9: a3:79:57:76:24:b8:02:3d:6e:77:ce:8b:29:c6:05:c1:1d:9d: 3d:9a:5f:f3:07:15:b7:47:b4:8a:82:52:06:df:39:2f:e0:da: 34:c8:98:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyMEUxMTAvBgNVBAUTKEEyOERBMEJFOTAxRDk4M0E0MzNEODMzNTg5RDE2N0JG NDg2RjY0RkMwHhcNMjUxMTAzMDI1NzQzWhcNMjUxMTEwMDI1NzQzWjAYMRYwFAYD VQQDEw02OTA4MWEyOC05YWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxtcXmNnQ0Za3eNggnw9Wndq9HB9YMjS/Q+WUsPlitdWONRbUH0ic6XGu/BL FLlDv1zfoQ768WyhX1qAu2Yoa9Z+sAG9xkEV8n2dsujudYFW/qeYdOjvRalJr63m uxhu/PAZY38d15axtDR4Cmt+CF5izNCu+Jdt1JNiM+gtLGth/3fCY557AcZgn50k tchRtCrajAd+5VCjPHnjAv4PfJFTBez9sWBli4FffNJZnDfp0xvvOXJPYD7Nx1sR fv7lJAROn0QxmRRkFD9LFjcehIirbCz31Nqp1T0oUPGIFYVPgsFL9vOP53j7XsKO KyxXa/nXhy7uOAh/XgFrrJzfuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALKydF7 FTtYj2tiBTioaYuxrPapMB8GA1UdIwQYMBaAFKKNoL6QHZg6Qz2DNYnRZ79Ib2T8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzIwRS81RTUxRDQ1QzA5 RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1EcERQWU0xaWRGbnYwaHZa UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vMmd2cEFkbURwRFBZTTFpZEZudjBodlpQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzIwRS81RTUxRDQ1QzA5RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1E cERQWU0xaWRGbnYwaHZaUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYYhsLp5mRHr8+j+1LR8mQqu1xsCFVkoQUmgTEpzD93r5uxFD/eIE2 dY6S9nCwKB7/wiBQxSCXkiRpIU6wqy0BAyp9O9YogVi5b6EelBAM8AV6a1wxLYOG nnjpXHbctSPIZ110COkOY1rBNC1qwXUCnFYJWNRxYZniGlsxn76Ail6Y84jDcpii GAzTTPNEfJevOh8QUxXaGzzkDFJcu3YrLdrxRr5Q9dmYtZ41ziSzgMUmRbUlvpza U8/Zep2rOTiHSvLoN+ofgDZFUqlW/PLfEemAqFpdKbmjeVd2JLgCPW53zospxgXB HZ09ml/zBxW3R7SKglIG3zkv4No0yJin -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:25 2025 by rpki-client