$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: tSJnCzjaUkMkeYQ/X4W16bbwT4Y+iRJZn8c+swsePI8= Subject key identifier: 96:FE:EE:B3:E7:D6:8F:42:01:F4:E9:72:65:9A:4C:83:CB:FC:84:5F Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A5F Signing time: Tue 04 Nov 2025 19:47:34 +0000 Manifest this update: Tue 04 Nov 2025 19:47:34 +0000 Manifest next update: Tue 11 Nov 2025 19:47:34 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: ylO5UvN/84ZTwVseST9vERV8u+7QVxRLxNkJLNcOrxY=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Nov 4 19:47:34 2025 GMT Not After : Nov 11 19:47:34 2025 GMT Subject: CN=690a5856-812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:79:a4:a8:17:b2:59:03:19:df:12:0e:93: 34:8b:10:d0:6e:ae:21:82:49:c5:2f:ad:47:76:71: b0:92:ce:15:7f:3c:7c:12:bc:2c:30:d8:3c:4f:86: 18:1a:42:eb:ec:b8:b8:15:25:70:eb:92:21:f4:63: dc:5f:77:34:af:78:0b:85:fc:f3:df:b8:94:fd:3d: 31:0f:02:93:81:37:07:8b:86:60:23:ae:bd:12:fb: 6c:7a:59:e6:c5:65:50:aa:ec:1c:84:03:2e:11:75: b2:75:48:6d:78:b0:58:9d:7b:44:86:11:15:c2:bd: e0:0d:a7:5b:6b:c5:a7:25:1d:1a:4e:5b:9e:a9:0b: 85:61:03:9d:61:6f:dd:52:e6:3f:dc:a0:5e:fb:91: e7:12:6e:7a:dc:fd:84:37:4d:9e:e3:3c:d2:f3:74: 64:a5:ba:fe:1c:77:44:bd:ca:fd:f3:f7:cf:27:31: a8:a2:c4:bb:c0:49:3e:55:06:00:77:0d:6c:cb:40: f4:bd:13:a0:6f:aa:90:28:a4:43:65:53:30:56:74: a9:be:9a:f8:a5:d9:36:b7:dc:26:a9:9c:0b:cc:b6: a9:75:98:91:53:81:88:99:47:3f:65:e3:e6:dc:48: 80:f0:4b:59:fc:2b:41:3e:0c:86:89:6c:6c:07:f6: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:EE:B3:E7:D6:8F:42:01:F4:E9:72:65:9A:4C:83:CB:FC:84:5F X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:2c:f5:c7:05:fe:94:e5:5e:13:35:bf:5b:46:f6:bc:16: d2:ad:4f:6b:e5:36:ff:ea:5b:b7:7f:1a:63:4b:04:34:06:a5: 2f:6f:bd:35:e6:ec:f6:7a:34:4c:7a:04:e5:73:56:82:40:f8: d4:b7:4b:ae:f5:a4:fe:41:a9:02:a4:91:c0:ff:57:30:7c:40: 56:3f:8b:20:2a:4b:f7:ee:d8:6a:5c:9a:43:02:bc:87:83:c0: 6a:be:d3:16:b7:a2:14:1b:b3:b5:a0:5c:2f:8a:cc:9b:8f:99: 25:cc:48:0d:1e:47:51:95:e9:2a:a1:92:39:50:d7:5f:a5:52: f3:12:27:84:38:56:fe:19:40:5c:28:f8:ed:77:17:b8:59:37: 38:64:15:c9:c6:64:68:e3:bd:3f:82:50:cd:c2:94:d9:55:71: 6b:f2:58:c6:e7:eb:6a:4d:cb:d4:89:a9:45:dc:5a:83:04:a1: 38:4e:17:37:03:4f:c8:8c:c7:7d:e4:b4:f6:67:c7:ac:c0:a9: 3e:74:b6:22:bb:1a:9b:3e:a3:2f:b7:b9:68:5e:8f:de:7a:c1: ff:60:62:28:e5:5e:a7:db:45:7a:72:f5:e3:c6:d6:5d:7a:a4: 5d:92:e2:d9:4e:66:41:91:aa:44:8e:7b:e4:d6:e3:66:89:c6: 8d:e5:a2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUxMTA0MTk0NzM0WhcNMjUxMTExMTk0NzM0WjAYMRYwFAYD VQQDEw02OTBhNTg1Ni04MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsJ5pKgXslkDGd8SDpM0ixDQbq4hgknFL61HdnGwks4Vfzx8ErwsMNg8T4YY GkLr7Li4FSVw65Ih9GPcX3c0r3gLhfzz37iU/T0xDwKTgTcHi4ZgI669Evtselnm xWVQquwchAMuEXWydUhteLBYnXtEhhEVwr3gDadba8WnJR0aTlueqQuFYQOdYW/d UuY/3KBe+5HnEm563P2EN02e4zzS83Rkpbr+HHdEvcr98/fPJzGoosS7wEk+VQYA dw1sy0D0vROgb6qQKKRDZVMwVnSpvpr4pdk2t9wmqZwLzLapdZiRU4GImUc/ZePm 3EiA8EtZ/CtBPgyGiWxsB/ZZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb+7rPn 1o9CAfTpcmWaTIPL/IRfMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJSz1xwX+lOVeEzW/W0b2vBbSrU9r5Tb/6lu3fxpjSwQ0BqUvb701 5uz2ejRMegTlc1aCQPjUt0uu9aT+QakCpJHA/1cwfEBWP4sgKkv37thqXJpDAryH g8BqvtMWt6IUG7O1oFwvisybj5klzEgNHkdRlekqoZI5UNdfpVLzEieEOFb+GUBc KPjtdxe4WTc4ZBXJxmRo470/glDNwpTZVXFr8ljG5+tqTcvUialF3FqDBKE4Thc3 A0/IjMd95LT2Z8eswKk+dLYiuxqbPqMvt7loXo/eesH/YGIo5V6n20V6cvXjxtZd eqRdkuLZTmZBkapEjnvk1uNmicaN5aKs -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:40 2025 by rpki-client