$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: pHLztXRRkAYpZ30BIZ5XM9RUoye7UnMYGFFZFRpZF7c= Subject key identifier: 32:03:B5:D7:2C:2B:A8:BF:0B:DA:A1:4E:9E:E6:F3:CE:DB:7A:CF:BD Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A46 Signing time: Tue 16 Sep 2025 19:57:08 +0000 Manifest this update: Tue 16 Sep 2025 19:57:07 +0000 Manifest next update: Tue 23 Sep 2025 19:57:07 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: f/+ykGh3z2Py5IhyNoWGH9WIFGtooKqhJjN+/JGtjTU=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 19:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Sep 16 19:57:07 2025 GMT Not After : Sep 23 19:57:07 2025 GMT Subject: CN=68c9c113-6b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:81:76:3d:99:f7:ff:b5:77:7f:57:05:8b:9f: 77:32:cd:30:3e:ca:d9:f5:36:3c:f3:a8:db:52:45: 54:78:c3:0f:39:c3:aa:48:05:75:5a:48:cf:8a:a4: 78:a2:fe:72:ce:31:4e:3b:da:93:fb:b9:06:dd:78: 9b:13:fa:71:5f:ee:3b:40:37:08:ff:12:20:80:f7: 65:36:4a:e3:b0:7c:18:dc:4b:37:e5:27:96:ad:e4: 98:86:ca:f7:8f:e5:cd:dd:db:ec:bc:c3:a8:39:3e: 6e:69:0e:73:ef:3d:73:95:73:44:d3:c9:8a:4f:a1: aa:7b:9f:ac:7c:18:f6:17:5a:b8:7e:78:96:38:8f: aa:4e:5b:b2:98:66:71:7f:35:73:47:7f:ad:20:87: 66:2c:da:e0:54:7d:12:33:e8:0b:56:a4:a8:b8:f3: db:ab:d3:e0:40:07:f2:ac:0b:a0:e9:14:cd:72:1c: fc:51:dc:26:0f:ee:ef:d0:56:23:8f:27:c6:c9:5b: 22:8c:3c:98:99:45:33:71:13:3d:cc:95:f8:0c:13: 5b:e0:eb:f3:0f:6c:43:69:64:13:fc:f2:23:b2:7e: 5c:2a:d8:5c:cf:10:88:99:e9:96:a9:07:ac:85:28: 4f:fa:36:56:23:ef:e5:3b:fa:a9:3f:6b:e6:f3:da: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:03:B5:D7:2C:2B:A8:BF:0B:DA:A1:4E:9E:E6:F3:CE:DB:7A:CF:BD X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bb:e7:1f:5b:d7:9d:ec:c0:d2:63:1a:27:15:67:e3:cd:0a: 32:47:2f:03:37:2a:64:e9:b5:3d:1a:5f:a7:5f:71:04:90:71: 09:e0:59:cb:13:0e:09:04:13:a3:52:c1:9f:ea:57:1c:44:7e: b0:af:7c:60:b4:73:9c:d8:10:b2:77:ca:21:a8:c3:2e:18:f4: fa:f2:e1:65:44:15:d5:a5:69:90:b3:db:02:98:55:0e:be:23: 93:6b:56:d6:5a:3c:46:80:2b:c8:43:9e:b9:a5:61:9b:53:09: 73:15:c6:3e:8c:2b:5e:2b:85:7d:c7:68:95:e6:11:76:5b:3d: b4:e0:f6:fe:8d:2c:28:7b:22:98:c1:4e:35:00:0a:1a:54:f6: 79:89:70:9d:02:86:3b:25:1a:85:05:6c:44:94:f9:e4:35:ba: d6:36:c1:6c:b2:03:a9:e1:2d:fd:e0:fd:84:b8:42:87:70:31: 6a:4b:31:3b:eb:4d:da:49:74:48:04:be:50:15:f4:9b:46:33: 1d:ec:7d:51:8d:be:ed:57:84:8c:98:3c:ca:84:dc:7d:89:2d: 68:3f:93:ba:b1:82:37:3e:d1:9d:5b:0d:e3:c9:13:87:76:67: 00:a1:09:b7:b1:a4:b8:b1:c5:23:c9:9a:a2:5f:e3:2c:7a:5a: a6:84:56:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUwOTE2MTk1NzA3WhcNMjUwOTIzMTk1NzA3WjAYMRYwFAYD VQQDEw02OGM5YzExMy02Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YF2PZn3/7V3f1cFi593Ms0wPsrZ9TY886jbUkVUeMMPOcOqSAV1WkjPiqR4 ov5yzjFOO9qT+7kG3XibE/pxX+47QDcI/xIggPdlNkrjsHwY3Es35SeWreSYhsr3 j+XN3dvsvMOoOT5uaQ5z7z1zlXNE08mKT6Gqe5+sfBj2F1q4fniWOI+qTluymGZx fzVzR3+tIIdmLNrgVH0SM+gLVqSouPPbq9PgQAfyrAug6RTNchz8UdwmD+7v0FYj jyfGyVsijDyYmUUzcRM9zJX4DBNb4OvzD2xDaWQT/PIjsn5cKthczxCImemWqQes hShP+jZWI+/lO/qpP2vm89qBPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIDtdcs K6i/C9qhTp7m887bes+9MB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPu+cfW9ed7MDSYxonFWfjzQoyRy8DNypk6bU9Gl+nX3EEkHEJ4FnL Ew4JBBOjUsGf6lccRH6wr3xgtHOc2BCyd8ohqMMuGPT68uFlRBXVpWmQs9sCmFUO viOTa1bWWjxGgCvIQ565pWGbUwlzFcY+jCteK4V9x2iV5hF2Wz204Pb+jSwoeyKY wU41AAoaVPZ5iXCdAoY7JRqFBWxElPnkNbrWNsFssgOp4S394P2EuEKHcDFqSzE7 603aSXRIBL5QFfSbRjMd7H1Rjb7tV4SMmDzKhNx9iS1oP5O6sYI3PtGdWw3jyROH dmcAoQm3saS4scUjyZqiX+MselqmhFaB -----END CERTIFICATE-----Generated at Thu Sep 18 20:32:30 2025 by rpki-client