$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: pTXcvtFczqrmhrKOwsOsvS4K4Z61TW8X5eGOLIL5lP4= Subject key identifier: 7B:52:AA:86:E5:49:0E:13:79:60:0C:BF:87:F4:DB:39:A6:3E:F3:C6 Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 05F8 Signing time: Tue 04 Nov 2025 22:59:35 +0000 Manifest this update: Tue 04 Nov 2025 22:59:34 +0000 Manifest next update: Tue 11 Nov 2025 22:59:34 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: kYlxrMuvAAlgoRQIM9iPmGe/zov6Jl25U/kCN04q58g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: Nov 4 22:59:34 2025 GMT Not After : Nov 11 22:59:34 2025 GMT Subject: CN=690a8556-f5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:e2:78:1d:7b:4d:50:17:79:0d:ba:09:05: 44:d6:d0:14:3f:ae:a0:96:69:5e:c4:3a:f5:2f:e6: 03:f7:a3:3a:9b:d3:fc:23:c2:f9:35:b8:a3:31:9b: f4:17:6a:04:1e:c8:7c:e4:24:cd:6b:c2:ba:9a:95: ee:3c:fa:86:7a:05:ff:e7:41:4f:7a:ae:f8:4e:6e: a3:a2:22:5d:8f:b6:5f:e2:66:72:11:81:07:a1:5f: 80:01:03:d9:76:21:ca:74:f2:f3:53:6d:4b:30:1d: 5b:92:cb:25:eb:07:6a:0f:86:95:49:40:eb:56:9a: e0:5e:fe:a2:d0:92:33:81:e6:e7:1c:2c:93:0f:c1: 0e:2b:75:48:1f:1a:78:59:e7:76:84:2b:12:df:d7: b1:af:e2:50:80:e7:05:88:e4:4b:9e:05:25:8f:cd: 4b:7c:7b:0e:12:4f:c0:74:35:91:f0:b1:a8:de:c6: d7:3e:f2:97:0f:ea:c2:5d:7e:ea:10:08:17:78:ff: 95:ff:83:ea:c9:be:f3:67:55:46:39:ce:ec:72:dd: 38:56:f3:f8:14:90:49:a0:db:5e:6d:3d:d9:33:de: 70:cb:f4:30:3f:92:5e:a4:e6:16:48:87:6b:cb:0e: 26:a8:ac:ec:21:1e:4f:23:20:22:19:5b:bd:fc:5f: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:AA:86:E5:49:0E:13:79:60:0C:BF:87:F4:DB:39:A6:3E:F3:C6 X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b9:44:ce:9a:99:d9:39:59:21:19:31:2e:70:b8:87:d6:bf: 67:f2:bd:f8:0b:61:b4:7e:b6:4d:ef:38:e9:bd:be:7b:e3:29: 03:65:79:0c:2d:7e:a2:0a:95:9d:fc:e1:41:36:2f:46:43:19: 65:92:de:93:1a:11:91:ad:d2:65:87:16:80:26:cf:02:a8:8d: 28:4b:8d:a3:3b:7d:25:66:a8:62:fa:56:e1:6c:cd:53:36:62: de:7a:11:07:2d:84:0a:b6:04:e1:e2:b0:f9:30:21:0a:0c:9e: 92:61:e2:d1:20:9c:32:b3:9b:6d:fa:dd:81:f7:28:c2:e7:5f: 84:58:8c:c9:f2:d4:d8:a4:88:49:79:b8:99:6e:c2:5d:9a:a4: 4e:b4:56:61:de:e8:86:24:2a:93:86:c8:1f:a6:46:fe:03:85: 4a:b1:26:3c:fd:5f:a5:07:e8:d1:cf:95:47:fa:25:8a:f0:dc: c9:90:d2:25:ac:c1:57:bc:fc:19:4c:bb:73:b1:91:b3:9a:e8: de:54:2a:af:77:45:33:95:70:21:24:35:9d:9e:e8:54:11:1f: f4:db:4e:34:2e:0c:e2:6f:83:20:4a:f3:21:a7:b7:1f:5a:65: 1f:07:69:65:1c:13:4a:7b:05:26:f9:74:63:fe:51:81:07:56: e3:f3:28:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjUxMTA0MjI1OTM0WhcNMjUxMTExMjI1OTM0WjAYMRYwFAYD VQQDEw02OTBhODU1Ni1mNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJHieB17TVAXeQ26CQVE1tAUP66glmlexDr1L+YD96M6m9P8I8L5NbijMZv0 F2oEHsh85CTNa8K6mpXuPPqGegX/50FPeq74Tm6joiJdj7Zf4mZyEYEHoV+AAQPZ diHKdPLzU21LMB1bkssl6wdqD4aVSUDrVprgXv6i0JIzgebnHCyTD8EOK3VIHxp4 Wed2hCsS39exr+JQgOcFiORLngUlj81LfHsOEk/AdDWR8LGo3sbXPvKXD+rCXX7q EAgXeP+V/4Pqyb7zZ1VGOc7sct04VvP4FJBJoNtebT3ZM95wy/QwP5JepOYWSIdr yw4mqKzsIR5PIyAiGVu9/F+5jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtSqobl SQ4TeWAMv4f02zmmPvPGMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOuUTOmpnZOVkhGTEucLiH1r9n8r34C2G0frZN7zjpvb574ykDZXkM LX6iCpWd/OFBNi9GQxllkt6TGhGRrdJlhxaAJs8CqI0oS42jO30lZqhi+lbhbM1T NmLeehEHLYQKtgTh4rD5MCEKDJ6SYeLRIJwys5tt+t2B9yjC51+EWIzJ8tTYpIhJ ebiZbsJdmqROtFZh3uiGJCqThsgfpkb+A4VKsSY8/V+lB+jRz5VH+iWK8NzJkNIl rMFXvPwZTLtzsZGzmujeVCqvd0UzlXAhJDWdnuhUER/02040Lgzib4MgSvMhp7cf WmUfB2llHBNKewUm+XRj/lGBB1bj8yge -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:49 2025 by rpki-client