$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: j5LeWvQER4rElXWiL0kY49vHRB+M53GrdnNx+faYctw= Subject key identifier: 57:76:3B:99:78:4F:52:16:BB:B5:43:5B:45:80:00:C3:05:FD:17:3A Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08CB Signing time: Sun 02 Nov 2025 20:23:24 +0000 Manifest this update: Sun 02 Nov 2025 20:23:24 +0000 Manifest next update: Sun 09 Nov 2025 20:23:24 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: IeXXs+vhaevH6GaKM1s7b9eb5+S9YXYYpOwQkDLUT/Q=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Nov 2 20:23:24 2025 GMT Not After : Nov 9 20:23:24 2025 GMT Subject: CN=6907bdbc-8468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:ef:30:e7:72:a8:1d:64:a8:b8:45:f3:f6: ce:20:8b:c9:10:dd:87:e6:d6:6a:fa:a3:4a:de:2f: 54:fb:5e:66:da:d8:ce:0e:e5:7c:a3:17:e9:66:c3: 68:9e:a1:7c:6e:31:d5:5e:34:fd:cb:b9:d6:e5:5d: b9:d8:b4:49:85:f8:af:07:dd:d7:e4:19:8e:24:dc: fb:24:f8:97:60:1a:1c:45:40:9a:6e:81:e0:ff:6f: 81:7c:11:f8:49:0f:82:37:e6:3e:a6:54:2d:86:62: 9c:c5:c7:c5:57:3f:37:4d:9a:ce:1d:14:62:e1:03: 22:0b:cf:d0:ab:f3:1b:0b:78:e0:66:83:99:96:ad: 0c:40:d6:39:02:bc:be:19:49:cc:7c:0c:b7:66:9c: 5e:97:88:98:d3:fe:e0:7b:bb:8e:db:be:e2:92:96: 38:b6:94:8f:99:51:f7:3a:42:ab:25:1c:e4:1b:fa: 97:be:ec:a2:27:66:dc:79:af:ce:5c:ab:63:1c:81: 5e:f6:1e:59:95:90:45:25:00:2c:7c:20:e8:f0:44: 12:ef:58:d6:60:72:75:b5:31:7f:8a:54:14:ab:c6: d4:2a:e6:8f:38:da:a9:b5:b2:02:55:b5:fc:59:f4: 63:22:c5:61:e8:ce:31:1f:a1:ee:89:8a:5b:94:25: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:3B:99:78:4F:52:16:BB:B5:43:5B:45:80:00:C3:05:FD:17:3A X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:2c:45:5c:51:36:00:16:a8:b9:02:3b:40:18:7a:3f:12: 28:7e:3c:89:97:a0:21:1f:aa:3c:d1:9e:c3:25:34:ce:62:06: ce:2d:cf:40:20:02:b1:f0:58:bb:ea:c5:42:f7:5d:27:5f:91: ef:d2:77:f4:49:03:23:11:5a:4d:10:5e:55:5d:d5:ec:fb:88: f7:19:59:e9:4d:eb:8e:00:97:72:65:a2:05:fa:6f:df:8b:4d: 5b:aa:71:cb:77:e2:f8:3c:e7:53:b7:63:05:95:fb:14:7c:0e: ce:a2:56:ac:40:7b:93:ca:51:6f:b1:2e:4b:55:6b:09:ed:11: af:0e:0f:cf:99:01:a9:1a:b6:f9:b3:53:ca:f1:f5:55:24:b8: a6:e2:b2:b9:b8:4a:25:d9:6d:93:bc:f1:97:f1:98:c6:c7:af: 3d:d3:3e:d4:a6:2c:b1:67:9b:d6:50:8a:40:7c:ed:4f:df:bb: 26:fc:9b:e3:10:62:bb:fa:48:51:16:8d:05:a8:e8:ce:9e:b4: 14:67:9d:93:c7:11:f5:96:46:b3:c2:3c:20:15:85:eb:3f:96: b4:c9:d3:11:53:f1:d3:ae:b7:7c:ab:e7:8d:bb:99:43:03:fe: 5f:08:79:b4:7a:99:22:41:35:0d:77:ee:f1:a5:aa:aa:7e:e9: 33:68:03:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUxMTAyMjAyMzI0WhcNMjUxMTA5MjAyMzI0WjAYMRYwFAYD VQQDEw02OTA3YmRiYy04NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUHvMOdyqB1kqLhF8/bOIIvJEN2H5tZq+qNK3i9U+15m2tjODuV8oxfpZsNo nqF8bjHVXjT9y7nW5V252LRJhfivB93X5BmOJNz7JPiXYBocRUCaboHg/2+BfBH4 SQ+CN+Y+plQthmKcxcfFVz83TZrOHRRi4QMiC8/Qq/MbC3jgZoOZlq0MQNY5Ary+ GUnMfAy3Zpxel4iY0/7ge7uO277ikpY4tpSPmVH3OkKrJRzkG/qXvuyiJ2bcea/O XKtjHIFe9h5ZlZBFJQAsfCDo8EQS71jWYHJ1tTF/ilQUq8bUKuaPONqptbICVbX8 WfRjIsVh6M4xH6HuiYpblCXATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd2O5l4 T1IWu7VDW0WAAMMF/Rc6MB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymyxFXFE2ABaouQI7QBh6PxIofjyJl6AhH6o80Z7DJTTOYgbOLc9A IAKx8Fi76sVC910nX5Hv0nf0SQMjEVpNEF5VXdXs+4j3GVnpTeuOAJdyZaIF+m/f i01bqnHLd+L4POdTt2MFlfsUfA7OolasQHuTylFvsS5LVWsJ7RGvDg/PmQGpGrb5 s1PK8fVVJLim4rK5uEol2W2TvPGX8ZjGx6890z7UpiyxZ5vWUIpAfO1P37sm/Jvj EGK7+khRFo0FqOjOnrQUZ52TxxH1lkazwjwgFYXrP5a0ydMRU/HTrrd8q+eNu5lD A/5fCHm0epkiQTUNd+7xpaqqfukzaAO0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:05 2025 by rpki-client