$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json) Hash identifier: V6wleQNT9mkEaxIQL+M4u2ZDLZVNU0aVu3gPG+g4IS0= Subject key identifier: 86:69:50:4F:32:03:38:69:26:61:2F:14:4D:19:80:98:68:1D:19:9D Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft Manifest number: 14FF Signing time: Sun 02 Nov 2025 18:40:27 +0000 Manifest this update: Sun 02 Nov 2025 18:40:26 +0000 Manifest next update: Sun 09 Nov 2025 18:40:26 +0000 Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: oa+gpXbEfe6AykRkZy7906SLEzP5k3J2DpQ7TJp3JkQ=) 2: F6EC251224E711F087B2F571C4F9AE02.roa (hash: ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=) 3: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Nov 2 18:40:26 2025 GMT Not After : Nov 9 18:40:26 2025 GMT Subject: CN=6907a59b-e20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:42:35:07:51:17:c6:8d:af:e3:36:26:f0: 37:ad:dd:7f:61:7b:07:f9:93:2c:c8:2d:77:f7:8d: 41:71:f3:5c:c4:93:29:60:af:16:b2:9f:7f:66:a6: 1c:11:0e:e7:f0:e0:59:84:d2:30:1c:48:a4:26:7e: e0:41:8a:34:3a:27:6b:92:02:1e:65:08:84:99:e1: a3:c9:d1:a6:6c:3a:d8:de:c0:65:0d:50:01:ab:5d: 6e:31:8e:c4:59:83:b1:5e:36:3f:22:95:bc:e3:09: b8:98:ca:d3:b7:e3:12:28:9b:f2:e6:0e:97:23:41: bb:d1:b8:7c:eb:9e:a6:27:6c:f1:7b:86:bb:e2:a8: ed:13:2a:c0:cd:83:f2:94:b0:58:94:70:2c:fd:d5: 39:06:ef:8d:71:20:21:d2:28:64:ff:b7:9b:f0:07: 9e:6a:ac:a6:45:34:d7:2c:be:37:fe:cc:f1:08:95: 41:fd:25:e5:58:42:e3:aa:49:57:11:58:d3:9c:54: 80:b2:9a:c8:cb:b9:45:b5:72:f9:ff:a8:68:71:a8: 39:c2:9b:ba:92:81:68:76:e9:85:24:49:a4:00:f7: b7:26:dd:77:f9:86:ac:73:fe:6d:d4:32:f9:02:a6: d5:5f:84:0b:f4:04:bb:df:1f:ed:23:9d:f0:d1:e2: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:69:50:4F:32:03:38:69:26:61:2F:14:4D:19:80:98:68:1D:19:9D X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d7:43:28:63:c1:64:4a:1c:55:9e:ed:f8:e7:d1:08:60:4d: 8e:de:a2:b3:61:8e:b9:bf:1a:2c:eb:ee:fe:56:5b:9b:58:c0: 4c:c5:be:b1:6f:fe:19:45:38:7e:e5:7a:d3:f5:bd:fd:36:c0: bc:60:d5:58:04:02:56:35:cd:9e:59:3a:ad:91:9a:c0:04:11: d3:5b:57:81:cf:43:3d:6d:d3:92:8d:c4:35:10:16:a5:95:ea: 2a:82:7d:b3:75:0a:75:f6:32:5b:5f:e8:61:b0:31:3c:f7:42: 05:54:c9:83:f0:3b:17:52:dd:ef:13:5f:52:d2:f9:9a:d4:08: 59:6e:80:5c:60:1a:c1:60:61:d2:d9:eb:72:39:1f:f0:92:bf: 71:8a:e4:c5:73:45:da:b9:68:77:f1:b6:78:19:41:f8:69:d1: 76:64:c0:04:21:e2:06:72:f1:ce:19:eb:22:f1:8f:af:43:ca: 91:fe:09:76:b6:d0:66:10:38:7c:c9:c2:66:b4:dc:5d:f4:41: 49:2a:ab:bd:a5:98:12:4d:51:df:8d:e3:a2:c7:aa:c4:a0:cc: 10:b6:04:62:14:0a:c8:fc:f1:27:8a:46:78:a4:3d:8d:dc:80: e2:49:bc:51:e6:bd:f6:af:95:4a:ad:3e:4c:52:a3:cf:35:71: b0:d1:0b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjUxMTAyMTg0MDI2WhcNMjUxMTA5MTg0MDI2WjAYMRYwFAYD VQQDEw02OTA3YTU5Yi1lMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuktCNQdRF8aNr+M2JvA3rd1/YXsH+ZMsyC13941BcfNcxJMpYK8Wsp9/ZqYc EQ7n8OBZhNIwHEikJn7gQYo0OidrkgIeZQiEmeGjydGmbDrY3sBlDVABq11uMY7E WYOxXjY/IpW84wm4mMrTt+MSKJvy5g6XI0G70bh8656mJ2zxe4a74qjtEyrAzYPy lLBYlHAs/dU5Bu+NcSAh0ihk/7eb8AeeaqymRTTXLL43/szxCJVB/SXlWELjqklX EVjTnFSAsprIy7lFtXL5/6hocag5wpu6koFodumFJEmkAPe3Jt13+Yasc/5t1DL5 AqbVX4QL9AS73x/tI53w0eLo7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZpUE8y AzhpJmEvFE0ZgJhoHRmdMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pK dlhUVDI0MzRpSHN5amxlSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY10MoY8FkShxVnu3459EIYE2O3qKzYY65vxos6+7+VlubWMBMxb6x b/4ZRTh+5XrT9b39NsC8YNVYBAJWNc2eWTqtkZrABBHTW1eBz0M9bdOSjcQ1EBal leoqgn2zdQp19jJbX+hhsDE890IFVMmD8DsXUt3vE19S0vma1AhZboBcYBrBYGHS 2etyOR/wkr9xiuTFc0XauWh38bZ4GUH4adF2ZMAEIeIGcvHOGesi8Y+vQ8qR/gl2 ttBmEDh8ycJmtNxd9EFJKqu9pZgSTVHfjeOix6rEoMwQtgRiFArI/PEnikZ4pD2N 3IDiSbxR5r32r5VKrT5MUqPPNXGw0QuQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client