$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft File: 1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json) Hash identifier: yjwadwoEhmTzyiFxjDcvVmYaEiQL6r4RWm7uwA/CpHs= Subject key identifier: 8F:FE:F3:1A:AF:B7:41:AD:E5:3B:E1:5E:72:CC:F3:8E:55:96:3C:2A Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 07EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft Manifest number: 07DC Signing time: Wed 22 Oct 2025 22:04:28 +0000 Manifest this update: Wed 22 Oct 2025 22:04:28 +0000 Manifest next update: Wed 29 Oct 2025 22:04:28 +0000 Files and hashes: 1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: 8SQTOqeKoJ92d7cOTFR/KXhBz8USzdHyMoR1uGbUJWs=) 2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: Ld5X+hhHes8uxmazOqPYTCeJp0q6EYoIhogSp+9j3P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Oct 22 22:04:28 2025 GMT Not After : Oct 29 22:04:28 2025 GMT Subject: CN=68f954ec-de8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:d5:ed:48:70:d3:bc:bb:ee:ff:f0:4b:ba: a6:4e:a9:b8:f5:7f:4c:14:52:03:52:c8:13:69:80: a1:f6:5c:14:57:af:d2:e9:84:eb:3e:5b:84:38:e6: 9d:14:6d:b5:5d:ae:d1:84:63:41:49:15:b2:84:42: 52:db:14:d8:a2:63:79:a1:5e:d2:a2:c0:fd:1f:2d: 00:e2:30:0e:58:ed:5c:56:97:f8:a2:95:54:ac:c9: d0:e8:8d:11:95:ac:80:da:1e:99:ee:d4:a3:92:46: 6d:08:3b:9b:42:07:ab:95:78:85:b6:3d:e5:e6:84: 43:84:c5:e5:c1:47:c6:01:1c:08:c9:cb:f3:23:93: a9:a4:e4:b4:06:40:a0:83:0e:d8:dc:85:8e:c1:22: d7:83:76:c4:cf:e6:15:57:b4:55:f4:da:c3:f0:54: 0f:54:aa:1b:64:31:fa:69:39:bf:53:43:71:32:95: 09:4d:97:93:8e:c3:c4:fe:bf:61:3e:93:25:93:af: 36:6b:c0:de:83:b7:98:08:7d:88:65:2a:07:14:22: a1:c9:2a:a6:cf:86:13:1c:16:f2:91:98:8b:47:a1: 94:51:a2:bb:52:3b:f2:0d:48:9c:a2:b9:bb:6a:e5: 74:77:b4:2f:75:7d:eb:11:b4:0e:a3:d8:4d:1c:a0: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:F3:1A:AF:B7:41:AD:E5:3B:E1:5E:72:CC:F3:8E:55:96:3C:2A X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1f:4d:93:5e:13:ba:63:90:ad:43:2b:99:a2:01:77:a5:cd: 00:85:88:f5:42:75:a5:51:83:b5:0e:89:59:83:20:73:80:99: 50:9f:34:7e:ff:6f:d3:44:2e:69:87:94:b4:30:75:9a:27:79: 81:4a:61:ca:cb:8d:b6:b8:a9:24:ff:64:5b:8c:1f:87:2f:be: b6:9d:2f:8c:d9:bc:b6:0c:07:9c:40:2a:5c:40:21:71:c0:e9: 13:58:45:36:e8:d6:9d:a3:d9:72:fe:ae:4b:73:e3:6d:1a:ee: 33:07:83:22:e3:84:92:a6:33:2f:60:da:ce:a5:11:93:c2:1d: 96:17:b1:1d:6f:53:cd:3e:28:b3:a9:69:1a:66:56:53:98:ff: 83:60:a7:58:55:86:90:3c:8b:ba:6c:e4:59:7c:5f:a9:7f:f4: df:33:17:2e:bd:ac:5b:24:f2:bf:0f:00:92:6a:50:25:77:59: ab:91:18:91:2f:96:ed:f1:50:6a:89:e1:e2:93:4a:1c:78:cb: 03:1d:e7:7c:5a:c6:20:3d:07:5e:56:03:b4:da:a6:a5:d5:e9: c8:f9:61:c4:27:50:94:09:05:64:89:6e:4b:fb:88:e3:4a:66: a1:b7:9a:97:6a:3a:c7:a7:ad:11:13:08:24:7c:01:59:50:1e: 2b:81:e5:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjUxMDIyMjIwNDI4WhcNMjUxMDI5MjIwNDI4WjAYMRYwFAYD VQQDEw02OGY5NTRlYy1kZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf/V7Uhw07y77v/wS7qmTqm49X9MFFIDUsgTaYCh9lwUV6/S6YTrPluEOOad FG21Xa7RhGNBSRWyhEJS2xTYomN5oV7SosD9Hy0A4jAOWO1cVpf4opVUrMnQ6I0R layA2h6Z7tSjkkZtCDubQgerlXiFtj3l5oRDhMXlwUfGARwIycvzI5OppOS0BkCg gw7Y3IWOwSLXg3bEz+YVV7RV9NrD8FQPVKobZDH6aTm/U0NxMpUJTZeTjsPE/r9h PpMlk682a8Deg7eYCH2IZSoHFCKhySqmz4YTHBbykZiLR6GUUaK7UjvyDUicorm7 auV0d7QvdX3rEbQOo9hNHKDPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/+8xqv t0Gt5TvhXnLM845VljwqMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzY3Ri9BMjIxOTA1ODEyOEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNt MTlJU2pjTjFMeUtJZ0FGdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmH02TXhO6Y5CtQyuZogF3pc0AhYj1QnWlUYO1DolZgyBzgJlQnzR+ /2/TRC5ph5S0MHWaJ3mBSmHKy422uKkk/2RbjB+HL762nS+M2by2DAecQCpcQCFx wOkTWEU26Nado9ly/q5Lc+NtGu4zB4Mi44SSpjMvYNrOpRGTwh2WF7Edb1PNPiiz qWkaZlZTmP+DYKdYVYaQPIu6bORZfF+pf/TfMxcuvaxbJPK/DwCSalAld1mrkRiR L5bt8VBqieHik0oceMsDHed8WsYgPQdeVgO02qal1enI+WHEJ1CUCQVkiW5L+4jj Smaht5qXajrHp60REwgkfAFZUB4rgeXz -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:49 2025 by rpki-client