$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: GWmZLLHqWeNcR4ZwKfBXAJWxncTRupjPNKlBN/m/U7o= Subject key identifier: C3:28:5A:FF:A5:94:CA:BE:71:DD:22:5D:E1:BF:EE:63:43:ED:83:A5 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 34E1 Signing time: Sun 02 Nov 2025 14:30:51 +0000 Manifest this update: Sun 02 Nov 2025 14:30:51 +0000 Manifest next update: Sun 09 Nov 2025 14:30:51 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: FOf5Y4B1fV1yIGpFx7iOUpIvJQ6ClojWSpiTdUm1+Cs=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 4I+3xavxeBJbyMnYsMSj2G6sjqqfZ0aCKkQ3nfnxOP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Nov 2 14:30:51 2025 GMT Not After : Nov 9 14:30:51 2025 GMT Subject: CN=69076b1b-949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:64:d4:81:21:bc:6e:dc:8d:79:81:d6:0b: ef:70:bb:98:63:71:4a:d4:14:3c:26:e8:20:64:c1: 6c:ee:a6:75:91:65:aa:fc:06:1a:fc:45:f6:02:5a: d2:08:5c:37:3b:62:90:35:a4:82:2c:79:e2:25:d8: db:50:69:fa:7f:1c:6c:1a:50:e4:62:39:17:db:21: 92:48:4a:63:18:d8:74:80:2a:05:8b:97:ea:12:fe: 70:37:e0:e7:e8:d2:e3:67:b0:83:31:06:37:83:e1: a9:30:b9:a8:c6:44:c9:9b:42:d0:f6:e2:65:44:7b: 42:55:7d:58:39:68:c0:68:65:91:96:50:18:a8:25: fa:70:e6:d2:e4:ba:91:48:4d:c1:73:2c:15:38:cb: 9f:ae:7e:c6:c5:4f:dd:7d:cd:97:8e:71:83:e4:33: c6:0e:e3:71:40:44:d6:b4:26:86:92:f7:fc:b8:c1: 03:b3:17:a2:5b:f5:f9:5f:a9:9d:f2:7b:3a:9d:ff: fe:cf:36:1c:cd:24:ed:0f:74:1c:36:5f:80:6a:b7: 09:a3:ea:95:93:14:75:0d:28:41:c0:ca:f4:0c:ef: e8:ab:57:49:8a:2d:69:c1:ab:28:e8:8a:ab:78:31: 79:8c:d8:80:6b:58:1b:99:bc:3e:58:c6:cf:4c:91: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:28:5A:FF:A5:94:CA:BE:71:DD:22:5D:E1:BF:EE:63:43:ED:83:A5 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:34:b6:6f:ed:d0:43:51:ef:80:00:e2:33:20:ac:73:89:59: ee:09:2c:3c:42:c0:e3:1c:b6:29:3d:b3:a7:0e:3f:33:2e:a7: 7f:10:ad:b6:6e:d9:80:38:8d:e8:8b:9a:78:10:1e:d3:8d:9d: 05:a0:33:4f:9d:f9:1d:b6:da:c2:f9:40:f4:57:94:cd:5a:96: d6:57:d8:c3:95:ee:31:33:f6:32:70:a4:40:fb:3f:c2:6f:e9: 6c:8f:70:5d:40:7e:dc:9c:a2:83:ea:f1:d6:d0:9d:81:c5:49: b6:9e:67:14:9a:55:84:31:a6:ed:77:26:e9:3b:00:79:1c:e2: fa:43:5f:27:3a:b9:ee:4f:7b:7c:91:24:0f:14:f4:fc:fb:f6: db:01:be:2c:b2:f5:e7:5f:08:cb:28:f4:df:bd:7a:97:0b:19: 4c:4f:ee:01:05:0c:cb:72:af:84:ef:85:d4:80:ca:2e:84:8f: 40:7b:e1:43:ae:e4:dc:a1:d7:35:b8:87:e2:0e:91:db:6f:cc: f8:3a:9e:ee:d6:5c:c5:c9:77:b1:80:f4:f8:dd:ca:b9:00:f0: b2:7a:f5:49:51:3b:19:52:30:91:0b:e6:14:58:2d:29:5d:cb: 0a:69:9c:7b:ce:37:7d:28:ba:6d:79:f5:98:2b:73:5e:a4:53: cf:28:58:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUxMTAyMTQzMDUxWhcNMjUxMTA5MTQzMDUxWjAYMRYwFAYD VQQDEw02OTA3NmIxYi05NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVRk1IEhvG7cjXmB1gvvcLuYY3FK1BQ8JuggZMFs7qZ1kWWq/AYa/EX2AlrS CFw3O2KQNaSCLHniJdjbUGn6fxxsGlDkYjkX2yGSSEpjGNh0gCoFi5fqEv5wN+Dn 6NLjZ7CDMQY3g+GpMLmoxkTJm0LQ9uJlRHtCVX1YOWjAaGWRllAYqCX6cObS5LqR SE3BcywVOMufrn7GxU/dfc2XjnGD5DPGDuNxQETWtCaGkvf8uMEDsxeiW/X5X6md 8ns6nf/+zzYczSTtD3QcNl+AarcJo+qVkxR1DShBwMr0DO/oq1dJii1pwaso6Iqr eDF5jNiAa1gbmbw+WMbPTJGLqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMoWv+l lMq+cd0iXeG/7mND7YOlMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4NLZv7dBDUe+AAOIzIKxziVnuCSw8QsDjHLYpPbOnDj8zLqd/EK22 btmAOI3oi5p4EB7TjZ0FoDNPnfkdttrC+UD0V5TNWpbWV9jDle4xM/YycKRA+z/C b+lsj3BdQH7cnKKD6vHW0J2BxUm2nmcUmlWEMabtdybpOwB5HOL6Q18nOrnuT3t8 kSQPFPT8+/bbAb4ssvXnXwjLKPTfvXqXCxlMT+4BBQzLcq+E74XUgMouhI9Ae+FD ruTcodc1uIfiDpHbb8z4Op7u1lzFyXexgPT43cq5APCyevVJUTsZUjCRC+YUWC0p XcsKaZx7zjd9KLptefWYK3NepFPPKFip -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:25 2025 by rpki-client