$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: wyCinG6rzD2kGhVBVRvztmFdOu+YMa/b+Mz7p0M43GA= Subject key identifier: 77:B1:EB:AC:AD:04:F0:C9:31:57:01:49:4A:00:6A:07:63:40:D1:E2 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0CD1 Signing time: Sun 26 Oct 2025 18:36:59 +0000 Manifest this update: Sun 26 Oct 2025 18:36:59 +0000 Manifest next update: Sun 02 Nov 2025 18:36:59 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: BXebXE5uQIc3Bzw3mGZqs8FG85m6ixwXcGYN//qGDmc=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Oct 26 18:36:59 2025 GMT Not After : Nov 2 18:36:59 2025 GMT Subject: CN=68fe6a4b-1142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:9d:82:56:41:d4:8a:85:12:6c:27:06:32: 57:c4:64:9e:a5:b5:85:24:8e:06:69:96:a8:8b:25: bb:d2:bd:99:d6:f1:93:83:11:4b:4e:2a:cd:9e:3a: 93:26:48:10:2e:be:19:82:f1:20:29:2b:66:ad:2b: 04:07:30:e9:8e:03:04:be:0b:4b:bb:f6:be:cc:96: 1d:89:ea:c4:3e:ab:b3:69:a9:db:5f:86:32:c8:91: c2:d5:70:fb:ab:2a:e2:60:4a:6f:96:14:79:c9:e2: 95:6b:5b:14:00:d2:56:f1:e2:ea:95:e2:24:20:18: ff:de:0d:53:88:d2:62:0d:6b:ca:a2:93:ea:19:5e: 79:ba:c2:b7:07:e4:4b:00:1e:da:cd:e7:ae:69:2d: f9:6e:95:17:1c:d9:f6:f9:af:a9:5a:c6:d0:af:94: d4:db:01:4f:b2:f2:31:1e:d4:d0:b8:cb:02:59:91: be:8b:c0:fc:0a:f8:d5:86:e3:1e:22:7b:a8:a2:d8: 49:11:bd:61:ba:73:7f:36:37:6c:5b:ba:23:20:61: 54:e2:81:c7:19:5d:09:6e:fd:a1:b8:68:ef:d5:d3: 12:fc:bd:59:95:ce:ea:b0:03:a2:1c:9b:95:03:66: b7:d0:0b:97:05:cb:ff:21:f6:63:53:69:dc:3e:76: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:EB:AC:AD:04:F0:C9:31:57:01:49:4A:00:6A:07:63:40:D1:E2 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a4:6b:5f:26:40:57:a2:3b:d5:35:a0:a3:c4:c8:3f:60:ce: 4e:d0:11:63:5f:fc:2a:94:1d:0f:ae:85:08:f8:a4:94:b4:2c: f2:6b:d4:f2:a4:e7:e8:66:21:f9:bb:af:61:99:4e:b9:10:18: a4:5a:74:d3:09:5b:bb:88:55:cd:49:53:1d:29:9c:69:7c:00: 27:4e:42:aa:a3:8f:1f:42:63:c2:af:70:83:04:ad:e1:d6:6c: 5c:82:91:d8:55:43:8e:56:14:66:c5:a5:fb:94:6c:51:ac:e7: 80:39:d7:1d:4e:33:07:4d:77:64:9f:7d:d1:f7:22:90:4f:ff: ce:b8:be:ba:ed:15:41:50:cd:57:43:81:b1:72:32:48:7a:c9: e5:92:55:82:98:6c:2b:a5:fa:06:57:7a:a6:4b:1a:12:2c:e3: 6b:e9:a0:f6:c2:33:df:75:f8:3b:3d:f5:61:9f:5d:2c:41:2c: f1:18:fc:05:4c:32:dd:1a:d4:bd:7a:41:01:73:80:63:c8:6a: e6:38:3d:ae:41:34:a0:c8:f2:be:e1:7e:69:e1:45:48:94:44: d8:1a:c8:8d:76:63:77:f6:38:e7:e3:0a:86:91:80:46:bc:0b: 03:a0:88:24:13:6d:79:b9:13:96:d9:21:2a:46:0d:d7:32:29: f7:e5:e7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUxMDI2MTgzNjU5WhcNMjUxMTAyMTgzNjU5WjAYMRYwFAYD VQQDEw02OGZlNmE0Yi0xMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTWdglZB1IqFEmwnBjJXxGSepbWFJI4GaZaoiyW70r2Z1vGTgxFLTirNnjqT JkgQLr4ZgvEgKStmrSsEBzDpjgMEvgtLu/a+zJYdierEPquzaanbX4YyyJHC1XD7 qyriYEpvlhR5yeKVa1sUANJW8eLqleIkIBj/3g1TiNJiDWvKopPqGV55usK3B+RL AB7azeeuaS35bpUXHNn2+a+pWsbQr5TU2wFPsvIxHtTQuMsCWZG+i8D8CvjVhuMe InuoothJEb1hunN/NjdsW7ojIGFU4oHHGV0Jbv2huGjv1dMS/L1Zlc7qsAOiHJuV A2a30AuXBcv/IfZjU2ncPna/7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHex66yt BPDJMVcBSUoAagdjQNHiMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABpGtfJkBXojvVNaCjxMg/YM5O0BFjX/wqlB0ProUI+KSUtCzya9Ty pOfoZiH5u69hmU65EBikWnTTCVu7iFXNSVMdKZxpfAAnTkKqo48fQmPCr3CDBK3h 1mxcgpHYVUOOVhRmxaX7lGxRrOeAOdcdTjMHTXdkn33R9yKQT//OuL667RVBUM1X Q4GxcjJIesnlklWCmGwrpfoGV3qmSxoSLONr6aD2wjPfdfg7PfVhn10sQSzxGPwF TDLdGtS9ekEBc4BjyGrmOD2uQTSgyPK+4X5p4UVIlETYGsiNdmN39jjn4wqGkYBG vAsDoIgkE215uROW2SEqRg3XMin35ecn -----END CERTIFICATE-----Generated at Mon Oct 27 15:02:56 2025 by rpki-client