$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: MmQIU0oXevl6YkMDxy0ZK2kvt7KpkBGZb17nquw4A4c= Subject key identifier: EB:96:14:6B:AF:A5:D3:54:9F:3B:EB:F7:91:F3:81:0F:04:83:CF:3F Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 01E8 Signing time: Wed 05 Nov 2025 02:46:14 +0000 Manifest this update: Wed 05 Nov 2025 02:46:13 +0000 Manifest next update: Wed 12 Nov 2025 02:46:13 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: se/85qcKY1Fxle21/VAfE5VF8QjBAqOUUTZTf9OVqN0=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: caa9vs5q3NzKdsCc37MTwoPPA4zep6D+Ht0arsk9wtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Nov 5 02:46:13 2025 GMT Not After : Nov 12 02:46:13 2025 GMT Subject: CN=690aba75-607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:6a:17:57:84:40:9b:47:c3:50:3a:ac:9c: 11:9c:bd:b6:d4:e8:b2:29:17:2d:d8:4d:80:f7:c5: c1:a8:46:36:9d:e9:60:d4:d9:c1:6c:81:cb:f4:26: 20:e0:b1:32:84:91:c5:f5:58:8d:0c:29:de:17:84: 9b:7a:a2:00:1b:2a:1e:cd:d6:d5:63:dc:7d:49:27: 7a:ba:90:4f:8e:87:03:f4:e2:25:11:94:56:c4:c5: aa:df:a5:ce:de:66:d4:4d:c6:9a:48:1d:d8:8c:94: 38:d7:c8:89:51:fc:0d:eb:97:5e:88:81:20:eb:87: 6f:b3:47:00:36:63:7e:98:4a:b4:ca:6b:95:6b:f5: 97:5f:71:9f:c5:33:e0:d2:c5:e6:74:41:d1:e0:32: d9:17:26:b4:e8:31:3f:b4:6d:e8:b3:ff:c8:ee:ad: d3:c3:95:f4:b7:44:0a:02:e8:c5:75:2e:0d:d5:cd: 3e:b2:63:67:e7:00:b4:0f:f0:18:5f:c4:22:4f:75: 94:1c:56:f6:5f:cc:ad:29:0c:0e:22:d0:ff:c8:e6: 4d:6d:9a:ee:ab:56:a0:8e:90:44:63:96:00:d9:ef: 70:4f:ab:84:76:30:3d:42:67:d8:60:d2:10:7d:a1: ed:2b:25:d9:e5:7a:41:90:55:ce:0c:9d:48:78:7c: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:96:14:6B:AF:A5:D3:54:9F:3B:EB:F7:91:F3:81:0F:04:83:CF:3F X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:67:a6:f2:8f:fe:e3:25:d9:5b:3f:30:80:f7:8a:9f:46:3e: 37:33:7a:ce:c6:8b:95:c2:8c:fe:09:a7:0c:e5:17:18:c3:07: 36:0f:5d:01:41:9f:51:81:20:d1:88:f7:01:48:d3:69:5a:78: 68:02:31:07:4c:65:62:00:a2:a1:2b:6a:f7:03:95:dc:82:3a: 3e:fa:da:8c:b7:2a:92:96:cb:2b:f6:82:aa:36:3c:d0:dc:d8: 25:3f:2f:48:6f:71:a4:44:87:49:e0:7f:d4:12:7f:6d:40:7c: e0:c7:1a:45:34:02:ca:ad:fd:bc:6d:4d:ea:b2:1e:70:22:26: 2d:e5:d6:33:56:b5:62:38:9d:d6:cb:d1:b6:95:79:91:e9:eb: ca:49:75:24:85:9b:00:22:73:23:27:be:e9:9b:7b:d2:24:d2: 41:d6:6a:67:70:15:eb:60:09:ca:99:d1:b9:7f:85:d5:7f:07: 12:af:b4:47:c7:a6:e3:d9:65:e7:5d:f0:d8:41:5f:21:79:64: bb:85:d5:7f:0b:59:b1:19:b7:3f:45:0b:d5:fe:d1:2f:f2:ae: 43:4b:f0:fb:27:a7:5c:bc:ea:c1:e6:68:50:88:10:81:3b:9c: 80:a2:91:bc:0a:d7:64:03:a7:3d:e6:35:2b:07:3a:1c:3d:35: 7c:2f:0e:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUxMTA1MDI0NjEzWhcNMjUxMTEyMDI0NjEzWjAYMRYwFAYD VQQDEw02OTBhYmE3NS02MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOVqF1eEQJtHw1A6rJwRnL221OiyKRct2E2A98XBqEY2nelg1NnBbIHL9CYg 4LEyhJHF9ViNDCneF4SbeqIAGyoezdbVY9x9SSd6upBPjocD9OIlEZRWxMWq36XO 3mbUTcaaSB3YjJQ418iJUfwN65deiIEg64dvs0cANmN+mEq0ymuVa/WXX3GfxTPg 0sXmdEHR4DLZFya06DE/tG3os//I7q3Tw5X0t0QKAujFdS4N1c0+smNn5wC0D/AY X8QiT3WUHFb2X8ytKQwOItD/yOZNbZruq1agjpBEY5YA2e9wT6uEdjA9QmfYYNIQ faHtKyXZ5XpBkFXODJ1IeHzcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuWFGuv pdNUnzvr95HzgQ8Eg88/MB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABZ6byj/7jJdlbPzCA94qfRj43M3rOxouVwoz+CacM5RcYwwc2D10B QZ9RgSDRiPcBSNNpWnhoAjEHTGViAKKhK2r3A5Xcgjo++tqMtyqSlssr9oKqNjzQ 3NglPy9Ib3GkRIdJ4H/UEn9tQHzgxxpFNALKrf28bU3qsh5wIiYt5dYzVrViOJ3W y9G2lXmR6evKSXUkhZsAInMjJ77pm3vSJNJB1mpncBXrYAnKmdG5f4XVfwcSr7RH x6bj2WXnXfDYQV8heWS7hdV/C1mxGbc/RQvV/tEv8q5DS/D7J6dcvOrB5mhQiBCB O5yAopG8CtdkA6c95jUrBzocPTV8Lw6O -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:10 2025 by rpki-client