$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft File: ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json) Hash identifier: zJJasJTaOu4L6HVSN9GXbMVBdcilFoTbSOTITEiJme8= Subject key identifier: AC:DD:47:14:79:7C:2C:8A:5E:CE:98:ED:D1:82:DE:B7:E8:9D:5A:6E Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft Manifest number: 018D Signing time: Mon 03 Nov 2025 03:58:25 +0000 Manifest this update: Mon 03 Nov 2025 03:58:25 +0000 Manifest next update: Mon 10 Nov 2025 03:58:25 +0000 Files and hashes: 1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: 31QtU5bS+jLLuP1HVs5ScdFz90cPXl67pu5npYRc2os=) 2: 0D16F5F4933211EEA5AC155DC4F9AE02.roa (hash: 1LEVeAmiTE8mfugUrgZ7PXJTh3jzct433M4/pCSC1j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Nov 3 03:58:25 2025 GMT Not After : Nov 10 03:58:25 2025 GMT Subject: CN=69082861-3194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:97:b0:a8:59:64:1e:63:63:43:83:81:e6: 68:f6:ca:d5:2c:97:ff:21:9f:11:92:1e:c5:e4:0c: 70:a9:92:17:73:df:84:73:96:5e:22:68:85:86:35: 0e:21:96:8a:3f:64:af:12:de:05:c9:b4:97:a7:ba: 8d:d5:b6:a7:d6:c5:fa:81:00:02:9e:35:af:78:19: 10:3b:c9:bb:cb:17:a6:11:c7:30:58:24:9b:1d:b3: 6a:b3:83:56:d1:5b:41:ea:4e:43:ad:75:00:f7:11: d7:5a:87:54:e2:75:f4:5e:0b:de:ab:08:73:16:8a: 0e:62:62:2d:1a:fa:a5:c4:c2:78:50:2f:f9:9e:4c: c7:04:b0:e8:da:9f:95:09:f1:15:bc:cc:72:55:e7: a8:c0:d1:72:b3:8f:89:c3:52:bc:c5:4b:6f:52:7b: 16:a9:eb:11:df:ab:54:ec:ec:9e:d1:66:5e:a6:3b: fe:58:b4:4d:93:44:44:aa:8c:c1:7c:b8:12:38:85: f4:a7:96:1d:0e:65:c9:d0:20:6a:c9:69:95:4d:d0: 62:82:43:11:09:0e:01:0c:ce:d6:e5:72:6d:de:43: 6c:6b:89:47:73:20:64:4d:c3:4d:3d:67:d7:11:61: 8b:97:47:28:ad:77:62:13:bf:1b:0f:2a:18:a6:fd: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DD:47:14:79:7C:2C:8A:5E:CE:98:ED:D1:82:DE:B7:E8:9D:5A:6E X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:db:40:12:a7:8b:e6:e0:bf:7f:91:40:4d:eb:90:3e:02: 1d:85:80:24:53:13:2f:e0:ca:ee:f0:f0:c7:50:5f:2d:36:02: 94:a3:99:96:45:4f:91:99:24:d9:00:e6:c6:48:9c:a7:4f:7f: 37:67:9d:8a:7c:43:36:da:02:5b:26:ce:51:9a:a2:14:5e:ee: 42:e6:b1:22:66:70:33:45:47:e1:8b:11:e9:b5:22:d7:1b:b3: 8b:df:fa:cc:8a:45:26:2d:c4:d7:40:65:e9:43:f5:3e:1e:38: a3:74:55:41:9e:2e:7e:48:a6:e6:3e:b5:b5:7f:68:a3:d6:89: 9a:80:c0:1b:f1:cc:fd:29:66:34:0c:85:08:64:c2:6b:5f:d5: 60:53:68:65:b5:f8:15:ea:a7:a0:a1:a1:77:c7:97:1c:0b:ff: b9:7c:5e:21:43:56:b0:af:78:ef:64:94:33:1c:58:b3:29:4c: 88:fc:bd:93:a4:50:98:08:8b:92:37:d8:56:2a:52:e5:0b:e6: 88:c2:6a:b2:a3:3d:bc:46:95:3a:11:23:6b:c0:ff:7d:40:d8: a0:b5:63:f9:e1:c6:96:59:f5:36:2a:bd:75:6b:4d:35:65:d4: d5:82:1c:47:12:1b:fe:d3:d8:9b:79:37:e0:db:98:e6:e6:a5: 38:6c:5f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjUxMTAzMDM1ODI1WhcNMjUxMTEwMDM1ODI1WjAYMRYwFAYD VQQDEw02OTA4Mjg2MS0zMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VmXsKhZZB5jY0ODgeZo9srVLJf/IZ8Rkh7F5AxwqZIXc9+Ec5ZeImiFhjUO IZaKP2SvEt4FybSXp7qN1ban1sX6gQACnjWveBkQO8m7yxemEccwWCSbHbNqs4NW 0VtB6k5DrXUA9xHXWodU4nX0XgveqwhzFooOYmItGvqlxMJ4UC/5nkzHBLDo2p+V CfEVvMxyVeeowNFys4+Jw1K8xUtvUnsWqesR36tU7Oye0WZepjv+WLRNk0REqozB fLgSOIX0p5YdDmXJ0CBqyWmVTdBigkMRCQ4BDM7W5XJt3kNsa4lHcyBkTcNNPWfX EWGLl0corXdiE78bDyoYpv1xnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzdRxR5 fCyKXs6Y7dGC3rfonVpuMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xz clBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdo9tAEqeL5uC/f5FATeuQPgIdhYAkUxMv4Mru8PDHUF8tNgKUo5mW RU+RmSTZAObGSJynT383Z52KfEM22gJbJs5RmqIUXu5C5rEiZnAzRUfhixHptSLX G7OL3/rMikUmLcTXQGXpQ/U+HjijdFVBni5+SKbmPrW1f2ij1omagMAb8cz9KWY0 DIUIZMJrX9VgU2hltfgV6qegoaF3x5ccC/+5fF4hQ1awr3jvZJQzHFizKUyI/L2T pFCYCIuSN9hWKlLlC+aIwmqyoz28RpU6ESNrwP99QNigtWP54caWWfU2Kr11a001 ZdTVghxHEhv+09ibeTfg25jm5qU4bF/S -----END CERTIFICATE-----Generated at Tue Nov 4 08:27:59 2025 by rpki-client