$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: LmqE0akkIL/lZe9u5dbmDMD/aSEf8MwFFusfrheMrlE= Subject key identifier: 0D:00:CA:91:07:59:9A:2E:44:D4:45:23:CA:AF:31:AD:43:28:3D:79 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 0149 Signing time: Mon 03 Nov 2025 04:18:31 +0000 Manifest this update: Mon 03 Nov 2025 04:18:31 +0000 Manifest next update: Mon 10 Nov 2025 04:18:31 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: swpfAydzQQudgJiGI1XaUglmsipdXmMrhJjVWj03g/g=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Nov 3 04:18:31 2025 GMT Not After : Nov 10 04:18:31 2025 GMT Subject: CN=69082d17-2a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:76:fe:56:85:b2:00:3a:a5:77:e2:e8:cd: e4:aa:cd:5a:99:aa:91:4d:dd:28:15:14:39:72:15: 25:cb:6b:9a:e9:bf:fd:d5:24:f6:1a:b2:f3:52:03: 7e:5c:c7:03:31:54:b6:73:15:ca:2d:8e:16:6b:50: f5:02:fb:7b:ea:c4:71:db:cb:98:7f:52:e4:f6:41: 4a:06:29:f0:a0:74:bd:96:b5:56:4f:87:23:0f:9c: 83:90:12:ef:35:4d:40:76:12:15:4f:72:31:55:d4: e7:ff:8f:c7:f5:c5:97:1f:3a:0d:c1:a9:bf:9d:a7: 0a:12:cf:db:44:69:18:2c:c9:ac:d8:de:0d:ac:ce: 07:c3:a0:35:20:ff:0e:c9:f1:e6:fe:58:07:b7:e8: 59:7d:b8:ad:a2:f4:0d:b3:11:ca:40:f7:32:82:24: 81:a5:84:2a:32:4e:8e:3f:93:18:3b:e2:a0:07:f8: cf:9d:95:97:b2:8e:23:85:62:c1:4b:e1:44:a6:98: d3:fb:d6:73:b8:26:b3:3a:31:63:42:c8:57:2d:06: 7e:85:f2:8f:24:54:7b:36:d0:70:85:3d:30:d0:f1: 74:0e:dd:56:51:d4:0a:db:20:23:11:8c:26:a6:54: aa:4c:fe:54:51:93:f2:a6:2d:5a:12:e6:68:49:82: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:00:CA:91:07:59:9A:2E:44:D4:45:23:CA:AF:31:AD:43:28:3D:79 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e9:d5:4c:ef:cb:08:b7:03:d3:24:06:1f:cc:f0:c0:b1:3e: cd:c8:f9:fd:f3:54:20:27:45:ff:e0:e7:6d:1a:d0:33:e2:f3: 38:65:c3:5a:8c:29:f8:64:9d:1c:d4:66:f5:26:03:e9:96:7e: e0:5b:4c:9f:e7:69:b8:6c:50:e3:ef:19:ec:15:c0:cf:8e:48: b3:ec:af:54:7f:de:42:88:31:15:57:f0:9e:46:99:f2:79:ac: 59:a3:a7:6d:69:48:aa:71:2e:e9:36:84:e1:ec:9d:89:52:9c: ae:04:9b:37:a0:9b:6f:19:9c:8e:ee:a4:eb:f0:1b:e9:2e:72: a6:e5:d9:ec:18:e9:4e:cb:cb:f4:d7:7e:f0:3f:01:7b:4c:a7: 8f:7f:3d:ff:0b:8b:5d:53:73:cf:f0:5d:94:8d:a4:71:23:f7: a0:a5:18:d3:bd:43:da:02:79:c8:cd:ec:f9:f0:54:2f:6c:7d: f0:0f:4b:81:6e:2c:2c:22:f8:e9:7b:f0:d1:d5:0d:5e:d5:1b: a6:b4:c3:e1:5c:a1:c2:16:db:15:35:f9:54:29:a5:74:d7:ab: 16:4f:3a:0b:9b:b3:d5:d2:ba:51:8c:f0:2d:71:37:23:d9:6f: 42:5d:10:30:0d:20:f8:c1:18:6b:08:96:e6:15:2f:7d:b9:c8: cf:6a:2b:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUxMTAzMDQxODMxWhcNMjUxMTEwMDQxODMxWjAYMRYwFAYD VQQDEw02OTA4MmQxNy0yYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnN2/laFsgA6pXfi6M3kqs1amaqRTd0oFRQ5chUly2ua6b/91ST2GrLzUgN+ XMcDMVS2cxXKLY4Wa1D1Avt76sRx28uYf1Lk9kFKBinwoHS9lrVWT4cjD5yDkBLv NU1AdhIVT3IxVdTn/4/H9cWXHzoNwam/nacKEs/bRGkYLMms2N4NrM4Hw6A1IP8O yfHm/lgHt+hZfbitovQNsxHKQPcygiSBpYQqMk6OP5MYO+KgB/jPnZWXso4jhWLB S+FEppjT+9ZzuCazOjFjQshXLQZ+hfKPJFR7NtBwhT0w0PF0Dt1WUdQK2yAjEYwm plSqTP5UUZPypi1aEuZoSYJYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0AypEH WZouRNRFI8qvMa1DKD15MB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb6dVM78sItwPTJAYfzPDAsT7NyPn981QgJ0X/4OdtGtAz4vM4ZcNa jCn4ZJ0c1Gb1JgPpln7gW0yf52m4bFDj7xnsFcDPjkiz7K9Uf95CiDEVV/CeRpny eaxZo6dtaUiqcS7pNoTh7J2JUpyuBJs3oJtvGZyO7qTr8BvpLnKm5dnsGOlOy8v0 137wPwF7TKePfz3/C4tdU3PP8F2UjaRxI/egpRjTvUPaAnnIzez58FQvbH3wD0uB biwsIvjpe/DR1Q1e1RumtMPhXKHCFtsVNflUKaV016sWTzoLm7PV0rpRjPAtcTcj 2W9CXRAwDSD4wRhrCJbmFS99ucjPaito -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:18 2025 by rpki-client