$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: odLHRS5SFJ1QkxE7O5XBnkRFCbf4p69+k7DNpIPP8i8= Subject key identifier: EA:29:68:FD:59:39:95:FE:19:BB:48:4C:6B:07:EB:7B:5C:99:4A:94 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 07A8 Signing time: Sun 02 Nov 2025 21:23:30 +0000 Manifest this update: Sun 02 Nov 2025 21:23:30 +0000 Manifest next update: Sun 09 Nov 2025 21:23:30 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: zxLAQXdSVoYolGNdBrWkSDVDaBWtwkyIxjetoFjXjXc=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: QadRAteDkMr+/Vf11v/PSiWZ5qLyjgZNySKVRInle2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: Nov 2 21:23:30 2025 GMT Not After : Nov 9 21:23:30 2025 GMT Subject: CN=6907cbd2-a8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:aa:fc:a6:3f:7b:cb:dd:c2:b3:ca:98:03: 0f:03:83:94:a7:bc:d0:d9:f2:04:eb:67:69:e9:42: 07:a4:a7:f4:d3:79:fe:4d:f8:c7:cf:3c:6d:40:94: a9:0f:6f:7c:59:4c:a6:dc:5d:55:f8:af:5d:16:a2: 76:32:dd:ef:0e:46:c2:ca:d8:42:51:88:ee:c3:ea: 34:02:3e:1d:10:4f:a5:a6:b4:3a:47:08:e1:e4:ae: ce:3d:3e:38:49:ca:3b:b2:06:16:01:52:b5:95:29: a1:81:16:f9:db:83:6f:2c:2b:a5:0b:00:df:12:13: 61:ed:e3:af:4d:25:ca:51:03:6d:f4:99:c8:dc:29: 6f:54:9b:2d:a7:80:62:2f:78:16:47:3b:59:d9:4a: 69:ac:6e:ef:2a:26:13:e4:bd:6c:d7:dc:53:99:f6: 5e:f8:b4:d2:70:34:47:be:09:16:79:2b:28:4c:9b: 03:bc:89:f4:8d:ff:d9:bb:af:53:81:f5:46:a7:a9: a5:cc:43:ac:89:32:e4:ef:4e:64:c5:5d:16:10:09: 4c:6b:4a:2f:3b:91:a7:6d:15:06:d8:9e:7f:49:cb: 7c:71:f9:6d:3e:45:2f:66:da:dd:17:da:29:bd:68: bf:b2:7d:0f:95:c2:00:84:ae:15:f1:52:df:fb:39: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:29:68:FD:59:39:95:FE:19:BB:48:4C:6B:07:EB:7B:5C:99:4A:94 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b4:9a:7f:4c:fc:2b:63:a3:4f:08:d5:9b:ae:b5:d2:30:3a: ec:c4:18:b4:43:9e:e6:61:a1:84:5a:92:6f:66:89:f4:71:16: f0:d1:f0:4e:f5:65:ca:ae:9c:24:b2:26:80:01:9d:97:75:a5: 46:70:49:aa:c2:e0:5f:b0:44:d1:bb:5c:da:fc:85:cf:96:6a: 08:b0:00:37:dd:43:65:11:3c:ca:39:e5:e9:45:28:3d:df:23: c5:aa:03:a5:dd:80:61:ff:c6:1a:52:1a:34:ed:c2:ab:7d:81: 19:89:4f:2c:43:67:11:e1:96:20:47:0a:a2:f3:5a:d6:36:d2: a5:57:a0:0f:0c:be:38:db:4a:da:b2:0e:e8:96:52:69:5a:60: 3c:e2:b4:3b:e3:5f:b9:e6:15:d0:6c:8c:32:a9:8d:19:46:a9: b2:29:76:d7:65:36:51:3c:ef:d8:54:05:77:e7:66:7f:61:ea: 28:5c:8d:c3:16:8e:85:1d:08:ea:7b:13:df:0c:54:27:ab:32: 78:ed:e2:11:57:56:36:27:87:da:68:e5:05:9c:d6:1c:e4:75: 7e:48:70:3e:2f:c1:16:4c:26:c4:bf:be:de:15:ca:95:ab:1b: 98:44:e6:01:d9:57:9e:f1:b5:f2:a2:eb:33:10:cc:6d:fa:98: 6c:cb:37:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjUxMTAyMjEyMzMwWhcNMjUxMTA5MjEyMzMwWjAYMRYwFAYD VQQDEw02OTA3Y2JkMi1hOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLCq/KY/e8vdwrPKmAMPA4OUp7zQ2fIE62dp6UIHpKf003n+TfjHzzxtQJSp D298WUym3F1V+K9dFqJ2Mt3vDkbCythCUYjuw+o0Aj4dEE+lprQ6Rwjh5K7OPT44 Sco7sgYWAVK1lSmhgRb524NvLCulCwDfEhNh7eOvTSXKUQNt9JnI3ClvVJstp4Bi L3gWRztZ2UpprG7vKiYT5L1s19xTmfZe+LTScDRHvgkWeSsoTJsDvIn0jf/Zu69T gfVGp6mlzEOsiTLk705kxV0WEAlMa0ovO5GnbRUG2J5/Sct8cfltPkUvZtrdF9op vWi/sn0PlcIAhK4V8VLf+znKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOopaP1Z OZX+GbtITGsH63tcmUqUMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCtJp/TPwrY6NPCNWbrrXSMDrsxBi0Q57mYaGEWpJvZon0cRbw0fBO 9WXKrpwksiaAAZ2XdaVGcEmqwuBfsETRu1za/IXPlmoIsAA33UNlETzKOeXpRSg9 3yPFqgOl3YBh/8YaUho07cKrfYEZiU8sQ2cR4ZYgRwqi81rWNtKlV6APDL4420ra sg7ollJpWmA84rQ741+55hXQbIwyqY0ZRqmyKXbXZTZRPO/YVAV352Z/YeooXI3D Fo6FHQjqexPfDFQnqzJ47eIRV1Y2J4faaOUFnNYc5HV+SHA+L8EWTCbEv77eFcqV qxuYROYB2Vee8bXyouszEMxt+phsyzet -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:12 2025 by rpki-client