$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft File: OUsE6TpOrJKA9-wejZv_nebApZ8.mft (raw, json) Hash identifier: E9u8rxKc/2b3T1o3laDduMcMH4e7fyk05N68ZDE3XOU= Subject key identifier: AA:B5:D0:1A:F9:E8:86:E2:69:69:24:25:E1:7C:DC:7B:63:8D:8A:2B Authority key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F Certificate issuer: /CN=A9150F54/serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft Manifest number: 06 Signing time: Mon 03 Nov 2025 08:04:02 +0000 Manifest this update: Mon 03 Nov 2025 08:04:02 +0000 Manifest next update: Mon 10 Nov 2025 08:04:02 +0000 Files and hashes: 1: OUsE6TpOrJKA9-wejZv_nebApZ8.crl (hash: I1jqZyz59Dv7VktRt5TnmlInkuQUz/mIUa5wuuPRZ0U=) 2: 8483134EB3D211F0A8A4D05CC4F9AE02.roa (hash: zZnDo53y65bsfaE1VKEk5cKNAHLKuPLAbEOb+OH2fmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F Validity Not Before: Nov 3 08:04:02 2025 GMT Not After : Nov 10 08:04:02 2025 GMT Subject: CN=690861f2-e3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:fa:0d:00:f1:e2:ae:9b:e2:28:94:49:37: 23:a0:58:ee:7d:38:88:85:9a:69:da:35:2d:01:82: f9:5b:07:2c:ad:76:09:06:1b:0e:ff:75:18:18:9a: 61:97:ea:87:08:4e:3b:5a:5d:fb:fb:65:a1:93:49: 9c:61:5d:9b:4f:ed:18:d6:2f:7e:ce:72:70:a6:a8: 5c:7f:13:08:43:d4:b2:23:a4:13:ce:25:f0:e7:9d: 12:b4:33:c6:24:eb:66:af:a9:9c:0f:bb:ba:58:a4: 31:f1:67:5e:cc:ab:73:2e:45:6a:86:f8:27:be:dc: 0b:32:0a:f7:5a:73:0b:f3:28:a0:4f:fc:45:08:03: c5:11:62:1d:b2:29:a0:33:2f:5b:49:58:a6:bf:5f: 13:64:d1:bf:5f:be:ae:cd:5e:0b:04:5d:14:05:63: b6:a4:56:88:22:89:44:9e:4b:dc:e3:0a:0e:fd:3d: f1:b4:75:86:f2:01:c2:2f:86:5d:4a:39:47:4c:7d: f8:8c:fb:44:66:e0:9a:49:37:df:48:d2:ba:f0:9e: 99:eb:85:c7:88:6e:32:3f:77:35:e5:41:44:c7:36: 61:24:68:5d:63:fe:21:c5:3d:2b:11:61:29:ca:06: b7:18:ad:d2:e5:02:f6:f9:be:c8:66:12:5e:5d:8a: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B5:D0:1A:F9:E8:86:E2:69:69:24:25:E1:7C:DC:7B:63:8D:8A:2B X509v3 Authority Key Identifier: keyid:39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f0:c9:1c:34:b2:94:55:c1:28:7a:16:2b:0d:32:6c:72:cb: 42:cf:c7:1a:45:df:f1:5d:d1:b5:fa:06:70:f1:d4:c4:3c:5b: 40:98:10:94:ec:be:0a:3c:89:d5:a2:10:1f:ef:bc:ec:72:1f: 66:82:06:4a:dc:3b:75:87:08:21:ae:be:05:2e:f7:d1:9c:21: c8:55:b0:a0:a8:39:8b:16:96:3a:df:4a:5b:84:ae:97:2c:cd: 88:73:a7:2f:a0:5d:da:4a:9d:4a:61:ed:c5:28:3c:e0:2a:1f: 8a:22:c2:3e:75:7b:f1:c6:54:8f:a0:b9:b9:10:32:df:00:e4: d9:28:7e:6c:92:88:3a:78:15:c2:a4:9f:ae:d7:6a:9d:06:a6: 33:40:92:c8:29:05:3f:5c:02:72:1c:fd:80:26:4d:00:85:77: af:fe:3f:f2:f0:82:a4:23:c2:fc:5a:39:bd:28:a5:f4:e1:87: 3c:0f:04:3d:02:2c:c2:58:63:0b:bd:c0:b8:46:59:8c:60:68: 2f:e5:97:0f:9a:d1:3d:94:89:0b:7d:d0:5d:af:58:d2:e8:78: ad:89:71:17:90:2a:2a:01:26:4a:f4:0b:86:97:b9:5d:c2:e7: 5d:c2:74:94:5a:02:fe:5a:56:3b:37:ca:0b:df:04:64:40:55: b1:c3:20:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEY1NDExMC8GA1UEBRMoMzk0QjA0RTkzQTRFQUM5MjgwRjdFQzFFOEQ5QkZGOURF NkMwQTU5RjAeFw0yNTExMDMwODA0MDJaFw0yNTExMTAwODA0MDJaMBgxFjAUBgNV BAMTDTY5MDg2MWYyLWUzY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQbfoNAPHirpviKJRJNyOgWO59OIiFmmnaNS0BgvlbByytdgkGGw7/dRgYmmGX 6ocITjtaXfv7ZaGTSZxhXZtP7RjWL37OcnCmqFx/EwhD1LIjpBPOJfDnnRK0M8Yk 62avqZwPu7pYpDHxZ17Mq3MuRWqG+Ce+3AsyCvdacwvzKKBP/EUIA8URYh2yKaAz L1tJWKa/XxNk0b9fvq7NXgsEXRQFY7akVogiiUSeS9zjCg79PfG0dYbyAcIvhl1K OUdMffiM+0Rm4JpJN99I0rrwnpnrhceIbjI/dzXlQUTHNmEkaF1j/iHFPSsRYSnK BrcYrdLlAvb5vshmEl5dinVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqrXQGvno huJpaSQl4Xzce2ONiiswHwYDVR0jBBgwFoAUOUsE6TpOrJKA9+wejZv/nebApZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRjU0L0VBNDRCNkMwQjNE MTExRjA4ODg2QTc1QkM0RjlBRTAyL09Vc0U2VHBPckpLQTktd2VqWnZfbmViQXBa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VzRTZUcE9ySktBOS13ZWpadl9uZWJBcFo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RjU0L0VBNDRCNkMwQjNEMTExRjA4ODg2QTc1QkM0RjlBRTAyL09Vc0U2VHBPckpL QTktd2VqWnZfbmViQXBaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHwyRw0spRVwSh6FisNMmxyy0LPxxpF3/Fd0bX6BnDx1MQ8W0CYEJTs vgo8idWiEB/vvOxyH2aCBkrcO3WHCCGuvgUu99GcIchVsKCoOYsWljrfSluErpcs zYhzpy+gXdpKnUph7cUoPOAqH4oiwj51e/HGVI+gubkQMt8A5NkofmySiDp4FcKk n67Xap0GpjNAksgpBT9cAnIc/YAmTQCFd6/+P/LwgqQjwvxaOb0opfThhzwPBD0C LMJYYwu9wLhGWYxgaC/llw+a0T2UiQt90F2vWNLoeK2JcReQKioBJkr0C4aXuV3C 513CdJRaAv5aVjs3ygvfBGRAVbHDIGo= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:54 2025 by rpki-client