$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: BQah8Pchcn+1CQDq+JWkJ573CDMCMkJTcWXwH8FNyFs= Subject key identifier: 1D:59:4A:F0:33:22:EE:29:01:54:A6:A7:A4:53:81:C2:BC:BB:3F:A4 Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 07:57:13 +0000 Manifest this update: Mon 03 Nov 2025 07:57:12 +0000 Manifest next update: Mon 10 Nov 2025 07:57:12 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: AUiLGjseUx/Ccmln2WW/HIRL4k0EbuFsQ+9cLrJBWfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Nov 3 07:57:12 2025 GMT Not After : Nov 10 07:57:12 2025 GMT Subject: CN=69086058-b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:df:2f:6c:0f:c1:25:74:f8:81:2f:bc:df: 10:2a:a7:27:49:06:c4:89:55:b6:3d:6c:4c:d9:2c: 96:6e:d0:a7:0b:ed:07:33:d2:30:c9:cc:15:25:cd: e7:23:40:10:36:88:eb:65:2a:a4:dc:bc:84:a4:d9: 52:bc:88:8b:89:17:f6:30:d3:10:cd:d6:12:0f:0c: f3:fc:3d:20:04:47:ba:8d:b1:68:1c:41:7a:7b:81: e0:16:15:6f:a6:bb:de:17:d3:02:47:66:37:f1:56: 21:21:a7:c2:37:6f:94:48:31:da:a9:6f:6a:53:4d: 83:c2:84:4a:7e:b0:43:83:e9:9a:fc:97:b3:9a:11: df:47:63:8d:a8:cd:28:ec:65:21:98:04:62:3c:d3: 55:5a:f3:e5:12:81:1c:b3:28:9e:b9:38:4f:1b:ad: 12:eb:32:d9:45:62:4c:8c:09:98:95:3e:96:d9:b1: 10:58:4b:fa:9d:3e:12:d6:b3:53:cc:ba:f3:6c:3a: e4:a3:1e:12:3b:e3:4c:64:b7:44:51:29:8b:4d:96: 1b:15:34:8b:c6:e0:98:60:1d:dd:c3:cc:e8:55:ab: 56:75:a4:08:72:93:d1:1c:7c:38:ef:db:dd:e2:e7: 53:8c:bb:71:3e:6d:b7:b3:dd:75:07:94:0b:1b:dc: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:4A:F0:33:22:EE:29:01:54:A6:A7:A4:53:81:C2:BC:BB:3F:A4 X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:aa:a7:64:ab:53:76:5a:13:a5:96:93:95:0b:f9:d2:e1:c2: 3e:c5:38:88:8e:39:85:25:09:fa:cd:78:ec:19:7c:d3:75:14: 7a:94:9a:d6:41:00:a0:14:13:b0:f1:7e:1f:97:1e:fd:4a:d9: 9d:70:7c:d8:a1:d6:74:5f:be:0b:8f:be:16:56:56:f9:29:d3: 40:9f:a1:ce:e7:83:5f:07:45:6d:02:3d:dc:e1:f7:a2:2a:8c: 4d:f8:c4:de:a8:de:79:6b:6e:bb:ad:9c:17:a2:2e:d0:8d:c2: 59:87:c1:6b:e2:b8:9a:42:7b:6c:ac:4d:16:5c:df:22:83:47: bb:cb:8d:99:47:8e:62:49:f3:14:60:8e:11:9e:b1:35:2a:06: d4:71:bf:e6:26:70:f3:f8:3a:2d:85:29:7a:1e:ab:19:91:00: 83:1f:6d:0a:56:cd:5b:96:35:39:b0:f7:b0:d4:a2:52:b9:5a: 6d:f1:ce:7b:16:06:93:60:fe:30:3b:08:95:32:2a:4e:50:0a: 9d:0f:c6:22:66:05:dd:83:5f:c3:28:c6:d7:83:35:6a:12:fb: ba:be:a1:d0:59:be:71:f1:92:ab:d8:39:b6:66:29:20:c1:a8: 17:67:5d:22:8d:e4:7b:a9:31:16:e5:6b:b1:b6:68:d8:14:b7: 14:9d:6e:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNTExMDMwNzU3MTJaFw0yNTExMTAwNzU3MTJaMBgxFjAUBgNV BAMTDTY5MDg2MDU4LWI3MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCynt8vbA/BJXT4gS+83xAqpydJBsSJVbY9bEzZLJZu0KcL7Qcz0jDJzBUlzecj QBA2iOtlKqTcvISk2VK8iIuJF/Yw0xDN1hIPDPP8PSAER7qNsWgcQXp7geAWFW+m u94X0wJHZjfxViEhp8I3b5RIMdqpb2pTTYPChEp+sEOD6Zr8l7OaEd9HY42ozSjs ZSGYBGI801Va8+USgRyzKJ65OE8brRLrMtlFYkyMCZiVPpbZsRBYS/qdPhLWs1PM uvNsOuSjHhI740xkt0RRKYtNlhsVNIvG4JhgHd3DzOhVq1Z1pAhyk9EcfDjv293i 51OMu3E+bbez3XUHlAsb3DvjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHVlK8DMi 7ikBVKanpFOBwry7P6QwHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGqp2SrU3ZaE6WWk5UL+dLhwj7FOIiOOYUlCfrNeOwZfNN1FHqUmtZB AKAUE7Dxfh+XHv1K2Z1wfNih1nRfvguPvhZWVvkp00Cfoc7ng18HRW0CPdzh96Iq jE34xN6o3nlrbrutnBeiLtCNwlmHwWviuJpCe2ysTRZc3yKDR7vLjZlHjmJJ8xRg jhGesTUqBtRxv+YmcPP4Oi2FKXoeqxmRAIMfbQpWzVuWNTmw97DUolK5Wm3xznsW BpNg/jA7CJUyKk5QCp0PxiJmBd2DX8MoxteDNWoS+7q+odBZvnHxkqvYObZmKSDB qBdnXSKN5HupMRbla7G2aNgUtxSdbtI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:49 2025 by rpki-client