$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: bD87BWMxNLSh4K/jqAL5X545mhHZEVb/b2IIGBoaoCk= Subject key identifier: C7:0D:89:A2:EE:3A:48:2D:3C:48:C8:B5:09:D1:28:28:62:87:52:99 Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 01DE Signing time: Mon 03 Nov 2025 02:40:56 +0000 Manifest this update: Mon 03 Nov 2025 02:40:56 +0000 Manifest next update: Mon 10 Nov 2025 02:40:56 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: uLntVd6feYn0ZlBcKOJIG+oW/YCfzwOe1vwbTkNl7LM=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Nov 3 02:40:56 2025 GMT Not After : Nov 10 02:40:56 2025 GMT Subject: CN=69081638-aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:71:eb:86:d3:0e:21:56:79:7d:f7:cc:2c: a0:08:d7:b7:c3:31:dd:e4:8d:37:7e:9a:88:af:70: c4:80:26:f5:46:a7:37:f3:b2:97:ca:59:e6:20:6d: cc:1b:aa:f5:e7:53:21:7d:ac:76:84:29:d0:de:ae: 0f:cc:86:ae:ca:82:2d:a0:b9:d4:c9:ee:0d:f5:75: 3c:43:64:90:b0:fd:e0:31:c8:c6:ee:09:c2:76:fe: 37:2e:10:48:9d:d1:4d:a5:b7:05:30:38:7f:fe:3e: 03:72:96:d9:65:b9:a7:1c:d2:3e:e7:9d:5d:b2:52: ac:20:5f:ca:d8:1d:16:8d:e5:6e:f2:0a:1b:db:23: 4d:80:a7:d8:86:5f:65:ae:e3:90:df:46:60:77:d8: 1e:62:1d:75:f5:50:e3:c2:bf:50:fd:cd:b8:a2:6d: b4:fe:14:cd:28:06:50:f6:a2:0b:bc:3d:6b:c2:cb: 99:90:4f:ad:b6:26:5f:52:83:ef:b5:e9:ba:3d:c5: 86:57:29:e4:8b:e9:2b:3a:92:86:39:b6:cf:b1:ce: 81:c0:ed:55:fc:5b:64:02:31:cb:40:b8:fa:8c:6d: 8f:54:59:c1:23:10:ed:99:31:2f:d5:9c:78:63:38: fb:2e:28:8f:23:8d:80:f8:4c:ed:b2:dd:85:f5:b2: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:89:A2:EE:3A:48:2D:3C:48:C8:B5:09:D1:28:28:62:87:52:99 X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:89:ee:0d:89:9e:72:5b:9a:33:ea:be:76:32:f1:02:18:6f: ad:b5:29:b7:30:8f:fe:6a:46:60:a0:89:3e:a5:19:c1:0d:a7: 17:5b:01:ca:ab:a8:b6:fa:bf:e0:ae:90:c3:79:dd:98:ba:6e: 48:4a:ee:8c:23:0c:1f:90:3b:bb:38:a0:66:29:d4:51:7a:bc: b0:76:a5:77:98:41:35:9f:2a:ea:fc:a3:9a:f6:0f:ed:31:f7: 45:7e:78:07:48:75:ba:ac:81:fd:11:da:0f:d5:68:e3:7c:b5: ac:76:88:2f:cc:00:1d:3a:bc:60:78:69:7f:51:06:54:c2:fe: fb:cf:5e:bf:62:01:1f:83:23:77:53:d9:c1:49:3f:d8:26:68: 40:b9:d0:9c:39:66:9e:cb:66:29:dd:61:23:17:47:4d:64:2c: 26:b6:62:e9:4a:7d:75:17:08:c9:24:d6:51:52:51:76:08:a0: 52:ec:ff:52:35:d3:a0:ca:57:55:49:46:13:e0:12:1b:0d:9b: 76:b2:35:3c:aa:3d:93:a2:31:5d:48:9b:40:ed:7e:20:df:9c: 69:6f:93:93:23:9b:ac:71:bd:e8:a7:97:41:12:a6:0e:ed:e4: e7:d7:0c:3e:65:3e:f8:a7:26:90:96:0b:2b:71:34:a3:fe:0d: a2:90:61:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUxMTAzMDI0MDU2WhcNMjUxMTEwMDI0MDU2WjAYMRYwFAYD VQQDEw02OTA4MTYzOC1hYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ORx64bTDiFWeX33zCygCNe3wzHd5I03fpqIr3DEgCb1Rqc387KXylnmIG3M G6r151Mhfax2hCnQ3q4PzIauyoItoLnUye4N9XU8Q2SQsP3gMcjG7gnCdv43LhBI ndFNpbcFMDh//j4DcpbZZbmnHNI+551dslKsIF/K2B0WjeVu8gob2yNNgKfYhl9l ruOQ30Zgd9geYh119VDjwr9Q/c24om20/hTNKAZQ9qILvD1rwsuZkE+ttiZfUoPv tem6PcWGVynki+krOpKGObbPsc6BwO1V/FtkAjHLQLj6jG2PVFnBIxDtmTEv1Zx4 Yzj7LiiPI42A+Eztst2F9bLP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcNiaLu OkgtPEjItQnRKChih1KZMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlie4NiZ5yW5oz6r52MvECGG+ttSm3MI/+akZgoIk+pRnBDacXWwHK q6i2+r/grpDDed2Yum5ISu6MIwwfkDu7OKBmKdRRerywdqV3mEE1nyrq/KOa9g/t MfdFfngHSHW6rIH9EdoP1WjjfLWsdogvzAAdOrxgeGl/UQZUwv77z16/YgEfgyN3 U9nBST/YJmhAudCcOWaey2Yp3WEjF0dNZCwmtmLpSn11FwjJJNZRUlF2CKBS7P9S NdOgyldVSUYT4BIbDZt2sjU8qj2TojFdSJtA7X4g35xpb5OTI5uscb3op5dBEqYO 7eTn1ww+ZT74pyaQlgsrcTSj/g2ikGGv -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:35 2025 by rpki-client