$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft File: oOoqcgysMcg3X1Vs-Uv--NERafY.mft (raw, json) Hash identifier: f9gFIhiHIr2Ho0SH2v+383SBTSVvSWLYqEd+xXc0/aA= Subject key identifier: 7F:8E:A4:F8:42:EC:73:31:92:D0:7C:E3:87:D4:54:87:5F:BF:86:22 Authority key identifier: A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 Certificate issuer: /CN=A917C0F3/serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft Manifest number: 97 Signing time: Mon 03 Nov 2025 06:24:44 +0000 Manifest this update: Mon 03 Nov 2025 06:24:43 +0000 Manifest next update: Mon 10 Nov 2025 06:24:43 +0000 Files and hashes: 1: oOoqcgysMcg3X1Vs-Uv--NERafY.crl (hash: Tc5Hn5Ve67xc+B2N5i0LsB1Ec3kNlgDlvODaHkIP25E=) 2: 02F0D9DED0BA11EFA8B5A526C4F9AE02.roa (hash: sDB2dzkpvGOMbxnCK5hWZ3ZmmwAVruvEUCtgdzq6VhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Validity Not Before: Nov 3 06:24:43 2025 GMT Not After : Nov 10 06:24:43 2025 GMT Subject: CN=69084aac-9d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:6d:43:cf:29:57:fa:24:a2:d7:8f:39:16: 9a:76:98:03:f7:c7:e7:25:7c:d4:03:65:e7:2b:ab: b9:53:f2:57:8b:d6:52:00:56:c8:18:91:c8:ab:00: 26:6f:d0:90:19:c5:98:ad:1c:9c:16:4c:fa:97:79: c0:be:42:0c:f4:20:90:fa:3f:5d:b1:3a:a7:45:31: ae:19:e2:20:53:6d:51:54:5b:f3:d4:2f:07:5d:da: 52:0e:ff:02:f2:a4:ab:99:4d:e8:36:ae:17:64:fe: 64:3f:1d:32:e2:2e:4a:3d:89:37:e2:c5:2e:c6:5d: e3:11:81:15:90:ef:45:3e:4c:99:f3:8e:be:c7:0d: 1b:30:22:8e:18:83:5a:43:73:f6:57:0f:3c:94:36: f4:7d:17:08:7d:9c:44:82:00:5d:a0:27:39:86:bd: 3e:4e:e4:9b:4f:6a:16:8e:90:40:05:82:db:b5:91: 0f:6d:9b:a4:1a:ee:52:97:40:a8:71:8f:4f:ed:7f: 76:ac:f4:a7:45:6d:f3:37:55:53:2e:a2:d7:ef:3e: a7:21:1c:be:13:df:d4:97:79:bd:6d:47:79:19:c6: b5:38:60:6c:2e:87:a1:d4:20:db:1e:b2:69:fc:e1: 11:ee:0a:b6:d6:b2:b2:c2:e0:14:95:1f:b7:42:23: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:A4:F8:42:EC:73:31:92:D0:7C:E3:87:D4:54:87:5F:BF:86:22 X509v3 Authority Key Identifier: keyid:A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:37:a0:36:81:3e:b7:0d:15:37:22:1c:ec:9f:7e:ff:f5:6b: 50:de:e6:56:87:0c:11:a6:c5:ed:01:84:d4:81:1a:e1:c3:ff: 8b:b8:2d:40:9f:36:c5:33:c3:b1:85:c7:22:15:80:0d:2e:f3: 67:d5:3b:11:cf:42:71:62:a7:b8:6f:77:9c:d2:7f:d7:93:02: 9d:96:41:fd:cd:63:fb:83:89:6a:77:43:8e:42:c7:66:2f:05: 49:6d:6c:14:de:b5:ad:91:32:58:bb:02:84:91:d7:a0:7a:82: 66:a9:ab:82:2a:1a:0f:c4:02:ba:e4:9a:70:2c:92:c3:cb:57: db:02:6c:9e:36:d5:ac:e2:4f:4e:34:4d:a3:b6:ec:ed:12:3e: fe:71:8a:5d:54:d7:4a:1b:2b:d3:55:52:fb:9d:f1:89:25:1f: d2:dd:c0:c7:55:47:1f:9e:8a:f2:1e:8c:9f:02:d0:f1:79:3e: 99:2c:8b:eb:6f:d7:01:3c:8b:ff:c4:2f:fe:5c:74:dd:90:ee: 80:60:b9:53:4d:a2:ba:de:32:f9:40:0b:80:cf:e0:b0:36:f4: 98:64:0d:63:5f:79:92:ca:6f:ed:66:fa:9e:19:73:d6:a0:0c: 2d:7f:80:16:18:b4:36:ad:6f:ce:5e:b0:7a:ba:cc:f0:b7:c3: 76:43:25:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjMxMTAvBgNVBAUTKEEwRUEyQTcyMENBQzMxQzgzNzVGNTU2Q0Y5NEJGRUY4 RDExMTY5RjYwHhcNMjUxMTAzMDYyNDQzWhcNMjUxMTEwMDYyNDQzWjAYMRYwFAYD VQQDEw02OTA4NGFhYy05ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mxtQ88pV/okotePORaadpgD98fnJXzUA2XnK6u5U/JXi9ZSAFbIGJHIqwAm b9CQGcWYrRycFkz6l3nAvkIM9CCQ+j9dsTqnRTGuGeIgU21RVFvz1C8HXdpSDv8C 8qSrmU3oNq4XZP5kPx0y4i5KPYk34sUuxl3jEYEVkO9FPkyZ846+xw0bMCKOGINa Q3P2Vw88lDb0fRcIfZxEggBdoCc5hr0+TuSbT2oWjpBABYLbtZEPbZukGu5Sl0Co cY9P7X92rPSnRW3zN1VTLqLX7z6nIRy+E9/Ul3m9bUd5Gca1OGBsLoeh1CDbHrJp /OER7gq21rKywuAUlR+3QiPfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+OpPhC 7HMxktB844fUVIdfv4YiMB8GA1UdIwQYMBaAFKDqKnIMrDHIN19VbPlL/vjREWn2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy82MEUyMDdCQ0Qw QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01jZzNYMVZzLVV2LS1ORVJh ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Pb3FjZ3lzTWNnM1gxVnMtVXYtLU5FUmFmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGMy82MEUyMDdCQ0QwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01j ZzNYMVZzLVV2LS1ORVJhZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDN6A2gT63DRU3Ihzsn37/9WtQ3uZWhwwRpsXtAYTUgRrhw/+LuC1A nzbFM8OxhcciFYANLvNn1TsRz0JxYqe4b3ec0n/XkwKdlkH9zWP7g4lqd0OOQsdm LwVJbWwU3rWtkTJYuwKEkdegeoJmqauCKhoPxAK65JpwLJLDy1fbAmyeNtWs4k9O NE2jtuztEj7+cYpdVNdKGyvTVVL7nfGJJR/S3cDHVUcfnoryHoyfAtDxeT6ZLIvr b9cBPIv/xC/+XHTdkO6AYLlTTaK63jL5QAuAz+CwNvSYZA1jX3mSym/tZvqeGXPW oAwtf4AWGLQ2rW/OXrB6uszwt8N2QyVr -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:58 2025 by rpki-client