$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json) Hash identifier: rVItsk+gkPrdNXwkG+xsHGCnUZzUHBOHOKG+JpmnGIU= Subject key identifier: A9:7F:AE:83:FD:A6:7E:D9:35:9A:57:7D:FA:84:FE:4A:71:F0:24:99 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 266E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft Manifest number: 265D Signing time: Sun 02 Nov 2025 15:41:58 +0000 Manifest this update: Sun 02 Nov 2025 15:41:57 +0000 Manifest next update: Sun 09 Nov 2025 15:41:57 +0000 Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: z/OfvVO6jnP1wGA+RpMTIpGrk4hwyTzBsT0rHvIcgcM=) 2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9838 (0x266e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Nov 2 15:41:57 2025 GMT Not After : Nov 9 15:41:57 2025 GMT Subject: CN=69077bc5-47f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:82:a7:b1:ad:7a:72:82:1b:09:0e:e6:93: 31:45:3e:05:c5:51:c1:60:67:53:5a:a9:7a:99:8d: 75:37:39:3c:66:fe:34:f0:fb:12:02:ff:90:1e:1d: f1:97:1f:34:0b:87:4c:d8:8e:9c:0a:fb:5a:e1:68: d2:bd:4c:cf:6f:c4:f9:67:70:24:f9:94:7b:18:47: 39:7a:1a:a2:2d:37:83:89:35:0a:da:e3:a5:41:5a: cf:62:68:b2:df:d9:e1:d5:53:e5:af:29:6d:bb:16: 47:03:be:c1:71:ac:8f:12:0c:40:50:01:92:ab:d9: 6b:82:cf:4c:13:23:38:e9:4a:27:3e:8c:a8:24:7a: d7:10:3e:03:1f:38:0a:35:bb:6e:ee:4e:2b:be:7a: 92:b2:db:97:4f:21:67:d5:06:3c:96:12:7a:98:b8: d7:12:a0:2f:59:3a:f7:43:99:56:47:7e:f6:c4:85: c0:d9:15:d0:37:91:f8:a1:25:9e:f1:89:b3:2f:33: 3e:62:2e:59:64:70:3b:3a:16:a9:ae:e6:29:ba:f4: 2a:b7:65:43:66:cf:9a:5e:54:31:16:91:4b:e6:7b: 2f:23:16:e3:e5:98:9f:29:f8:61:c6:f9:25:e3:a8: 4b:22:1f:0c:1e:05:58:04:d5:f8:dc:4c:1e:04:8a: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:AE:83:FD:A6:7E:D9:35:9A:57:7D:FA:84:FE:4A:71:F0:24:99 X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:be:3e:88:ed:49:c3:d9:8f:7e:d2:d0:62:5e:32:f2:3d: 91:55:a2:a2:7f:6e:84:f1:91:f9:24:0c:0b:ca:93:3b:23:59: 7b:11:f2:64:e3:94:e9:0f:fd:8b:08:aa:5c:5f:97:85:7d:57: 89:84:17:5c:3c:5e:25:eb:71:ea:84:9e:c5:a0:04:03:a1:c0: a7:6f:5f:42:5c:28:fb:bd:bb:3d:c1:56:1c:cf:a3:a6:1d:8c: 9e:18:00:e3:94:b9:6c:bb:f4:f8:56:da:99:6b:14:49:d8:0a: d4:3a:0b:fb:ff:2d:40:9d:9f:0d:ed:31:a1:bc:87:e9:b9:19: 7a:6b:b6:5e:33:8b:db:bc:b4:da:4e:d5:6c:51:d2:68:14:f1: 5b:ba:4f:fd:86:7b:50:8b:e4:e9:30:50:28:7b:01:02:d3:43: f8:24:3b:50:0d:27:22:ad:ef:05:4e:ba:c0:0b:4a:d3:72:c4: 38:11:10:4e:3b:6c:0e:3c:7a:32:69:42:37:03:c8:41:0f:b2: 23:a8:51:c9:6c:9d:68:1c:f2:bd:b0:9d:15:44:72:a1:79:3d: bf:63:6e:54:ce:13:0e:69:da:98:99:90:22:9e:83:69:58:a5: d8:fe:2f:ab:db:c8:1b:c6:f4:eb:74:2f:41:f7:80:30:69:f7: 17:d1:48:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUxMTAyMTU0MTU3WhcNMjUxMTA5MTU0MTU3WjAYMRYwFAYD VQQDEw02OTA3N2JjNS00N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttGCp7GtenKCGwkO5pMxRT4FxVHBYGdTWql6mY11Nzk8Zv408PsSAv+QHh3x lx80C4dM2I6cCvta4WjSvUzPb8T5Z3Ak+ZR7GEc5ehqiLTeDiTUK2uOlQVrPYmiy 39nh1VPlryltuxZHA77BcayPEgxAUAGSq9lrgs9MEyM46UonPoyoJHrXED4DHzgK Nbtu7k4rvnqSstuXTyFn1QY8lhJ6mLjXEqAvWTr3Q5lWR372xIXA2RXQN5H4oSWe 8YmzLzM+Yi5ZZHA7OhapruYpuvQqt2VDZs+aXlQxFpFL5nsvIxbj5ZifKfhhxvkl 46hLIh8MHgVYBNX43EweBIqFfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl/roP9 pn7ZNZpXffqE/kpx8CSZMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy RjRzLUYwSXdBTDJZSEtaelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABB74+iO1Jw9mPftLQYl4y8j2RVaKif26E8ZH5JAwLypM7I1l7EfJk 45TpD/2LCKpcX5eFfVeJhBdcPF4l63HqhJ7FoAQDocCnb19CXCj7vbs9wVYcz6Om HYyeGADjlLlsu/T4VtqZaxRJ2ArUOgv7/y1AnZ8N7TGhvIfpuRl6a7ZeM4vbvLTa TtVsUdJoFPFbuk/9hntQi+TpMFAoewEC00P4JDtQDScire8FTrrAC0rTcsQ4ERBO O2wOPHoyaUI3A8hBD7IjqFHJbJ1oHPK9sJ0VRHKheT2/Y25UzhMOadqYmZAinoNp WKXY/i+r28gbxvTrdC9B94AwafcX0Uhq -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:55 2025 by rpki-client