$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: PSD2YMrROwNw4CAdyg95pCUKpzLn1gDvl6r+HK/IV/0= Subject key identifier: A0:DC:6C:65:AF:F9:FE:64:27:DD:29:E9:F6:A7:CD:2F:B0:40:C7:AF Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0A99 Signing time: Thu 18 Sep 2025 20:03:47 +0000 Manifest this update: Thu 18 Sep 2025 20:03:46 +0000 Manifest next update: Thu 25 Sep 2025 20:03:46 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: LvXJyMqDPKc6S0uQNaNBqsCIDThawLeRBTRyPA+k8EQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Sep 18 20:03:46 2025 GMT Not After : Sep 25 20:03:46 2025 GMT Subject: CN=68cc65a2-2f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:15:d4:7d:e6:bf:b1:fb:b3:60:6b:18:5a: 0d:65:80:fb:7a:f2:8f:d0:3d:22:ef:93:41:75:f9: d0:65:c7:6f:4a:c0:56:2b:c9:71:08:37:08:89:46: a1:c3:fb:fc:26:f2:52:a9:07:51:73:58:01:c1:26: 50:ea:5f:54:22:a2:30:7a:1f:1c:24:6d:a5:78:9c: 66:bf:10:84:3b:ed:be:bd:fe:c3:ed:f1:7a:95:74: 15:e4:46:32:c6:c7:c3:ee:64:a7:ef:b8:69:48:0f: 4b:86:0c:2d:cf:75:6b:49:a5:79:e4:17:01:7d:e7: 7b:85:c2:99:c4:b8:ac:36:31:4f:ac:3e:65:4e:6a: 32:a9:c3:53:f0:22:21:9e:39:7d:f4:f7:6d:48:c5: 65:82:32:bc:8b:79:f7:f1:ba:1c:69:5a:c7:2f:57: 5c:43:d1:00:af:af:4a:e5:f0:d3:ec:c3:7f:81:f9: 3b:a8:15:2d:84:e6:df:c0:9e:c8:86:52:0d:6f:e4: 5b:08:39:6d:b0:16:63:04:4a:a2:90:c6:8f:19:1e: ca:1f:13:9c:42:a5:0c:39:4f:d2:22:e7:77:80:9a: 77:32:e8:e6:bc:5c:f6:1e:3a:cb:46:16:06:ee:8e: 8d:49:4b:8f:ee:bb:a0:e5:e4:d6:11:8e:75:9a:a8: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DC:6C:65:AF:F9:FE:64:27:DD:29:E9:F6:A7:CD:2F:B0:40:C7:AF X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:60:b4:aa:14:ec:95:40:11:a9:1a:7b:e3:e9:52:f3:c0:1a: f7:10:e7:e9:cd:2e:54:30:d0:11:b3:6b:84:f6:60:67:ca:b6: 00:b7:ea:d6:60:6f:ea:cb:3d:94:bd:d0:d3:f2:69:c7:41:23: 9f:b0:0c:b4:1e:60:35:9a:21:6f:98:7f:ee:71:3e:b5:fd:9d: 3d:e4:f9:58:dc:b8:c3:d2:5c:8f:7c:2b:6c:d0:2d:1d:80:34: 66:9b:b0:79:25:35:6a:bd:a2:29:4a:08:90:b4:e4:ca:01:09: 05:4e:40:aa:67:5d:2f:17:e4:6c:ce:b2:8a:ce:96:c5:64:58: 90:8a:19:f7:f5:e4:15:9f:91:26:aa:e5:f1:f5:be:1b:88:24: 77:56:03:db:8a:ef:51:12:d0:1e:8b:17:50:bb:87:97:d9:7d: ce:64:0d:ba:d0:56:26:d2:9d:1d:48:b0:ad:d7:a8:b9:5b:5f: e0:6c:04:29:60:ac:83:3f:20:f0:16:00:ff:b7:b8:60:24:af: 83:c6:12:25:50:80:59:4a:4c:7c:c8:e3:5b:71:75:bb:97:33: 68:32:d6:23:a6:9a:5f:67:c9:c6:54:ec:0b:6f:df:dc:c1:3b: b2:5b:de:b7:13:a6:0a:2c:56:a1:f5:00:ab:e7:3b:66:67:c4: f6:b1:26:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjUwOTE4MjAwMzQ2WhcNMjUwOTI1MjAwMzQ2WjAYMRYwFAYD VQQDEw02OGNjNjVhMi0yZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lQV1H3mv7H7s2BrGFoNZYD7evKP0D0i75NBdfnQZcdvSsBWK8lxCDcIiUah w/v8JvJSqQdRc1gBwSZQ6l9UIqIweh8cJG2leJxmvxCEO+2+vf7D7fF6lXQV5EYy xsfD7mSn77hpSA9Lhgwtz3VrSaV55BcBfed7hcKZxLisNjFPrD5lTmoyqcNT8CIh njl99PdtSMVlgjK8i3n38bocaVrHL1dcQ9EAr69K5fDT7MN/gfk7qBUthObfwJ7I hlINb+RbCDltsBZjBEqikMaPGR7KHxOcQqUMOU/SIud3gJp3MujmvFz2HjrLRhYG 7o6NSUuP7rug5eTWEY51mqj/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDcbGWv +f5kJ90p6fanzS+wQMevMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzYLSqFOyVQBGpGnvj6VLzwBr3EOfpzS5UMNARs2uE9mBnyrYAt+rW YG/qyz2UvdDT8mnHQSOfsAy0HmA1miFvmH/ucT61/Z095PlY3LjD0lyPfCts0C0d gDRmm7B5JTVqvaIpSgiQtOTKAQkFTkCqZ10vF+RszrKKzpbFZFiQihn39eQVn5Em quXx9b4biCR3VgPbiu9REtAeixdQu4eX2X3OZA260FYm0p0dSLCt16i5W1/gbAQp YKyDPyDwFgD/t7hgJK+DxhIlUIBZSkx8yONbcXW7lzNoMtYjpppfZ8nGVOwLb9/c wTuyW963E6YKLFah9QCr5ztmZ8T2sSaK -----END CERTIFICATE-----Generated at Fri Sep 19 08:49:20 2025 by rpki-client