$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: EVU3bjTEvbdf+zlCBT+T4Z2xUAntg3WQNMN3YEtc2Lg= Subject key identifier: 63:1C:7D:AF:1A:0C:2E:D7:F3:73:C5:EE:F6:44:52:FC:6B:EE:46:8B Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 020C Signing time: Mon 03 Nov 2025 02:16:10 +0000 Manifest this update: Mon 03 Nov 2025 02:16:10 +0000 Manifest next update: Mon 10 Nov 2025 02:16:10 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: Mftc49f/kcJ0WJzZhSVQvKMZ+WB3AtEyhThz21/nojQ=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: Ll4yg/VXe6ptCubyWYXaO265ePb/yR1xqd8fLdCSjr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Nov 3 02:16:10 2025 GMT Not After : Nov 10 02:16:10 2025 GMT Subject: CN=6908106a-a3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:1f:9f:40:0e:36:b6:81:3a:6f:24:53:5c: 20:f2:78:f8:e5:6e:80:f0:85:45:57:42:03:7b:8b: 0d:4e:35:54:66:14:33:2a:64:5d:aa:db:af:49:9a: cb:c4:78:ad:ad:32:30:2c:e6:eb:52:7e:5e:e4:3b: ec:38:5b:3f:f0:df:ce:8d:ec:93:14:7b:5e:45:3e: fb:73:9b:54:6c:35:dc:f4:0d:91:29:38:f6:da:05: 57:0b:b2:31:18:9b:50:88:f8:42:e4:90:f9:d0:1c: 4b:1c:b1:55:03:b7:c2:4c:a2:d4:ce:21:22:6e:50: 23:22:c8:5e:ac:17:a5:66:49:9e:4d:d1:e5:e7:3b: 0b:5b:f8:bc:1f:b7:1a:04:b1:43:eb:8f:4f:07:ae: 00:5e:ff:b3:be:a0:51:3d:bf:37:95:52:be:83:e2: c1:d7:79:9c:2b:24:d7:10:df:25:00:39:c8:28:49: 78:91:e7:14:73:ef:9c:c1:2a:58:37:21:f7:ed:c0: fc:d9:28:c8:af:5c:aa:6d:78:45:6c:f3:0b:fb:dc: 4a:7d:bd:a7:8d:b3:a4:d8:d6:44:8b:7b:95:ab:f5: ef:7d:11:f1:44:b8:91:0b:d8:98:36:ca:80:8d:a8: dc:62:24:37:86:59:63:6c:8a:8a:05:27:79:8f:0f: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:7D:AF:1A:0C:2E:D7:F3:73:C5:EE:F6:44:52:FC:6B:EE:46:8B X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:35:30:a7:19:0c:5f:37:fa:f2:25:1c:94:8d:d8:2d:f6:94: 6e:b7:cc:6c:18:ab:90:cd:a9:01:35:b2:6a:1e:ca:69:fc:7a: 5a:0d:cd:82:4c:78:41:93:26:7f:9c:46:84:86:9c:bd:7a:ea: 10:12:03:ac:00:10:bc:73:ff:3b:3b:0d:c0:60:07:d9:e2:15: ea:b6:79:57:5d:56:2f:e6:00:27:9d:2b:58:6f:cd:51:55:78: ea:de:ae:89:b1:5e:88:4a:de:51:68:27:e6:51:19:d0:9d:9a: 00:1b:5a:c5:7a:c8:a5:d6:5d:b1:a8:76:62:5d:46:cb:c2:98: 5f:09:fa:3b:5f:5b:a4:ac:34:13:9e:41:cb:ae:26:2d:a6:36: 3c:e0:f1:de:8b:e9:f1:78:3f:cb:ea:f1:2d:28:2a:a0:e0:20: 02:e5:f9:45:51:9e:e8:c1:09:b3:7a:17:33:be:c4:20:70:78: e8:80:a1:a8:15:33:0b:c1:b6:70:44:a5:eb:53:af:d1:d0:47: e0:25:31:77:99:9d:62:01:f4:20:5d:6a:32:01:22:23:d7:f6: 26:f9:3d:f0:b7:54:85:83:ac:33:ff:13:24:e2:09:3b:8a:4f: 00:14:fb:89:90:fa:9e:8f:e7:9d:d5:37:61:8e:4f:7f:c9:a4: da:79:7f:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUxMTAzMDIxNjEwWhcNMjUxMTEwMDIxNjEwWjAYMRYwFAYD VQQDEw02OTA4MTA2YS1hM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrkfn0AONraBOm8kU1wg8nj45W6A8IVFV0IDe4sNTjVUZhQzKmRdqtuvSZrL xHitrTIwLObrUn5e5DvsOFs/8N/OjeyTFHteRT77c5tUbDXc9A2RKTj22gVXC7Ix GJtQiPhC5JD50BxLHLFVA7fCTKLUziEiblAjIsherBelZkmeTdHl5zsLW/i8H7ca BLFD649PB64AXv+zvqBRPb83lVK+g+LB13mcKyTXEN8lADnIKEl4kecUc++cwSpY NyH37cD82SjIr1yqbXhFbPML+9xKfb2njbOk2NZEi3uVq/XvfRHxRLiRC9iYNsqA jajcYiQ3hlljbIqKBSd5jw8Y2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMcfa8a DC7X83PF7vZEUvxr7kaLMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUNTCnGQxfN/ryJRyUjdgt9pRut8xsGKuQzakBNbJqHspp/HpaDc2C THhBkyZ/nEaEhpy9euoQEgOsABC8c/87Ow3AYAfZ4hXqtnlXXVYv5gAnnStYb81R VXjq3q6JsV6ISt5RaCfmURnQnZoAG1rFesil1l2xqHZiXUbLwphfCfo7X1ukrDQT nkHLriYtpjY84PHei+nxeD/L6vEtKCqg4CAC5flFUZ7owQmzehczvsQgcHjogKGo FTMLwbZwRKXrU6/R0EfgJTF3mZ1iAfQgXWoyASIj1/Ym+T3wt1SFg6wz/xMk4gk7 ik8AFPuJkPqej+ed1Tdhjk9/yaTaeX+p -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:41 2025 by rpki-client