$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json) Hash identifier: nXk2SGQzgULHWFaSRR7PAfpKi5UWaTMC0MTchRM9hf8= Subject key identifier: 2F:41:AD:A0:4C:6F:BE:5E:DF:B2:90:61:04:48:0B:93:E5:CA:3B:54 Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft Manifest number: 03DC Signing time: Wed 05 Nov 2025 00:41:36 +0000 Manifest this update: Wed 05 Nov 2025 00:41:36 +0000 Manifest next update: Wed 12 Nov 2025 00:41:36 +0000 Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: PdrgT9N+19J6JDGGyGh/Y/25CJYZ1A3U3FrGBYTwMu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194040, serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0 Validity Not Before: Nov 5 00:41:36 2025 GMT Not After : Nov 12 00:41:36 2025 GMT Subject: CN=690a9d40-5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:3a:ba:cf:e7:4a:d6:1c:36:fb:6a:55:5a: 11:4a:58:3d:21:66:30:83:36:da:d2:8c:d2:bf:f5: 41:c5:e1:a8:bd:06:6b:2a:f7:fd:fc:5d:c4:c1:1f: 8d:25:dd:f2:35:73:d7:6f:ce:4e:27:15:b9:f3:2e: c0:12:f5:a2:13:11:01:26:ca:93:6a:27:1e:6f:56: 3a:12:ec:f7:1c:5f:6a:d3:3b:1a:32:70:29:d3:e5: 8c:86:61:37:e8:a3:85:7d:f4:ef:45:73:3d:eb:82: 66:89:70:66:bc:c6:be:f8:55:4c:e5:93:ac:63:fb: 24:16:3f:00:ca:db:40:44:e4:e4:06:27:ad:ee:3c: d2:55:29:05:0f:59:41:40:8f:e1:65:32:4f:31:3d: 44:3f:c5:be:73:c5:b8:b2:f0:84:8a:13:f7:38:b8: c8:7c:62:19:be:0f:3d:91:a3:af:d8:aa:28:c2:70: d9:b9:4d:fa:03:96:47:f6:de:27:29:85:ed:1d:47: a5:78:a8:f7:5d:9f:6a:31:33:fb:7a:ea:1c:d4:c8: 4b:3b:92:62:43:76:3b:55:8e:51:22:77:a3:df:49: 54:bd:dc:0b:22:ae:9f:25:10:8b:06:93:2d:35:92: 2b:d3:76:94:95:ca:7d:cd:6c:03:b0:f8:8e:5c:fa: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:AD:A0:4C:6F:BE:5E:DF:B2:90:61:04:48:0B:93:E5:CA:3B:54 X509v3 Authority Key Identifier: keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:bb:39:fa:a5:5c:ba:08:f5:70:8e:d6:42:23:bd:3d:a8:3d: 1d:ad:f1:dc:a7:15:8c:e0:90:70:4a:39:2f:ef:0b:23:ab:cb: 57:95:3a:d8:17:54:dc:04:ae:3d:dc:c0:78:e2:79:69:57:a4: e0:52:2f:ad:41:da:68:72:b6:29:99:3f:77:0d:67:1a:88:9f: 71:18:a3:92:3d:62:55:c7:60:df:9e:22:1b:b5:22:41:91:57: 32:f4:79:4c:c8:25:09:d8:6e:d8:16:2f:ba:4f:b0:20:e9:b1: f7:b4:49:3e:7e:f1:22:3d:fc:ab:cf:b4:cb:30:36:f6:46:1a: c2:4d:de:bb:91:7b:af:3e:1b:0a:bd:95:4b:8f:8b:c0:d6:43: 25:c2:1a:a2:9a:5b:e4:93:9f:5c:d4:f6:fc:04:4c:2e:b4:c7: 86:9c:02:89:5a:2a:c8:cd:1e:14:4d:72:9a:d5:32:ae:0e:07: 29:3a:f9:d5:90:43:d6:ca:a4:ed:42:69:cf:4d:af:9b:1b:f5: 09:de:8a:31:52:c5:ee:d9:08:65:ca:04:f3:dd:e5:a1:96:08: c2:0a:7e:28:f0:82:53:1c:f0:8f:12:e9:d3:c1:72:63:ee:b2: 48:15:30:5c:91:64:a8:25:5c:a1:fa:44:73:83:da:f7:db:a1: 4a:38:65:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwNDAxMTAvBgNVBAUTKEEwN0NEM0QxMDIxQTU4QzI0MEExMjEzNzQwMEI5N0Ix OEI3OTk4RDAwHhcNMjUxMTA1MDA0MTM2WhcNMjUxMTEyMDA0MTM2WjAYMRYwFAYD VQQDEw02OTBhOWQ0MC01YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/o6us/nStYcNvtqVVoRSlg9IWYwgzba0ozSv/VBxeGovQZrKvf9/F3EwR+N Jd3yNXPXb85OJxW58y7AEvWiExEBJsqTaiceb1Y6Euz3HF9q0zsaMnAp0+WMhmE3 6KOFffTvRXM964JmiXBmvMa++FVM5ZOsY/skFj8AyttAROTkBiet7jzSVSkFD1lB QI/hZTJPMT1EP8W+c8W4svCEihP3OLjIfGIZvg89kaOv2KoownDZuU36A5ZH9t4n KYXtHUeleKj3XZ9qMTP7euoc1MhLO5JiQ3Y7VY5RInej30lUvdwLIq6fJRCLBpMt NZIr03aUlcp9zWwDsPiOXPpTFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9BraBM b75e37KQYQRIC5PlyjtUMB8GA1UdIwQYMBaAFKB809ECGljCQKEhN0ALl7GLeZjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA0MC85QjA0QTBGMkEz NDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdNSkFvU0UzUUF1WHNZdDVt TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29IelQwUUlhV01KQW9TRTNRQXVYc1l0NW1OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDA0MC85QjA0QTBGMkEzNDAxMUVDQjNGQTA0N0JDNEY5QUUwMi9vSHpUMFFJYVdN SkFvU0UzUUF1WHNZdDVtTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGuzn6pVy6CPVwjtZCI709qD0drfHcpxWM4JBwSjkv7wsjq8tXlTrY F1TcBK493MB44nlpV6TgUi+tQdpocrYpmT93DWcaiJ9xGKOSPWJVx2DfniIbtSJB kVcy9HlMyCUJ2G7YFi+6T7Ag6bH3tEk+fvEiPfyrz7TLMDb2RhrCTd67kXuvPhsK vZVLj4vA1kMlwhqimlvkk59c1Pb8BEwutMeGnAKJWirIzR4UTXKa1TKuDgcpOvnV kEPWyqTtQmnPTa+bG/UJ3ooxUsXu2QhlygTz3eWhlgjCCn4o8IJTHPCPEunTwXJj 7rJIFTBckWSoJVyh+kRzg9r326FKOGU4 -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:27 2025 by rpki-client