$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: Clb35x6IYUxTkXIY7m1i4LhNHNiHkoq7eDAnTaKNQio= Subject key identifier: F2:D3:1A:47:9C:88:1A:6E:93:09:0E:42:77:3B:AD:A0:66:A8:F6:8E Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 368A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 35C0 Signing time: Wed 22 Oct 2025 14:25:22 +0000 Manifest this update: Wed 22 Oct 2025 14:25:21 +0000 Manifest next update: Wed 29 Oct 2025 14:25:21 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: TFbMDMqQpTEhWBx6jZI5378edGrwr3bNaFXeik93kAs=) 2: AEA729F2978611F092A35C80C4F9AE02.roa (hash: kxKIhewVnzrURW/58CmuEcgn3F+G19QIgRvpMtuBPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13962 (0x368a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Oct 22 14:25:21 2025 GMT Not After : Oct 29 14:25:21 2025 GMT Subject: CN=68f8e951-5443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:a9:28:7e:ca:65:99:ce:7b:89:60:32:11: 31:e1:c3:6c:0e:7a:47:8a:12:64:28:78:a6:d6:eb: f6:62:7d:de:ed:c3:88:0e:3f:97:0b:4e:4a:72:7c: 55:e6:7e:5e:38:95:f1:95:bd:b0:b3:85:26:c3:09: 7b:da:a4:b6:8d:82:2b:87:21:6f:ae:f0:6c:14:ef: 6b:bd:ce:a3:e0:15:5f:c1:b6:09:6e:66:2d:0b:e5: 44:97:00:6c:05:00:39:2d:e0:18:42:fa:15:d3:4c: 9e:55:5c:a1:1d:78:1e:8e:ae:59:32:d7:5a:08:a6: 15:5b:34:e5:b3:58:8a:50:37:66:f8:34:d5:3a:2a: 3e:37:83:44:94:fd:09:3f:b4:68:e0:1d:f5:0a:71: f8:a7:5a:28:64:56:81:d9:c7:2a:86:31:0c:ca:c9: 3f:da:c7:8e:0e:42:d5:b5:24:8c:1a:40:fb:d9:7a: 44:68:d3:2e:4f:29:2f:03:43:01:47:18:11:cd:9f: 4f:dc:58:7c:5d:28:46:96:44:fb:7f:26:47:86:d0: bf:49:ef:e9:81:0b:d3:c9:d3:33:08:76:8b:f7:2f: 21:6f:68:de:7d:88:ff:54:ce:b7:61:f2:dc:95:9d: 09:d6:a2:81:95:ce:86:0b:c0:2d:c5:d8:86:e7:31: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D3:1A:47:9C:88:1A:6E:93:09:0E:42:77:3B:AD:A0:66:A8:F6:8E X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:92:99:98:41:ca:79:5a:3e:00:89:21:89:ee:73:1f:99:af: ad:c3:a6:45:02:30:28:d0:7d:c8:c3:6c:8d:fc:4e:56:35:ac: 0e:3e:76:89:64:fd:2b:87:3e:39:ae:e5:c6:8c:2e:4b:f1:ad: 0f:db:85:1b:8f:91:b1:48:35:26:43:d6:db:56:3f:f4:42:74: 37:23:bb:9b:1e:24:8c:b1:8e:a9:13:92:cb:2c:7b:e8:4b:61: 11:92:fb:87:70:30:c9:56:55:04:e6:0b:81:2e:2b:ed:90:77: 7f:28:93:7d:d8:09:de:c5:4e:a5:b7:d2:b7:c1:f8:3a:4b:a7: 8c:ea:4a:7b:39:23:eb:14:a9:db:2e:b3:5c:dc:69:5b:ce:18: bf:a7:37:d1:19:0d:e1:46:da:c7:2b:9f:80:2a:87:11:b1:06: 84:76:0c:43:fc:95:5a:26:9a:6e:ed:9e:ae:67:48:86:70:3a: f4:57:5d:e0:0f:60:88:d0:b2:4c:ba:ec:7e:7d:fa:4f:6c:4b: af:f3:8c:ca:8c:57:49:c9:24:8b:98:50:68:2a:81:c8:b2:94: de:cb:7f:ee:c1:cd:4a:a2:49:a0:ec:12:25:bb:53:69:c6:ab: f6:1b:7e:90:75:49:69:98:47:76:a0:61:18:a3:d2:c6:5a:bf: 70:fc:ef:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjUxMDIyMTQyNTIxWhcNMjUxMDI5MTQyNTIxWjAYMRYwFAYD VQQDEw02OGY4ZTk1MS01NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNipKH7KZZnOe4lgMhEx4cNsDnpHihJkKHim1uv2Yn3e7cOIDj+XC05KcnxV 5n5eOJXxlb2ws4Umwwl72qS2jYIrhyFvrvBsFO9rvc6j4BVfwbYJbmYtC+VElwBs BQA5LeAYQvoV00yeVVyhHXgejq5ZMtdaCKYVWzTls1iKUDdm+DTVOio+N4NElP0J P7Ro4B31CnH4p1ooZFaB2ccqhjEMysk/2seODkLVtSSMGkD72XpEaNMuTykvA0MB RxgRzZ9P3Fh8XShGlkT7fyZHhtC/Se/pgQvTydMzCHaL9y8hb2jefYj/VM63YfLc lZ0J1qKBlc6GC8AtxdiG5zFfdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLTGkec iBpukwkOQnc7raBmqPaOMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2kpmYQcp5Wj4AiSGJ7nMfma+tw6ZFAjAo0H3Iw2yN/E5WNawOPnaJ ZP0rhz45ruXGjC5L8a0P24Ubj5GxSDUmQ9bbVj/0QnQ3I7ubHiSMsY6pE5LLLHvo S2ERkvuHcDDJVlUE5guBLivtkHd/KJN92AnexU6lt9K3wfg6S6eM6kp7OSPrFKnb LrNc3Glbzhi/pzfRGQ3hRtrHK5+AKocRsQaEdgxD/JVaJppu7Z6uZ0iGcDr0V13g D2CI0LJMuux+ffpPbEuv84zKjFdJySSLmFBoKoHIspTey3/uwc1Kokmg7BIlu1Np xqv2G36QdUlpmEd2oGEYo9LGWr9w/O+n -----END CERTIFICATE-----Generated at Fri Oct 24 05:08:48 2025 by rpki-client