$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: ygce/hEts8EjoDhLo0AHpkyL3f7ndYwio9pYnFlxZeU= Subject key identifier: 3B:D8:8A:CF:3B:BB:E5:16:19:C6:02:C4:CE:26:7C:85:AE:B5:C0:E0 Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 0858 Signing time: Sun 02 Nov 2025 20:37:28 +0000 Manifest this update: Sun 02 Nov 2025 20:37:28 +0000 Manifest next update: Sun 09 Nov 2025 20:37:28 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: r7biDaQq0B836JoVh9f01t+9jxIQLfrtCUAJKFaKEBM=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: +rqRhoF7M98jyOj7ilINYsh86Lj18TGDOqtK2wOwgR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Nov 2 20:37:28 2025 GMT Not After : Nov 9 20:37:28 2025 GMT Subject: CN=6907c108-258a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:21:79:dc:e4:60:50:3f:86:59:96:27:95: 20:9d:63:49:0d:72:99:f7:c2:48:01:0c:19:ac:44: 0f:0e:af:ca:49:d0:f2:7f:2b:8b:7c:76:90:91:fa: 7e:b6:10:b1:df:a9:9d:2e:c9:8b:82:e9:eb:49:c2: 06:3f:17:d1:0f:39:02:58:38:7c:bd:23:eb:c4:fe: f3:95:ca:24:04:5d:ef:ec:a0:cc:ff:bf:d4:76:b1: 7f:3f:6b:92:43:9c:47:e4:90:b5:aa:bd:e0:dd:9d: 5f:39:0c:1d:49:57:90:fd:eb:b5:95:ed:b5:27:98: 85:3b:0a:d8:02:0b:f7:0f:37:f5:bb:20:8f:7b:31: b6:90:91:db:e3:7e:68:db:8e:92:61:e8:f8:45:05: ab:f1:f2:c2:9a:05:02:2a:bd:ac:7c:99:4a:ef:8b: e9:22:41:10:a5:8b:54:e9:65:e8:e7:25:0b:b7:cf: 20:9c:a3:39:47:83:44:9c:c9:f2:9b:e8:e5:0f:b6: 32:9c:f9:b2:04:77:28:58:a4:ba:38:e6:28:6f:dd: 90:02:11:5d:20:75:24:f8:e3:eb:76:f2:0c:7f:68: 50:02:58:e0:e7:95:bc:01:a0:8f:f6:a6:30:5d:41: c8:c5:77:da:2a:c2:d0:51:b8:db:13:3e:9f:48:17: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:8A:CF:3B:BB:E5:16:19:C6:02:C4:CE:26:7C:85:AE:B5:C0:E0 X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7b:f6:7e:b4:62:78:62:53:0a:e2:17:6e:ca:48:77:71:ad: d3:30:e5:b6:f5:2c:fe:fa:76:bd:68:b7:6b:4d:0b:3b:d3:cf: 34:2f:e6:b3:ea:8f:a3:61:16:45:60:26:cf:23:38:83:ce:b2: 1b:6e:89:42:14:df:68:b5:2b:36:a1:61:d2:5c:d6:f4:04:6b: 6f:95:b0:2a:3a:6f:f0:cc:5e:fd:3d:08:4c:75:03:e8:d8:38: 2e:04:86:4f:07:a1:e1:63:e2:d6:c8:7e:11:30:8a:c4:a1:55: 2b:2b:9d:a1:b6:3e:75:d9:9c:23:ac:43:1f:a6:64:5c:74:a1: fd:c5:e6:00:3f:8d:08:3f:75:de:ba:91:ec:80:9f:c9:b0:e8: 2c:7a:92:72:e7:ed:cd:c3:6c:a4:97:aa:39:c3:18:1e:d9:5a: ad:01:4d:53:6e:55:13:6e:3f:af:35:cb:13:f9:3e:45:91:37: 3f:6d:8f:d8:8e:ea:c3:65:4a:62:41:e5:80:88:0b:3a:1c:4b: ab:e2:ca:48:9e:64:22:82:56:e2:b0:3d:17:eb:49:7d:09:86: 64:c6:54:8b:ec:7d:34:68:d7:f6:4d:e5:45:ca:b1:ae:04:ec: 63:66:7e:c9:79:1a:b8:54:1d:0c:71:a5:91:0e:09:54:5f:10: ad:f6:92:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjUxMTAyMjAzNzI4WhcNMjUxMTA5MjAzNzI4WjAYMRYwFAYD VQQDEw02OTA3YzEwOC0yNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX4hedzkYFA/hlmWJ5UgnWNJDXKZ98JIAQwZrEQPDq/KSdDyfyuLfHaQkfp+ thCx36mdLsmLgunrScIGPxfRDzkCWDh8vSPrxP7zlcokBF3v7KDM/7/UdrF/P2uS Q5xH5JC1qr3g3Z1fOQwdSVeQ/eu1le21J5iFOwrYAgv3Dzf1uyCPezG2kJHb435o 246SYej4RQWr8fLCmgUCKr2sfJlK74vpIkEQpYtU6WXo5yULt88gnKM5R4NEnMny m+jlD7YynPmyBHcoWKS6OOYob92QAhFdIHUk+OPrdvIMf2hQAljg55W8AaCP9qYw XUHIxXfaKsLQUbjbEz6fSBfMywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvYis87 u+UWGcYCxM4mfIWutcDgMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTe/Z+tGJ4YlMK4hduykh3ca3TMOW29Sz++na9aLdrTQs70880L+az 6o+jYRZFYCbPIziDzrIbbolCFN9otSs2oWHSXNb0BGtvlbAqOm/wzF79PQhMdQPo 2DguBIZPB6HhY+LWyH4RMIrEoVUrK52htj512ZwjrEMfpmRcdKH9xeYAP40IP3Xe upHsgJ/JsOgsepJy5+3Nw2ykl6o5wxge2VqtAU1TblUTbj+vNcsT+T5FkTc/bY/Y jurDZUpiQeWAiAs6HEur4spInmQiglbisD0X60l9CYZkxlSL7H00aNf2TeVFyrGu BOxjZn7JeRq4VB0McaWRDglUXxCt9pL9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:04 2025 by rpki-client