$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: q6siFUCu6tNEHIKyu88Ou76TCgmYgUXKw7INYkJPW8o= Subject key identifier: 0B:DD:E5:9D:8C:34:46:4F:CC:CB:E9:D9:52:BB:B0:1F:0D:62:81:E2 Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 06 Signing time: Sat 25 Oct 2025 12:07:12 +0000 Manifest this update: Sat 25 Oct 2025 12:07:11 +0000 Manifest next update: Sat 01 Nov 2025 12:07:11 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: Zrhb9JddCZzVscdzv4SD4b8VNWnT45H2XwqFvB2iwRo=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: Ws+o5lfxkWBzbjla9ZUB6K0ykZgSsGy7AqspFs8FAvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 12:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Oct 25 12:07:11 2025 GMT Not After : Nov 1 12:07:11 2025 GMT Subject: CN=68fcbd70-04db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:ce:60:3a:a3:6f:62:13:15:a8:ea:d2:1a: e0:23:d2:fc:01:fd:9a:38:26:d0:de:6b:59:df:a3: 3a:4c:65:1c:30:9c:c4:57:de:5c:0f:51:2f:a1:04: 2d:ae:36:f1:00:db:fb:82:bc:2c:6a:1f:d3:ee:01: e0:8e:af:40:74:30:80:1e:46:10:47:e0:79:8a:ea: 6d:60:bb:f6:c4:15:b9:a6:1d:2d:3b:d8:0d:6d:3b: 52:78:4c:74:ae:18:2a:ed:81:6c:de:59:05:8e:62: 26:3d:8a:2a:8f:d3:c1:42:b9:90:de:34:21:46:37: 1c:15:3e:2d:ab:c2:37:fa:50:31:f4:89:dc:68:e5: c5:b5:5a:c0:34:41:c4:32:bd:c6:45:65:f6:bf:e5: 8c:5c:47:43:95:03:3d:2c:fd:ba:5f:a4:93:df:ab: b4:da:d3:70:42:0d:f1:8e:a6:78:94:1a:fd:4f:3c: a3:a1:e5:91:ff:47:97:e5:1e:66:4e:80:f3:11:c8: 34:6f:1a:c5:03:43:f5:75:88:02:15:a6:23:ad:49: c6:ec:71:77:fa:ae:7c:f3:74:7c:14:a6:95:9a:20: f9:27:ce:10:72:28:d3:15:14:f5:3c:03:a6:59:d4: 83:71:c4:87:36:cf:02:7d:8b:e1:c4:6a:c8:8c:e0: 7e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DD:E5:9D:8C:34:46:4F:CC:CB:E9:D9:52:BB:B0:1F:0D:62:81:E2 X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:63:34:da:c9:5a:e8:80:1f:ec:8b:41:6a:56:35:5e:c6:d8: 5c:85:75:ac:b6:eb:c8:40:90:b3:a4:ac:c0:67:42:3f:97:a3: ef:95:8e:5a:90:a2:db:34:47:71:a8:e4:59:78:fb:9f:e8:9f: bd:42:17:7d:ff:b9:5e:a0:0b:49:19:23:cd:25:e3:0c:5f:06: e0:b3:29:55:3b:e3:b9:4c:48:ce:cc:3b:e7:64:6a:dd:f4:55: 90:6b:48:a2:a7:36:c6:34:8d:76:2f:7c:10:67:8a:b8:77:73: 1a:6d:49:b4:a8:fd:64:49:34:2c:83:ad:ec:a2:78:27:0c:82: ec:c4:9e:f3:b7:39:fb:18:c6:05:f9:9d:cf:5c:ed:59:b7:68: 21:52:9e:d6:7c:30:be:6e:23:fb:81:33:c7:59:97:02:89:cf: 8b:17:18:05:cd:b3:3b:4a:b5:42:c1:d1:2a:4d:34:d7:bc:98: 33:0d:3c:83:de:0a:51:43:00:04:a6:5c:06:16:8d:3a:a6:4e: 0e:05:d0:63:0e:d3:cb:d1:23:cd:ba:11:bf:7e:62:55:98:76: 53:45:76:df:a7:e8:1d:9b:69:7c:81:45:17:0b:99:5f:25:29: b2:12:6f:b7:16:2e:6d:08:80:1b:6d:1c:a4:cb:b7:d1:1a:8b: 4d:81:6e:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNTEwMjUxMjA3MTFaFw0yNTExMDExMjA3MTFaMBgxFjAUBgNV BAMTDTY4ZmNiZDcwLTA0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+xM5gOqNvYhMVqOrSGuAj0vwB/Zo4JtDea1nfozpMZRwwnMRX3lwPUS+hBC2u NvEA2/uCvCxqH9PuAeCOr0B0MIAeRhBH4HmK6m1gu/bEFbmmHS072A1tO1J4THSu GCrtgWzeWQWOYiY9iiqP08FCuZDeNCFGNxwVPi2rwjf6UDH0idxo5cW1WsA0QcQy vcZFZfa/5YxcR0OVAz0s/bpfpJPfq7Ta03BCDfGOpniUGv1PPKOh5ZH/R5flHmZO gPMRyDRvGsUDQ/V1iAIVpiOtScbscXf6rnzzdHwUppWaIPknzhByKNMVFPU8A6ZZ 1INxxIc2zwJ9i+HEasiM4H7JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC93lnYw0 Rk/My+nZUruwHw1igeIwHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEFjNNrJWuiAH+yLQWpWNV7G2FyFday268hAkLOkrMBnQj+Xo++VjlqQ ots0R3Go5Fl4+5/on71CF33/uV6gC0kZI80l4wxfBuCzKVU747lMSM7MO+dkat30 VZBrSKKnNsY0jXYvfBBnirh3cxptSbSo/WRJNCyDreyieCcMguzEnvO3OfsYxgX5 nc9c7Vm3aCFSntZ8ML5uI/uBM8dZlwKJz4sXGAXNsztKtULB0SpNNNe8mDMNPIPe ClFDAASmXAYWjTqmTg4F0GMO08vRI826Eb9+YlWYdlNFdt+n6B2baXyBRRcLmV8l KbISb7cWLm0IgBttHKTLt9Eai02Bbng= -----END CERTIFICATE-----Generated at Sat Oct 25 19:55:49 2025 by rpki-client