$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: eonGl91S1e3lT1OxEM3Fv4KyMPr9BFOGMSnGVVnMXfU= Subject key identifier: FE:E8:77:EC:D2:A1:E2:F4:74:A4:64:B8:91:8D:5F:4B:2F:F1:1F:C8 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 0333 Signing time: Thu 23 Oct 2025 02:39:12 +0000 Manifest this update: Thu 23 Oct 2025 02:39:11 +0000 Manifest next update: Thu 30 Oct 2025 02:39:11 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: 3VLUL2a2HSuVftYyIT+k6ubHACfbRWru1LfkCuDSNrY=) 2: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=) 3: AF5AD402224711F0B0CDB07DC4F9AE02.roa (hash: Rd9F0rhnVp5Iq5KfDW7kM6BcAp4B6e5cA4C+HDxhcWk=) 4: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 6: 40FD5BBC9A9F11F0BDC8DE5EC4F9AE02.roa (hash: vxae5t2sQbtEtMchYbGO8cElyuQ+shCxDjmGVNX6+iE=) 7: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 9: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=) 10: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) 11: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CJ9YN6FLH2mWQGJEIYwUy4MU0VtOp9beQcxD+Nz5y9o=) 12: 40FBB32CA37B11F0B7BCBD52C4F9AE02.roa (hash: dtAtS4IcSRJ7E0vsv3OJXhW+oilpkq4Ik19qGGp6wG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Oct 23 02:39:11 2025 GMT Not After : Oct 30 02:39:11 2025 GMT Subject: CN=68f9954f-4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:6e:42:4a:a4:8b:f1:e6:5b:b4:b4:cf:01: 68:53:f4:6e:8f:53:2c:af:2d:7a:4a:6c:e0:21:d6: 4c:73:1d:65:7e:b6:0c:96:1f:6a:5d:cc:2e:c5:0d: 07:ff:59:bf:04:c2:21:45:7c:70:34:1c:74:0d:26: 7d:cd:58:81:74:e0:0f:33:84:b7:84:26:37:63:59: de:a7:47:aa:c4:e7:39:5d:a1:b1:1b:a7:0d:f2:7c: a3:af:20:81:73:79:4c:d9:a6:ce:9d:37:34:f0:a3: 6b:e6:cc:13:a9:89:1e:fb:50:77:9b:4c:d3:14:ae: 76:08:bf:00:fe:00:53:25:ad:ed:d4:a5:e2:3d:bf: 4b:b7:7b:e5:e6:b8:01:d2:fc:c0:82:92:ae:94:e8: a8:42:55:36:b0:ce:9e:26:58:86:9c:e2:7e:33:84: 37:1e:65:e3:e1:f9:68:e6:39:91:d0:d3:62:21:51: 49:1f:a9:a2:d3:d0:f8:57:c2:54:04:eb:8b:f0:2d: 3d:df:6a:d1:e2:23:09:5f:ab:47:84:19:8c:fb:95: ea:73:bf:c6:bb:87:80:07:1a:bd:13:ab:47:6b:da: ec:d1:5d:f7:13:ae:b5:3d:94:6d:b6:bd:ed:cc:05: db:0c:65:44:9a:38:66:c7:ff:48:6c:75:dc:e6:ea: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:77:EC:D2:A1:E2:F4:74:A4:64:B8:91:8D:5F:4B:2F:F1:1F:C8 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:38:17:7d:97:ad:24:ef:bb:d8:e7:a3:42:5b:e0:c8:49:bf: d7:7f:84:d7:d2:03:2f:66:25:5a:20:f5:8d:6f:9a:22:02:8c: 53:7a:a7:0f:ce:36:81:63:72:e3:14:be:97:ba:43:33:41:a5: 48:78:60:24:a7:c5:13:c4:1d:29:4a:5e:a9:29:8b:bc:27:3a: 7c:e1:eb:b7:02:f5:50:44:18:d4:54:28:6b:cd:36:3e:d1:9e: 1a:7a:8e:08:87:eb:ca:82:ee:fa:38:43:34:7f:2f:af:23:35: cf:2e:5a:76:7d:f9:74:e0:85:d1:ea:b3:9e:8b:df:f8:e0:4e: 9c:5a:ac:b4:ae:35:0b:4c:fd:f1:ac:29:2b:54:23:eb:09:fc: 07:a1:d8:9e:4d:be:5e:56:4c:b2:55:a4:8c:f9:87:71:29:a9: 0b:f6:03:e7:5b:c5:c6:c7:94:4c:11:f3:c8:e4:75:37:7f:b4: 6f:25:0b:d0:59:19:f7:3d:43:f7:8b:1b:b3:1f:02:7d:58:9b: 9a:88:00:69:2c:71:4f:94:b9:ba:b7:a2:33:5c:96:67:35:38: 1b:1f:51:ec:8e:1e:4d:d9:fe:e4:d7:87:ef:b2:57:d4:d9:32: 3a:3b:dd:fe:a4:59:1d:39:68:c5:15:db:29:42:58:b2:b4:c3: 23:1b:ed:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUxMDIzMDIzOTExWhcNMjUxMDMwMDIzOTExWjAYMRYwFAYD VQQDEw02OGY5OTU0Zi00Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs5uQkqki/HmW7S0zwFoU/Ruj1Msry16SmzgIdZMcx1lfrYMlh9qXcwuxQ0H /1m/BMIhRXxwNBx0DSZ9zViBdOAPM4S3hCY3Y1nep0eqxOc5XaGxG6cN8nyjryCB c3lM2abOnTc08KNr5swTqYke+1B3m0zTFK52CL8A/gBTJa3t1KXiPb9Lt3vl5rgB 0vzAgpKulOioQlU2sM6eJliGnOJ+M4Q3HmXj4flo5jmR0NNiIVFJH6mi09D4V8JU BOuL8C0932rR4iMJX6tHhBmM+5Xqc7/Gu4eABxq9E6tHa9rs0V33E661PZRttr3t zAXbDGVEmjhmx/9IbHXc5urWeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7od+zS oeL0dKRkuJGNX0sv8R/IMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+OBd9l60k77vY56NCW+DISb/Xf4TX0gMvZiVaIPWNb5oiAoxTeqcP zjaBY3LjFL6XukMzQaVIeGAkp8UTxB0pSl6pKYu8Jzp84eu3AvVQRBjUVChrzTY+ 0Z4aeo4Ih+vKgu76OEM0fy+vIzXPLlp2ffl04IXR6rOei9/44E6cWqy0rjULTP3x rCkrVCPrCfwHodieTb5eVkyyVaSM+YdxKakL9gPnW8XGx5RMEfPI5HU3f7RvJQvQ WRn3PUP3ixuzHwJ9WJuaiABpLHFPlLm6t6IzXJZnNTgbH1Hsjh5N2f7k14fvslfU 2TI6O93+pFkdOWjFFdspQliytMMjG+2+ -----END CERTIFICATE-----Generated at Fri Oct 24 18:56:29 2025 by rpki-client