$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: iGv9VqA2saTrNE8pYSAoKXLC0uDGZcPGB5RRvj5KVTU= Subject key identifier: 1B:42:7B:52:6A:5B:50:24:F4:00:4E:58:2C:29:D3:6D:28:75:11:3B Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A65 Signing time: Fri 24 Oct 2025 20:22:23 +0000 Manifest this update: Fri 24 Oct 2025 20:22:22 +0000 Manifest next update: Fri 31 Oct 2025 20:22:22 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: DQJFGLeEr8QFTwnpn7jQZageyoIBrYjjsFdZB0nY1l0=) 2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: YgLuhvSqEin+i5SUp1az8jMscHcAbxhVSlyBc8B1vlM=) 3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DPmiaEz6M1OneZ4z1YKj44DcnnHVGKuSYV+vSNBuquw=) 4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: wxcY42YjsuRVvMQ/m7CB1YYbOqzcrhZ00l1RvoVq8ek=) 5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: NLByGRv6anI6tIVcb5p+1Xch3v2zcxtkN/xSf48UIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Oct 24 20:22:22 2025 GMT Not After : Oct 31 20:22:22 2025 GMT Subject: CN=68fbdfff-0767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:f5:04:26:c4:52:2c:85:a7:eb:cb:1c:a2: f1:82:4e:6c:bc:33:cd:9c:da:ee:fd:21:44:21:9c: 4a:c2:f2:77:b0:51:ca:1a:38:49:73:65:7a:95:1d: 10:79:81:da:87:5e:b4:61:93:8b:0b:bb:af:c9:b4: e0:95:ba:53:63:99:5a:68:30:44:30:ed:87:8b:68: 86:c4:d6:69:4d:8f:e2:d8:00:be:4a:16:9c:4a:ba: a3:ef:6e:5c:d9:54:2c:7e:da:33:25:33:ab:ed:95: ca:a9:c9:17:5f:a9:1c:6c:9a:6a:5b:10:0a:8a:66: 2b:35:4b:cb:48:75:65:cb:00:23:62:8f:27:e9:24: 69:e1:b5:45:87:d8:56:c1:ea:b3:9e:b7:de:aa:f5: 24:02:81:ce:d8:5c:14:84:e4:a8:8c:28:78:76:ab: 56:70:1c:f5:2c:e9:d8:d2:f6:a8:25:b8:18:aa:30: 2c:d3:8e:cd:bb:b8:ca:b1:52:0b:b4:5c:0f:26:99: 08:44:40:8c:41:19:9e:16:f4:be:b4:5d:fe:d3:3c: 5c:0d:e6:3d:88:51:f9:91:9c:4c:14:3a:93:22:55: 2b:cc:fe:bb:67:5a:81:de:ba:eb:ad:9d:d3:8a:0b: 8a:5d:7f:e2:d0:fb:25:7c:6b:f5:24:21:d6:18:96: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:42:7B:52:6A:5B:50:24:F4:00:4E:58:2C:29:D3:6D:28:75:11:3B X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:69:8f:70:87:ce:49:97:54:02:6d:9e:0b:e9:51:bb:af: 52:cc:01:6e:30:ab:c8:3f:38:eb:90:c5:d6:9c:c8:e5:19:52: 67:e4:7e:1f:bb:67:a7:16:fc:79:19:dd:19:3b:bc:5d:ef:18: cc:93:7c:09:6f:6d:35:4c:0e:46:98:37:58:bd:86:c8:29:41: cc:1a:9b:b1:8f:d0:a9:fd:93:4f:54:41:bb:05:10:b6:0c:9d: 9c:0d:55:c7:b7:a1:29:b3:3e:26:40:4c:32:ac:49:37:20:8c: 7e:52:9b:a3:a2:6f:81:f0:bd:e2:aa:01:24:d2:d9:67:51:70: 6e:25:9f:1d:46:02:81:46:40:c9:c4:ea:fb:b9:68:f7:1a:30: d6:56:e6:02:16:5a:7b:0f:65:9f:56:97:02:95:17:d7:db:14: ed:2b:69:af:33:18:52:f2:15:b5:92:1d:ce:53:29:39:bb:1e: f4:23:08:57:73:25:06:48:fb:f3:2e:15:46:3d:84:fb:53:2f: db:0f:40:b0:08:6f:b8:00:9c:9b:75:17:30:18:cd:95:a4:c7: 33:dd:1a:96:c2:00:f6:16:1f:c3:ef:71:69:d1:53:d4:f4:71: 0a:2a:9c:5c:0a:37:7f:b8:3d:c9:5d:ec:72:23:f3:13:fb:eb: c8:98:2a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUxMDI0MjAyMjIyWhcNMjUxMDMxMjAyMjIyWjAYMRYwFAYD VQQDEw02OGZiZGZmZi0wNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1f1BCbEUiyFp+vLHKLxgk5svDPNnNru/SFEIZxKwvJ3sFHKGjhJc2V6lR0Q eYHah160YZOLC7uvybTglbpTY5laaDBEMO2Hi2iGxNZpTY/i2AC+ShacSrqj725c 2VQsftozJTOr7ZXKqckXX6kcbJpqWxAKimYrNUvLSHVlywAjYo8n6SRp4bVFh9hW weqznrfeqvUkAoHO2FwUhOSojCh4dqtWcBz1LOnY0vaoJbgYqjAs047Nu7jKsVIL tFwPJpkIRECMQRmeFvS+tF3+0zxcDeY9iFH5kZxMFDqTIlUrzP67Z1qB3rrrrZ3T iguKXX/i0PslfGv1JCHWGJYbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtCe1Jq W1Ak9ABOWCwp020odRE7MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSNGmPcIfOSZdUAm2eC+lRu69SzAFuMKvIPzjrkMXWnMjlGVJn5H4f u2enFvx5Gd0ZO7xd7xjMk3wJb201TA5GmDdYvYbIKUHMGpuxj9Cp/ZNPVEG7BRC2 DJ2cDVXHt6Epsz4mQEwyrEk3IIx+Upujom+B8L3iqgEk0tlnUXBuJZ8dRgKBRkDJ xOr7uWj3GjDWVuYCFlp7D2WfVpcClRfX2xTtK2mvMxhS8hW1kh3OUyk5ux70IwhX cyUGSPvzLhVGPYT7Uy/bD0CwCG+4AJybdRcwGM2VpMcz3RqWwgD2Fh/D73Fp0VPU 9HEKKpxcCjd/uD3JXexyI/MT++vImCoE -----END CERTIFICATE-----Generated at Sun Oct 26 09:02:46 2025 by rpki-client