$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json) Hash identifier: FuKec6J3gkbPXjgovs7JX4V40LQA8RfvMsnDu66BNhY= Subject key identifier: 10:E4:59:4C:9F:3F:8E:AF:4D:FF:C0:10:21:13:DE:21:79:18:2B:0E Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft Manifest number: 0237 Signing time: Mon 03 Nov 2025 01:50:37 +0000 Manifest this update: Mon 03 Nov 2025 01:50:37 +0000 Manifest next update: Mon 10 Nov 2025 01:50:37 +0000 Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: WIdMY0Kpp2FQZSCojnhIaGk7wNkwp2x2Uh/EbKxH8bI=) 2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: Nov 3 01:50:37 2025 GMT Not After : Nov 10 01:50:37 2025 GMT Subject: CN=69080a6d-386b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:64:0b:a4:72:5d:42:ff:98:4c:60:7a:a2: b9:26:22:22:d8:0f:e1:a8:f0:1a:7d:6d:21:4e:d0: 16:c7:6c:4e:9e:16:cd:cf:59:e8:17:e3:d8:6b:ef: dc:33:01:e6:42:50:41:62:b7:27:cb:0f:1d:53:32: 04:ea:87:15:cc:c2:a7:65:64:27:34:ea:db:82:59: ff:be:50:25:7c:03:de:3c:bb:1b:e4:6f:99:09:ef: fa:31:89:fa:ed:41:d9:83:74:2c:a7:9f:4c:43:4e: e8:28:9f:40:aa:c1:35:50:c7:83:1b:91:cb:48:e8: 0d:33:94:bb:36:e9:59:6b:d9:f3:8f:b4:aa:b3:a8: df:36:11:b4:62:c5:ec:4f:4f:b8:f6:3d:94:0e:39: 39:98:ff:bc:06:08:6f:e7:21:88:fb:07:04:19:85: 11:2c:9c:b0:65:0a:f7:3a:48:90:2e:3a:b1:07:87: 98:05:a2:b2:11:fb:f5:f6:66:a7:ef:47:42:62:f7: 19:9a:73:81:04:98:a3:09:c3:e4:6c:0d:93:b9:c1: ba:0c:e1:a1:3e:25:84:06:e0:0f:1e:90:22:68:55: ff:91:0a:d5:74:b6:a7:c5:f5:df:ed:de:71:31:7e: f3:61:72:ed:80:d1:5c:f5:32:4f:1c:08:49:5d:72: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E4:59:4C:9F:3F:8E:AF:4D:FF:C0:10:21:13:DE:21:79:18:2B:0E X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9b:1a:43:6b:d6:a8:bd:c9:da:01:da:dc:71:6e:17:f1:5b: d4:76:56:7d:07:6f:a3:9f:b9:e8:1e:d4:2e:83:84:ff:e8:56: 3d:79:cb:86:2d:fb:ee:a9:dd:55:9b:8d:5c:bc:49:b2:c3:5c: 74:37:14:0b:90:51:4c:45:bd:18:d7:79:10:74:05:30:ed:79: 62:f6:a4:f3:19:49:a0:8b:e6:1f:01:ca:bb:56:9c:07:64:7e: 3c:b9:b1:66:41:79:bb:f1:ae:31:0a:db:74:ea:4b:4a:8f:37: 45:46:55:ff:5a:56:90:65:d4:b9:8e:cf:33:b0:3b:a4:e8:ad: 91:16:77:92:61:33:1f:3f:d3:ee:48:60:f4:22:0a:45:81:ce: 09:ad:f8:d3:2e:ad:59:f6:d3:13:e2:ec:45:02:23:a2:04:d8: 69:0d:90:df:18:ff:20:66:a8:f2:32:15:53:2c:13:36:1c:d6: 91:5f:97:34:81:e7:5f:f6:7e:31:1e:fd:be:95:ea:f1:d2:7b: a0:17:86:52:5f:d1:e1:ce:1b:05:53:3a:2e:0f:63:f9:21:cf: 68:6b:a8:f2:06:62:78:6d:66:06:a3:7e:12:ed:b4:3e:f2:a9: 12:7c:94:3d:af:09:16:bf:fc:b1:45:2d:d9:c8:5b:45:4d:72: 0f:84:bd:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjUxMTAzMDE1MDM3WhcNMjUxMTEwMDE1MDM3WjAYMRYwFAYD VQQDEw02OTA4MGE2ZC0zODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqhkC6RyXUL/mExgeqK5JiIi2A/hqPAafW0hTtAWx2xOnhbNz1noF+PYa+/c MwHmQlBBYrcnyw8dUzIE6ocVzMKnZWQnNOrbgln/vlAlfAPePLsb5G+ZCe/6MYn6 7UHZg3Qsp59MQ07oKJ9AqsE1UMeDG5HLSOgNM5S7NulZa9nzj7Sqs6jfNhG0YsXs T0+49j2UDjk5mP+8Bghv5yGI+wcEGYURLJywZQr3OkiQLjqxB4eYBaKyEfv19man 70dCYvcZmnOBBJijCcPkbA2TucG6DOGhPiWEBuAPHpAiaFX/kQrVdLanxfXf7d5x MX7zYXLtgNFc9TJPHAhJXXIyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDkWUyf P46vTf/AECET3iF5GCsOMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTmxpDa9aovcnaAdrccW4X8VvUdlZ9B2+jn7noHtQug4T/6FY9ecuG Lfvuqd1Vm41cvEmyw1x0NxQLkFFMRb0Y13kQdAUw7Xli9qTzGUmgi+YfAcq7VpwH ZH48ubFmQXm78a4xCtt06ktKjzdFRlX/WlaQZdS5js8zsDuk6K2RFneSYTMfP9Pu SGD0IgpFgc4JrfjTLq1Z9tMT4uxFAiOiBNhpDZDfGP8gZqjyMhVTLBM2HNaRX5c0 gedf9n4xHv2+lerx0nugF4ZSX9HhzhsFUzouD2P5Ic9oa6jyBmJ4bWYGo34S7bQ+ 8qkSfJQ9rwkWv/yxRS3ZyFtFTXIPhL0o -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:57 2025 by rpki-client