$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json) Hash identifier: UjnHK1ffq0NGC1BY9Sxhukixgjc4E0hTNVM9rwYIPtE= Subject key identifier: AF:85:3E:14:62:E2:B9:D3:DA:80:B9:8C:5A:CB:47:80:E9:55:98:3F Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft Manifest number: 04 Signing time: Sun 19 Oct 2025 11:42:17 +0000 Manifest this update: Sun 19 Oct 2025 11:42:17 +0000 Manifest next update: Sun 26 Oct 2025 11:42:17 +0000 Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: U3ri6w8hbqrb/I3aEFYoQL2UIF0cwJqkRTNG6vSWZOs=) 2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: FoI4HeON78cJuhYbJvTWNmf/HypRelSKwk6lwHyGL/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536 Validity Not Before: Oct 19 11:42:17 2025 GMT Not After : Oct 26 11:42:17 2025 GMT Subject: CN=68f4ce99-7a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:00:ea:fb:d8:ca:ed:76:af:b1:79:76:0f: 3a:b9:97:3e:94:10:88:4f:51:66:ef:8c:bc:be:58: 12:83:29:b0:f3:d2:83:e9:10:20:a2:1b:61:e7:42: 80:41:c9:6c:94:99:60:a4:6b:12:25:2b:de:25:53: 9b:29:e1:98:61:55:88:7b:8b:5f:b6:d7:16:aa:eb: d6:c7:d6:3b:b4:a8:e5:84:67:ea:b2:d2:ca:0b:1d: 24:04:47:59:d0:2b:29:66:72:5f:e1:12:77:1f:64: 10:9e:86:4f:a7:37:11:61:c1:ee:f0:72:ed:58:3d: 0a:79:d5:c6:54:e9:f6:2a:bf:1d:80:08:47:ff:55: 98:77:54:99:d0:be:db:af:5a:43:2b:5e:30:87:5b: 6a:12:d0:c5:0a:c3:e1:e4:cb:99:dd:29:3a:ef:3e: ab:bc:41:c7:ee:82:21:c7:d4:22:55:38:23:fe:ae: 0d:e4:c0:7b:4b:0f:20:a3:22:b3:5a:07:a4:7c:e2: f8:af:ca:e2:b9:af:76:c9:3c:88:7e:72:ee:31:fd: 0a:9f:76:e3:2f:dd:39:21:6c:23:7a:d3:06:3f:29: 56:ae:40:86:0b:f6:2b:cc:45:28:c5:b7:e0:bf:59: 88:80:0e:e2:87:4b:41:1b:d0:39:75:3d:57:59:6e: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:3E:14:62:E2:B9:D3:DA:80:B9:8C:5A:CB:47:80:E9:55:98:3F X509v3 Authority Key Identifier: keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:c6:ec:cc:b6:67:23:5a:21:ac:cf:49:3a:22:fe:78:c0: 0e:2d:56:73:0c:10:98:ae:02:1a:c7:85:0c:9b:7d:c4:c2:9b: ca:27:2b:9b:39:5b:4c:21:d0:c3:d0:66:1b:f1:f2:fe:61:6f: 28:32:b0:d0:7f:56:53:d5:ef:8c:3d:40:21:21:d9:66:d4:8b: f5:7c:d8:4e:18:b9:e3:d4:dc:d3:7b:b5:cf:ac:ae:9b:16:62: a2:3b:72:a1:5a:87:6a:0b:98:7b:e6:a8:7d:7c:d3:0e:0a:53: 5b:7c:cd:14:d6:cf:3c:85:62:1a:ca:59:67:e6:f0:89:c4:07: fb:bd:b0:2b:45:5d:e6:e4:43:9e:4d:0b:e9:fb:e6:1e:7f:da: 5e:4c:26:e8:5e:e9:35:de:69:3e:66:4d:58:3e:2c:2c:f1:fe: ff:f1:7f:0e:6c:14:f9:25:ca:b8:f3:da:66:a0:45:c4:e1:10: e3:6c:95:82:7e:c4:22:0f:26:8d:17:52:f0:41:d7:f1:18:3e: e1:64:70:be:f0:cd:0d:51:89:32:95:ce:1b:dc:11:1c:0d:db: 2c:ce:d4:64:c7:b9:bc:33:ee:2c:b5:17:86:b9:78:99:ab:eb: cc:0a:5c:c7:86:4d:4a:36:a3:93:4d:f5:40:0b:19:f5:81:70: d2:d4:ef:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUU3NDExMC8GA1UEBRMoMzk4REI2NDIzRkM1RTBGNzc3NEYyQTMzMzFEN0RCQ0M0 QURCRjUzNjAeFw0yNTEwMTkxMTQyMTdaFw0yNTEwMjYxMTQyMTdaMBgxFjAUBgNV BAMTDTY4ZjRjZTk5LTdhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe7ADq+9jK7XavsXl2Dzq5lz6UEIhPUWbvjLy+WBKDKbDz0oPpECCiG2HnQoBB yWyUmWCkaxIlK94lU5sp4ZhhVYh7i1+21xaq69bH1ju0qOWEZ+qy0soLHSQER1nQ Kylmcl/hEncfZBCehk+nNxFhwe7wcu1YPQp51cZU6fYqvx2ACEf/VZh3VJnQvtuv WkMrXjCHW2oS0MUKw+Hky5ndKTrvPqu8QcfugiHH1CJVOCP+rg3kwHtLDyCjIrNa B6R84vivyuK5r3bJPIh+cu4x/QqfduMv3TkhbCN60wY/KVauQIYL9ivMRSjFt+C/ WYiADuKHS0Eb0Dl1PVdZblCnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr4U+FGLi udPagLmMWstHgOlVmD8wHwYDVR0jBBgwFoAUOY22Qj/F4Pd3TyozMdfbzErb9TYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRTc0LzM3QjE1OUZFQUIz RjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBkM1R5b3pNZGZiekVyYjlU WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1kyMlFqX0Y0UGQzVHlvek1kZmJ6RXJiOVRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RTc0LzM3QjE1OUZFQUIzRjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBk M1R5b3pNZGZiekVyYjlUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9mxuzMtmcjWiGsz0k6Iv54wA4tVnMMEJiuAhrHhQybfcTCm8onK5s5 W0wh0MPQZhvx8v5hbygysNB/VlPV74w9QCEh2WbUi/V82E4YuePU3NN7tc+srpsW YqI7cqFah2oLmHvmqH180w4KU1t8zRTWzzyFYhrKWWfm8InEB/u9sCtFXebkQ55N C+n75h5/2l5MJuhe6TXeaT5mTVg+LCzx/v/xfw5sFPklyrjz2magRcThEONslYJ+ xCIPJo0XUvBB1/EYPuFkcL7wzQ1RiTKVzhvcERwN2yzO1GTHubwz7iy1F4a5eJmr 68wKXMeGTUo2o5NN9UALGfWBcNLU7/o= -----END CERTIFICATE-----Generated at Mon Oct 20 13:00:43 2025 by rpki-client