$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft File: OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json) Hash identifier: /tEG66DceOfENCMKheM5fg5sK7n0avbrVYGs13VfRt0= Subject key identifier: 0A:DD:D5:26:81:CF:31:7B:67:D7:C0:C9:68:52:C2:32:6F:12:26:2C Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft Manifest number: 0340 Signing time: Sun 19 Oct 2025 03:05:27 +0000 Manifest this update: Sun 19 Oct 2025 03:05:26 +0000 Manifest next update: Sun 26 Oct 2025 03:05:26 +0000 Files and hashes: 1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: GBsVLTRSe6xLF/e52RqP/1TGWMgo6DjPwSqECTi889A=) 2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Validity Not Before: Oct 19 03:05:26 2025 GMT Not After : Oct 26 03:05:26 2025 GMT Subject: CN=68f45576-e2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:2a:84:b7:ad:1b:cb:d7:b9:0d:d4:3b:36: 26:4a:5a:75:43:19:a8:28:77:9e:03:f0:ff:c1:dd: 9e:3a:5a:e5:49:9f:f1:9f:72:a5:25:b4:d6:eb:d6: f4:ee:0e:e3:24:e7:6f:98:89:44:51:3d:cb:cf:51: 62:8e:cd:97:eb:9a:df:7b:91:71:e6:eb:99:fc:0d: 2b:5e:7e:e8:0e:f2:ff:bc:a0:ec:73:72:f5:b7:0d: af:b5:87:48:6b:1f:17:c3:d3:68:90:16:a1:3b:c2: a8:0e:16:9f:09:ed:6c:93:26:ad:84:4f:26:c5:18: 94:23:98:07:1e:6d:2e:6e:61:ea:b4:be:2e:c9:4d: 20:57:b0:00:60:e5:6a:11:d4:e6:57:92:bf:b3:02: 53:c9:9f:31:3a:10:4d:a1:ba:a9:c6:36:82:54:8a: e6:1c:20:ae:48:73:c4:fa:4b:cf:73:4f:f4:62:28: 02:fb:31:8f:77:6a:83:91:70:81:da:8a:57:fc:b7: cd:1e:22:73:a2:15:4e:c8:2c:38:3d:50:6c:37:f1: 55:4d:8b:52:9f:2c:5b:03:ed:4b:07:67:13:88:c2: fe:77:c2:3a:15:90:fb:67:fb:ca:cf:16:cb:b5:6a: e7:83:ab:ac:e3:ca:2d:33:df:cb:d1:a2:2f:0c:f5: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:D5:26:81:CF:31:7B:67:D7:C0:C9:68:52:C2:32:6F:12:26:2C X509v3 Authority Key Identifier: keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3d:91:37:aa:3d:a9:87:ab:e0:00:90:32:5c:a5:ca:0a:ea: 81:ff:1e:d4:9e:40:c6:ce:ca:5b:a6:e9:b6:34:f7:b3:f7:17: 4c:99:66:2e:75:88:e9:e9:6c:dd:08:a2:8d:6a:65:77:09:5a: b8:c7:18:9b:22:cc:cf:93:b6:e0:17:3e:14:eb:03:8e:5c:13: 40:61:29:11:8e:ed:c5:a4:bc:4f:e5:7b:b5:ca:a6:11:1a:a9: 10:4a:6e:86:69:f6:d9:19:af:0c:14:f3:60:9b:64:0d:92:da: 36:a5:ac:65:ae:16:ad:fc:8f:87:d1:e8:3c:6b:a0:c2:3f:a7: 78:b9:19:16:1e:cb:48:8a:cb:a3:9e:40:61:a6:3c:82:52:af: 53:f1:95:cf:34:90:53:b8:8e:b4:ec:c2:70:db:cb:96:60:4d: f4:14:cc:b9:64:f5:c2:9d:22:27:c5:65:b1:d0:07:a6:cf:50: 5a:af:43:de:54:8a:08:d0:e9:32:3a:4b:44:d0:79:ae:f4:3b: 2b:f9:ee:4f:d0:70:6c:3e:e6:55:36:d2:58:79:66:d0:3f:37: d5:0d:8b:46:39:f9:e6:f1:a7:55:8b:f4:d5:ba:42:fc:a6:b4: d3:bc:7b:8f:c0:95:c2:be:e2:48:f9:93:e9:b8:51:b1:d1:82: 53:a9:8d:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz MTg3OEYxRTMwHhcNMjUxMDE5MDMwNTI2WhcNMjUxMDI2MDMwNTI2WjAYMRYwFAYD VQQDEw02OGY0NTU3Ni1lMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvMqhLetG8vXuQ3UOzYmSlp1QxmoKHeeA/D/wd2eOlrlSZ/xn3KlJbTW69b0 7g7jJOdvmIlEUT3Lz1Fijs2X65rfe5Fx5uuZ/A0rXn7oDvL/vKDsc3L1tw2vtYdI ax8Xw9NokBahO8KoDhafCe1skyathE8mxRiUI5gHHm0ubmHqtL4uyU0gV7AAYOVq EdTmV5K/swJTyZ8xOhBNobqpxjaCVIrmHCCuSHPE+kvPc0/0YigC+zGPd2qDkXCB 2opX/LfNHiJzohVOyCw4PVBsN/FVTYtSnyxbA+1LB2cTiML+d8I6FZD7Z/vKzxbL tWrng6us48otM9/L0aIvDPU0jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArd1SaB zzF7Z9fAyWhSwjJvEiYsMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4 ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKPZE3qj2ph6vgAJAyXKXKCuqB/x7UnkDGzspbpum2NPez9xdMmWYu dYjp6WzdCKKNamV3CVq4xxibIszPk7bgFz4U6wOOXBNAYSkRju3FpLxP5Xu1yqYR GqkQSm6GafbZGa8MFPNgm2QNkto2paxlrhat/I+H0eg8a6DCP6d4uRkWHstIisuj nkBhpjyCUq9T8ZXPNJBTuI607MJw28uWYE30FMy5ZPXCnSInxWWx0Aemz1Bar0Pe VIoI0OkyOktE0Hmu9Dsr+e5P0HBsPuZVNtJYeWbQPzfVDYtGOfnm8adVi/TVukL8 prTTvHuPwJXCvuJI+ZPpuFGx0YJTqY1p -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:00 2025 by rpki-client