$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: 4hjhicwk4dQYFKJMKmgJrv31m7E0shShmDq+NrnTBXQ= Subject key identifier: E7:50:A8:96:B9:E4:74:B5:62:97:9C:56:41:B7:36:6F:55:4E:16:6C Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0C85 Signing time: Sat 18 Oct 2025 19:17:44 +0000 Manifest this update: Sat 18 Oct 2025 19:17:43 +0000 Manifest next update: Sat 25 Oct 2025 19:17:43 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: fJIa6ZzSW8m4OiwC1w96mZPydiuBcunWCEWTbEl0n+s=) 2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=) 3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: mJvqce7dr7148HNrDiByF+54zvxocevFsAIl/C28B9c=) 4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Oct 18 19:17:43 2025 GMT Not After : Oct 25 19:17:43 2025 GMT Subject: CN=68f3e7d7-f803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e8:0b:22:05:de:f0:65:fd:5f:f0:5d:1d:20: f6:03:1a:b4:43:98:0a:e3:a0:4b:32:a8:b7:2e:38: d4:db:4d:ef:df:3e:fc:59:b3:94:ed:36:9d:b8:42: 39:b0:00:f2:df:59:38:a8:04:a4:e2:c6:e1:7a:d2: dd:b8:9f:4f:29:c1:8e:75:2e:20:b5:88:85:cd:c9: 63:45:14:0d:6d:95:41:da:2f:2d:64:cc:6b:dc:27: 36:9e:f2:4a:2f:03:32:ef:2b:e9:2d:0a:81:60:e8: 3e:fe:d5:00:c1:58:29:ba:e1:d2:44:3f:26:35:32: 79:f7:37:42:f4:a9:f5:b1:af:55:26:af:5e:b6:2c: e6:8b:53:2f:c5:ed:20:33:ca:98:b8:75:dc:b9:1a: 4d:c2:d6:ac:54:5e:4c:38:8b:eb:c3:35:6e:dd:ef: ae:58:b4:ad:66:e8:04:fa:6d:eb:5d:b5:1a:88:cd: 42:05:bf:8e:37:67:85:20:36:ed:74:85:e3:de:01: 09:0e:61:bf:56:4d:84:d4:aa:5a:f9:ee:f9:0d:e1: 18:5a:dd:5a:6e:34:94:8b:55:fa:19:b7:99:a5:0b: 0b:fe:eb:63:fe:95:00:3e:57:1d:52:16:6a:59:00: f3:03:15:15:8c:6c:d4:f7:72:23:bc:95:c3:15:f7: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:A8:96:B9:E4:74:B5:62:97:9C:56:41:B7:36:6F:55:4E:16:6C X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:aa:a8:c1:47:70:ea:7b:11:56:97:ed:f7:79:97:99:56:e5: 3c:0f:92:0c:59:e8:cc:d8:c4:b6:68:16:a5:cd:47:d8:8c:8c: 3a:bd:e0:71:5a:59:21:b5:09:61:93:47:e8:26:e7:c1:44:99: 24:a1:78:20:3a:9c:ed:6d:8b:99:b7:de:9a:ba:85:0a:39:34: 1e:64:e0:5f:28:19:b5:e3:bf:a2:f6:32:34:ad:29:3d:9b:d3: ad:d1:a9:69:97:fc:32:2f:d3:ca:09:a4:4a:ca:8a:62:9c:d8: e1:6f:ad:1a:cf:4c:02:18:b1:ed:ac:63:45:20:b4:3f:1d:33: c8:3e:a4:e6:ab:a3:74:1f:9f:37:01:9b:dc:0d:6d:ea:9a:7f: 8a:8d:c5:7e:e2:5a:01:5e:e2:38:89:5a:1e:88:39:40:f5:ce: b2:43:1a:b0:9b:3a:6a:9c:6f:41:2f:c6:22:54:dc:c0:ff:95: 3b:49:c5:8d:55:54:b4:b9:2e:7d:97:7d:29:a3:22:2a:22:84: 1a:93:8c:18:dc:87:8b:70:c7:45:f2:7c:7c:78:11:1e:f7:36: c0:3d:d1:e1:c0:a5:90:db:1e:b4:63:07:0e:e9:ff:61:12:d2: fc:2c:fc:1f:03:51:26:9a:23:9e:b0:3b:8b:1e:16:32:70:83: fd:48:f2:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjUxMDE4MTkxNzQzWhcNMjUxMDI1MTkxNzQzWjAYMRYwFAYD VQQDEw02OGYzZTdkNy1mODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+gLIgXe8GX9X/BdHSD2Axq0Q5gK46BLMqi3LjjU203v3z78WbOU7TaduEI5 sADy31k4qASk4sbhetLduJ9PKcGOdS4gtYiFzcljRRQNbZVB2i8tZMxr3Cc2nvJK LwMy7yvpLQqBYOg+/tUAwVgpuuHSRD8mNTJ59zdC9Kn1sa9VJq9etizmi1Mvxe0g M8qYuHXcuRpNwtasVF5MOIvrwzVu3e+uWLStZugE+m3rXbUaiM1CBb+ON2eFIDbt dIXj3gEJDmG/Vk2E1Kpa+e75DeEYWt1abjSUi1X6GbeZpQsL/utj/pUAPlcdUhZq WQDzAxUVjGzU93IjvJXDFffh5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdQqJa5 5HS1YpecVkG3Nm9VThZsMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUqqjBR3DqexFWl+33eZeZVuU8D5IMWejM2MS2aBalzUfYjIw6veBx WlkhtQlhk0foJufBRJkkoXggOpztbYuZt96auoUKOTQeZOBfKBm147+i9jI0rSk9 m9Ot0alpl/wyL9PKCaRKyopinNjhb60az0wCGLHtrGNFILQ/HTPIPqTmq6N0H583 AZvcDW3qmn+KjcV+4loBXuI4iVoeiDlA9c6yQxqwmzpqnG9BL8YiVNzA/5U7ScWN VVS0uS59l30poyIqIoQak4wY3IeLcMdF8nx8eBEe9zbAPdHhwKWQ2x60YwcO6f9h EtL8LPwfA1EmmiOesDuLHhYycIP9SPKt -----END CERTIFICATE-----Generated at Mon Oct 20 19:45:35 2025 by rpki-client