$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: w5z52mldKrIDKswE/pYmWNjUGEBkLy1nxw4nmPLShP4= Subject key identifier: 66:91:07:9A:A9:1E:E6:8D:8B:06:3D:95:E1:B2:6A:B7:06:F7:07:1E Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 0142 Signing time: Sun 19 Oct 2025 07:08:41 +0000 Manifest this update: Sun 19 Oct 2025 07:08:40 +0000 Manifest next update: Sun 26 Oct 2025 07:08:40 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: LBqE7/txtEms3dzlDyTJjXO4MwwWz1m2XG3XrGcjuxQ=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Oct 19 07:08:40 2025 GMT Not After : Oct 26 07:08:40 2025 GMT Subject: CN=68f48e78-2c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:4d:c5:9b:b3:64:eb:c8:ac:f5:81:b4:2e: fd:53:6f:f1:6c:64:fe:75:4e:f0:ac:bd:4f:f0:7a: bc:01:92:dd:b2:ca:4d:40:e5:0a:f1:4d:9b:66:77: 9e:40:81:b8:8f:d9:ee:51:39:fc:3f:88:cb:d5:a5: fe:7d:71:7e:53:68:39:70:5b:b8:e5:30:4b:6e:e3: aa:b8:49:35:59:6c:3c:c1:04:c2:80:f9:44:5b:a7: 9c:dc:7e:e5:35:33:99:fe:9f:5f:63:00:e0:c3:0b: 46:66:c4:29:03:0d:db:5c:e8:a3:b2:ca:5d:88:7f: 4f:2b:70:60:a0:94:0a:73:94:12:a1:4c:d5:8d:14: 92:f5:f6:b2:65:ea:61:cd:72:89:ec:64:dd:81:4b: cf:77:a9:03:5b:3d:eb:ca:95:6c:03:76:09:f1:e8: 41:89:35:85:ee:39:11:be:2c:40:80:44:0f:63:4c: ba:48:90:f3:4c:bc:90:c0:0b:27:3e:73:85:e3:da: 87:d3:51:fa:c1:3a:84:af:ab:16:95:cd:a9:28:bd: eb:77:e2:c9:02:93:20:c2:02:79:74:50:f2:a2:3b: 75:6e:93:dc:0d:6c:97:85:94:99:2e:32:ea:fd:3e: e0:78:15:55:73:69:2e:a5:db:07:be:d4:0d:38:5b: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:07:9A:A9:1E:E6:8D:8B:06:3D:95:E1:B2:6A:B7:06:F7:07:1E X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ca:d4:2d:50:66:05:c6:05:05:5b:f6:3d:e4:7c:44:04:5e: c5:0e:f6:ee:4a:2d:44:9e:ca:b7:4a:21:7b:05:5a:5c:bf:d5: 4d:88:0b:64:ab:df:8c:7c:cc:7a:25:22:f7:e5:a7:e0:10:6c: d8:1d:79:ba:da:99:9c:e2:2d:2e:88:d3:5a:e4:83:68:47:a7: 93:12:ce:76:0c:45:e0:c1:5c:1e:d1:c7:1e:6a:bd:c3:60:59: 6a:e4:38:63:12:39:49:ed:2f:c7:6d:35:34:24:e4:07:96:bd: 5b:37:3e:ee:cc:b0:aa:33:69:60:a3:e2:3a:a1:3e:5b:eb:ac: 5b:3e:ea:0f:e6:4e:4e:a1:12:d5:8d:1a:f2:63:3f:5f:a9:19: 83:a2:97:02:22:9e:23:e1:e7:04:ac:ee:42:03:bf:cb:79:b4: 21:b3:dd:4f:ae:a5:af:53:b2:21:56:ff:94:2b:40:63:c1:32: d2:9c:40:36:27:62:da:9b:5e:81:c7:98:06:b2:c3:18:61:bd: 81:f5:ff:31:d6:7c:d4:6d:c2:72:16:94:e1:13:a8:09:09:fd: 45:38:2d:35:f9:7e:19:b1:b7:88:48:10:cf:c3:0b:e5:a0:24: 03:b8:e0:b1:40:4b:bd:65:04:0b:ee:d5:43:a4:28:b2:87:e8: 08:50:9b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjUxMDE5MDcwODQwWhcNMjUxMDI2MDcwODQwWjAYMRYwFAYD VQQDEw02OGY0OGU3OC0yYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfBNxZuzZOvIrPWBtC79U2/xbGT+dU7wrL1P8Hq8AZLdsspNQOUK8U2bZnee QIG4j9nuUTn8P4jL1aX+fXF+U2g5cFu45TBLbuOquEk1WWw8wQTCgPlEW6ec3H7l NTOZ/p9fYwDgwwtGZsQpAw3bXOijsspdiH9PK3BgoJQKc5QSoUzVjRSS9fayZeph zXKJ7GTdgUvPd6kDWz3rypVsA3YJ8ehBiTWF7jkRvixAgEQPY0y6SJDzTLyQwAsn PnOF49qH01H6wTqEr6sWlc2pKL3rd+LJApMgwgJ5dFDyojt1bpPcDWyXhZSZLjLq /T7geBVVc2kupdsHvtQNOFvpgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaRB5qp HuaNiwY9leGyarcG9wceMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuytQtUGYFxgUFW/Y95HxEBF7FDvbuSi1Ensq3SiF7BVpcv9VNiAtk q9+MfMx6JSL35afgEGzYHXm62pmc4i0uiNNa5INoR6eTEs52DEXgwVwe0ccear3D YFlq5DhjEjlJ7S/HbTU0JOQHlr1bNz7uzLCqM2lgo+I6oT5b66xbPuoP5k5OoRLV jRryYz9fqRmDopcCIp4j4ecErO5CA7/LebQhs91PrqWvU7IhVv+UK0BjwTLSnEA2 J2Lam16Bx5gGssMYYb2B9f8x1nzUbcJyFpThE6gJCf1FOC01+X4ZsbeISBDPwwvl oCQDuOCxQEu9ZQQL7tVDpCiyh+gIUJuq -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:51 2025 by rpki-client