$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: pmW2yBIipKpD5U3Fx3BhiIEaIDtrAdRVVFjl3whXTWM= Subject key identifier: 3F:D5:F4:51:46:B1:60:8C:C8:C7:D3:10:6C:78:F8:D4:A0:E1:75:AF Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A56 Signing time: Sat 18 Oct 2025 20:42:26 +0000 Manifest this update: Sat 18 Oct 2025 20:42:26 +0000 Manifest next update: Sat 25 Oct 2025 20:42:26 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: J9QaDe+Dsci58kY0PnI3gptEbWEOPXLq2cfAf/o+fZg=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Oct 18 20:42:26 2025 GMT Not After : Oct 25 20:42:26 2025 GMT Subject: CN=68f3fbb2-47ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:41:24:81:52:04:c7:9a:d1:28:6d:59:6c: 52:e1:32:7e:cc:26:17:f7:d2:06:d3:2f:35:a5:01: 5e:5e:f7:b9:f3:84:56:5b:8e:bc:b9:33:fa:2e:d2: 3d:4e:95:cf:ca:26:87:8d:54:35:31:16:7e:3d:6e: cf:5d:1c:46:f3:6a:1f:31:76:e8:cf:4b:b7:b0:1a: fc:24:ab:9f:eb:5c:14:b3:76:4d:b7:65:b4:f1:02: 8c:a2:f6:7e:d0:8f:3e:c2:d8:5f:6d:4e:82:8a:9c: 1f:15:4b:29:37:80:dc:f0:66:53:81:d7:e7:8f:e8: 1e:66:12:40:75:af:9a:fa:1d:52:55:7d:32:8a:8b: df:d6:63:c0:e8:86:aa:47:4f:75:8c:ec:cc:be:c1: 89:97:e8:89:e3:3b:78:90:1a:c2:68:0d:93:be:f4: 72:bd:af:65:9e:54:20:36:80:ea:73:ec:d5:57:2f: d1:d6:9b:08:ed:bf:b3:8f:93:2e:1d:17:44:b5:26: 07:88:6e:8e:1a:e5:62:09:9f:ba:9b:a8:79:87:a7: 62:67:14:df:4c:b6:0b:27:a3:7a:14:b8:24:86:fa: 81:c6:04:ef:a8:3d:5d:b4:df:c0:58:9e:5d:77:96: c2:5f:9a:14:2e:38:fd:ae:8b:0c:1a:ed:30:81:83: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D5:F4:51:46:B1:60:8C:C8:C7:D3:10:6C:78:F8:D4:A0:E1:75:AF X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:a8:72:91:eb:8b:26:0c:e6:1b:9a:9a:ed:4f:17:87:1c: ff:2f:29:3d:9c:59:09:a9:1d:c9:5c:72:66:45:f8:2f:69:0c: cc:3f:b3:57:c8:02:34:cb:d9:c6:12:52:9a:f6:af:fe:a1:7c: 6f:17:8c:4e:b1:e1:71:7c:aa:90:c3:45:a4:04:47:21:75:b0: 4f:73:37:d2:41:5f:12:c8:da:9e:54:8e:b2:2c:a0:ce:e0:30: 99:96:a7:10:d6:8e:c8:78:17:6d:ac:65:a6:5b:39:c3:1e:7a: 2b:20:59:4e:d9:fc:3d:65:e9:68:92:8c:e1:ab:e3:d3:8e:af: ee:6b:2d:79:72:73:56:66:bc:37:aa:fb:bb:4e:89:5b:a7:a8: dc:15:c8:bb:41:79:2d:ec:30:12:39:56:3b:7a:b1:0d:eb:e8: 8f:05:06:72:0a:d4:45:58:d6:42:c7:f3:fa:90:59:99:4f:4e: 52:45:b2:f5:e8:86:37:d6:2f:8a:5a:51:38:8d:f9:1d:f7:d2: cb:32:04:8b:63:da:de:36:8a:66:06:3a:b8:3c:c4:7d:14:98: 60:9d:19:6b:c5:f4:63:b6:df:54:34:fe:cc:90:cc:20:dc:b8: a5:62:13:14:05:14:ba:4c:2e:44:d6:48:2b:3c:16:d2:2a:bc: c5:27:45:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUxMDE4MjA0MjI2WhcNMjUxMDI1MjA0MjI2WjAYMRYwFAYD VQQDEw02OGYzZmJiMi00N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHVBJIFSBMea0ShtWWxS4TJ+zCYX99IG0y81pQFeXve584RWW468uTP6LtI9 TpXPyiaHjVQ1MRZ+PW7PXRxG82ofMXboz0u3sBr8JKuf61wUs3ZNt2W08QKMovZ+ 0I8+wthfbU6CipwfFUspN4Dc8GZTgdfnj+geZhJAda+a+h1SVX0yiovf1mPA6Iaq R091jOzMvsGJl+iJ4zt4kBrCaA2TvvRyva9lnlQgNoDqc+zVVy/R1psI7b+zj5Mu HRdEtSYHiG6OGuViCZ+6m6h5h6diZxTfTLYLJ6N6FLgkhvqBxgTvqD1dtN/AWJ5d d5bCX5oULjj9rosMGu0wgYOaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/V9FFG sWCMyMfTEGx4+NSg4XWvMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+tKhykeuLJgzmG5qa7U8Xhxz/Lyk9nFkJqR3JXHJmRfgvaQzMP7NX yAI0y9nGElKa9q/+oXxvF4xOseFxfKqQw0WkBEchdbBPczfSQV8SyNqeVI6yLKDO 4DCZlqcQ1o7IeBdtrGWmWznDHnorIFlO2fw9Zelokozhq+PTjq/uay15cnNWZrw3 qvu7Tolbp6jcFci7QXkt7DASOVY7erEN6+iPBQZyCtRFWNZCx/P6kFmZT05SRbL1 6IY31i+KWlE4jfkd99LLMgSLY9reNopmBjq4PMR9FJhgnRlrxfRjtt9UNP7MkMwg 3LilYhMUBRS6TC5E1kgrPBbSKrzFJ0U9 -----END CERTIFICATE-----Generated at Mon Oct 20 03:55:36 2025 by rpki-client