$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: aiRiu+lcSvJm+kPgzfQerEZ5z6qhX1nt/xivFhbd8ic= Subject key identifier: C0:AC:CA:8C:78:93:A1:F2:93:AD:64:05:D2:11:98:9B:89:3D:14:2F Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 08C3 Signing time: Sat 18 Oct 2025 21:35:17 +0000 Manifest this update: Sat 18 Oct 2025 21:35:16 +0000 Manifest next update: Sat 25 Oct 2025 21:35:16 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: 0LKCTrQV46KOSYAK/mm0cfVahtQ0cb0SRLoyOyXn8no=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: HuFcFo9LZ7JGKc3MlbHoCX/MB3ZM5ld8AKunwUGftyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Oct 18 21:35:16 2025 GMT Not After : Oct 25 21:35:16 2025 GMT Subject: CN=68f40814-e5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:66:73:91:fd:30:8b:64:7d:48:66:eb:3c: b6:23:76:aa:37:90:c9:05:35:a1:43:6d:61:e9:ab: cd:47:17:a4:a2:ac:2f:33:10:9a:39:af:b6:cb:f0: 78:e6:78:c4:23:13:0c:c9:2b:08:a8:90:e6:b4:c3: 8e:06:b9:2f:f8:25:b7:c2:9d:ef:97:b2:38:c2:c4: 17:d3:fc:c6:91:9a:bd:d1:0e:23:18:9b:22:e1:61: 62:58:c3:45:37:7b:db:1f:4a:44:44:09:d7:f2:8d: fd:04:fe:42:63:8a:4d:03:16:be:81:ca:bb:fe:bd: ad:f1:ed:20:41:7f:d5:cd:13:c4:45:76:2d:01:7d: 9a:ac:9b:6d:80:12:0c:84:40:75:0b:dc:99:95:9d: 6e:84:3c:f4:4c:1f:c0:9a:23:32:19:2f:60:fe:b2: 40:00:6f:3b:bb:d6:80:99:f2:00:29:06:66:9c:0b: ca:36:2a:76:a5:2c:29:7d:70:5f:13:79:ff:59:6d: bd:70:72:48:d4:63:c9:d2:fd:5b:dd:8d:50:29:ae: 72:1f:16:a7:23:3d:da:d2:15:ef:2b:02:d3:8d:89: 67:2d:4c:9a:f5:ea:0c:e2:ed:33:c3:c3:7e:e0:c1: 7e:05:d2:40:ef:b7:4e:ef:0d:88:b3:01:1a:1c:8e: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:CA:8C:78:93:A1:F2:93:AD:64:05:D2:11:98:9B:89:3D:14:2F X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4e:fa:e9:a3:9b:64:f2:e1:d7:3d:d9:a1:53:3d:61:c6:13: ab:f1:6c:ab:44:56:3d:d6:b5:90:f4:cf:60:3b:08:17:9d:ec: 52:8e:a9:6e:1d:77:7d:61:63:2c:93:02:12:8f:4c:31:7e:12: ce:36:61:3c:98:ff:af:18:01:d0:07:43:6b:3d:07:fc:24:05: 06:f3:02:cd:e3:d0:2a:6a:26:2b:f5:5f:7a:5e:cf:f1:9c:71: c7:06:ce:31:65:13:1e:c7:fb:85:97:5f:bf:54:ed:20:ec:03: 8d:5d:6a:38:9a:c9:53:49:3f:2d:e4:3b:87:3e:95:56:9a:09: db:5c:4d:d8:d0:bd:91:78:bd:80:62:a1:2e:30:51:cf:6f:9a: 2f:92:93:d0:a3:b4:49:e6:77:b7:5e:09:e4:ec:f2:05:85:e0: fc:e6:f7:be:b2:99:1d:6d:bf:ff:5a:fa:97:0e:c4:50:08:9e: bd:4e:be:47:82:60:d0:f3:5d:57:20:2f:62:27:df:92:12:1a: 4d:67:cc:1b:36:d5:17:1c:b0:69:56:d8:7a:49:68:be:f4:5a: d6:db:d0:81:7e:16:4f:b0:fb:3c:b5:f7:f1:cd:35:fa:43:6f: 2a:f2:c6:ab:70:0c:01:f6:a5:8f:6a:77:56:99:61:82:f2:6e: 0b:5d:bb:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjUxMDE4MjEzNTE2WhcNMjUxMDI1MjEzNTE2WjAYMRYwFAYD VQQDEw02OGY0MDgxNC1lNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZVmc5H9MItkfUhm6zy2I3aqN5DJBTWhQ21h6avNRxekoqwvMxCaOa+2y/B4 5njEIxMMySsIqJDmtMOOBrkv+CW3wp3vl7I4wsQX0/zGkZq90Q4jGJsi4WFiWMNF N3vbH0pERAnX8o39BP5CY4pNAxa+gcq7/r2t8e0gQX/VzRPERXYtAX2arJttgBIM hEB1C9yZlZ1uhDz0TB/AmiMyGS9g/rJAAG87u9aAmfIAKQZmnAvKNip2pSwpfXBf E3n/WW29cHJI1GPJ0v1b3Y1QKa5yHxanIz3a0hXvKwLTjYlnLUya9eoM4u0zw8N+ 4MF+BdJA77dO7w2IswEaHI5sUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCsyox4 k6Hyk61kBdIRmJuJPRQvMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Tvrpo5tk8uHXPdmhUz1hxhOr8WyrRFY91rWQ9M9gOwgXnexSjqlu HXd9YWMskwISj0wxfhLONmE8mP+vGAHQB0NrPQf8JAUG8wLN49AqaiYr9V96Xs/x nHHHBs4xZRMex/uFl1+/VO0g7AONXWo4mslTST8t5DuHPpVWmgnbXE3Y0L2ReL2A YqEuMFHPb5ovkpPQo7RJ5ne3Xgnk7PIFheD85ve+spkdbb//WvqXDsRQCJ69Tr5H gmDQ811XIC9iJ9+SEhpNZ8wbNtUXHLBpVth6SWi+9FrW29CBfhZPsPs8tffxzTX6 Q28q8sarcAwB9qWPandWmWGC8m4LXbsA -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:30 2025 by rpki-client