$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: w8BIO2uXG8VNSSswjNCdWKBQ94ynHdXBoHkVGEzJdR0= Subject key identifier: 21:5D:27:DA:0E:10:81:59:53:7C:39:DC:99:58:CD:51:07:BA:CC:74 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0618 Signing time: Sun 19 Oct 2025 00:25:32 +0000 Manifest this update: Sun 19 Oct 2025 00:25:31 +0000 Manifest next update: Sun 26 Oct 2025 00:25:31 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: feYbieXmTfQbyRsZRcgdUSDjpxvYl4t6bon1xxq/oDo=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: B/l1/qnG+ox/f3khU2Qu7i7cTmOVlXxBXIJAWV1sQEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Oct 19 00:25:31 2025 GMT Not After : Oct 26 00:25:31 2025 GMT Subject: CN=68f42ffb-dcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:e3:8d:d4:26:69:15:80:19:42:bb:d0:26: 70:89:f7:b6:19:2f:89:21:ba:7e:45:fa:15:2e:be: bd:51:db:49:3b:b8:1a:0e:5f:d1:10:f0:cb:db:a7: 29:0d:08:9a:9f:7e:dd:34:8a:d3:2b:a2:b1:27:3d: ef:c8:79:46:2f:0e:7c:29:60:3e:87:14:5f:f9:1e: 39:d9:81:c1:ea:63:8c:60:a6:02:9e:a5:cb:16:a6: b3:81:c6:04:a2:e3:aa:bf:33:b8:42:52:e6:ca:f3: 8c:f0:84:cc:a6:bf:8a:ee:ea:ac:88:dc:f4:cf:5f: 1a:f2:e7:76:a7:ba:f3:9a:58:25:8a:87:09:8d:2a: 84:f8:30:ff:d2:e3:56:9d:22:22:30:f3:a1:06:3d: aa:79:2c:46:da:4b:58:32:eb:39:9d:ae:25:40:b5: 85:1c:cb:ea:1b:aa:74:8a:46:32:8f:ad:37:40:4b: ce:5b:e9:db:a7:e6:0d:6b:1e:a8:7e:1a:5e:e6:dd: 0a:47:07:ea:b1:58:06:40:ce:0b:af:a1:b7:13:81: e7:c4:c6:af:4e:d3:d9:ba:80:76:bf:23:a8:48:0b: 51:d5:92:97:1d:84:e3:a2:80:a6:3f:89:16:7c:3d: b1:ac:a3:9a:3c:cd:d4:e2:b8:cf:7f:70:dc:cb:15: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5D:27:DA:0E:10:81:59:53:7C:39:DC:99:58:CD:51:07:BA:CC:74 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5b:f2:25:74:df:d3:a7:a2:8b:8a:1f:f3:92:61:f9:34:ad: ae:83:27:ab:e5:47:39:65:0d:d5:e3:a1:aa:df:e9:e5:b6:26: 5b:61:31:02:e8:4d:1f:52:38:f8:94:77:a2:b8:9d:cf:15:f3: 77:6c:6d:6f:e1:a2:00:fc:5b:94:d7:12:6a:2b:09:dc:44:29: 1d:55:9c:55:95:e0:fb:e4:bc:26:7c:64:da:04:2b:5a:c2:36: 3f:d6:c7:75:00:19:37:13:e5:8d:12:a3:03:31:a0:3f:09:61: 6b:3c:39:f5:6f:ba:e5:4e:22:9a:9c:1c:72:3b:e8:6c:a1:b6: 8c:3d:1f:cf:73:47:e2:6e:d5:53:03:fa:df:56:c2:fd:f2:68: 41:0c:5d:c5:a5:8f:a9:50:82:44:6e:b7:c2:83:c6:ff:ee:0a: 76:1d:31:32:cb:bf:c1:b1:e7:ae:97:63:f8:07:12:95:8a:98: 4f:b6:f8:99:b8:87:ff:46:bb:86:0f:62:c9:75:a3:6d:16:39: f9:e8:51:0f:82:fc:db:1e:38:c0:8d:44:9c:2d:23:f5:6d:7b: ed:83:79:10:c4:1f:84:e7:5b:f7:28:8f:4f:fa:f3:15:03:50: 01:d9:20:c9:84:fa:a8:4c:f0:65:35:24:5a:0e:11:bb:9d:50: 6d:cc:c2:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjUxMDE5MDAyNTMxWhcNMjUxMDI2MDAyNTMxWjAYMRYwFAYD VQQDEw02OGY0MmZmYi1kY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthXjjdQmaRWAGUK70CZwife2GS+JIbp+RfoVLr69UdtJO7gaDl/REPDL26cp DQian37dNIrTK6KxJz3vyHlGLw58KWA+hxRf+R452YHB6mOMYKYCnqXLFqazgcYE ouOqvzO4QlLmyvOM8ITMpr+K7uqsiNz0z18a8ud2p7rzmlgliocJjSqE+DD/0uNW nSIiMPOhBj2qeSxG2ktYMus5na4lQLWFHMvqG6p0ikYyj603QEvOW+nbp+YNax6o fhpe5t0KRwfqsVgGQM4Lr6G3E4HnxMavTtPZuoB2vyOoSAtR1ZKXHYTjooCmP4kW fD2xrKOaPM3U4rjPf3DcyxU6wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFdJ9oO EIFZU3w53JlYzVEHusx0MB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoW/IldN/Tp6KLih/zkmH5NK2ugyer5Uc5ZQ3V46Gq3+nltiZbYTEC 6E0fUjj4lHeiuJ3PFfN3bG1v4aIA/FuU1xJqKwncRCkdVZxVleD75LwmfGTaBCta wjY/1sd1ABk3E+WNEqMDMaA/CWFrPDn1b7rlTiKanBxyO+hsobaMPR/Pc0fibtVT A/rfVsL98mhBDF3FpY+pUIJEbrfCg8b/7gp2HTEyy7/Bseeul2P4BxKViphPtviZ uIf/RruGD2LJdaNtFjn56FEPgvzbHjjAjUScLSP1bXvtg3kQxB+E51v3KI9P+vMV A1AB2SDJhPqoTPBlNSRaDhG7nVBtzMLK -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:56 2025 by rpki-client