$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: 6h+3AXcaONgjJsZhL+pixJQtaRFOtP1Pxvks30Kr1mk= Subject key identifier: EE:25:C8:2A:7F:76:9F:28:6A:C2:15:81:D3:11:6E:99:99:81:D7:7B Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0CCD Signing time: Sat 18 Oct 2025 18:57:27 +0000 Manifest this update: Sat 18 Oct 2025 18:57:26 +0000 Manifest next update: Sat 25 Oct 2025 18:57:26 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: D1K6Jr2gW+Na8LQZa40gaHQY2O5JW4qtcgBSoq4M+NM=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Oct 18 18:57:26 2025 GMT Not After : Oct 25 18:57:26 2025 GMT Subject: CN=68f3e316-44b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:b5:84:0b:db:35:68:8a:52:65:79:62:85: 09:b2:2e:09:6f:c9:81:70:aa:c6:a8:8b:45:6f:e1: 29:59:03:b0:4a:52:03:5a:09:c6:c0:b9:22:74:06: 84:ca:3f:14:b6:42:24:43:43:95:a9:54:95:20:61: cf:0d:5d:58:ee:d9:11:1c:81:2d:5f:ea:21:e8:ce: c2:df:84:f4:63:27:a3:cf:41:b8:b4:3b:de:8e:48: 01:5c:07:2c:02:c3:1a:7d:7b:64:ae:39:19:c6:0c: b5:6e:f4:b9:ef:06:88:9e:3d:78:27:8a:2d:41:5e: b4:75:98:cf:48:56:cc:6b:46:2f:55:d7:99:39:41: f9:63:81:21:28:7e:59:78:f7:4c:77:75:67:2d:77: 01:c8:50:3a:14:f4:0f:65:bb:8c:0c:b5:da:d1:18: 16:cd:5c:41:e7:68:6c:a5:ed:20:4a:48:73:40:77: 79:58:71:9e:c7:7c:73:2c:53:12:29:10:9b:4a:ec: 87:17:ea:18:29:88:84:38:99:57:c7:3d:68:e2:67: d9:45:be:8b:18:28:03:6d:1f:f1:21:48:d6:1b:89: d5:17:4d:24:7d:f1:9f:c5:4e:6f:c1:d9:89:2d:c8: 30:b0:d2:56:54:c6:4f:1c:b4:53:9d:8a:18:82:a3: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:25:C8:2A:7F:76:9F:28:6A:C2:15:81:D3:11:6E:99:99:81:D7:7B X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:25:01:05:2a:0c:92:33:b2:6d:25:a0:61:6a:39:56:51: 7d:70:3c:04:7c:e3:b4:28:00:2b:43:07:b8:34:4c:ba:d4:98: 0a:74:90:a0:15:47:49:f7:39:e9:52:1b:90:5a:b4:08:e5:cb: c9:af:fd:c9:25:b2:2b:e8:01:ad:85:56:1c:99:75:d3:cd:52: 3c:b4:79:09:f0:64:da:58:8b:24:c4:cd:40:dd:a8:a0:1e:4f: 11:38:63:e5:52:29:1c:08:fb:71:c3:5e:40:65:0e:24:ec:0b: e2:9f:bd:54:12:02:4a:fa:1d:12:4a:a6:54:ac:4b:29:aa:80: e2:2f:f7:62:8b:1b:7f:52:dc:e1:26:9a:4a:93:21:9a:09:dd: 57:3a:f4:68:7b:b4:65:3a:94:b0:72:26:f3:7a:cd:c9:69:37: c8:7b:e2:fe:cd:d9:43:a9:8a:db:22:50:28:76:77:c0:2c:b2: af:28:0b:ca:fc:6b:77:8e:7a:04:1d:25:27:f6:bc:75:c5:32: cf:78:f0:ba:b6:24:27:1d:a4:74:59:e2:dc:e1:9c:5a:fd:80: 0f:11:c5:3d:66:39:04:1e:68:9e:9e:35:98:09:35:c7:d0:85: be:22:b0:aa:68:03:a5:b7:f7:2c:45:01:3a:89:26:43:3a:46: f8:80:c5:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjUxMDE4MTg1NzI2WhcNMjUxMDI1MTg1NzI2WjAYMRYwFAYD VQQDEw02OGYzZTMxNi00NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHm1hAvbNWiKUmV5YoUJsi4Jb8mBcKrGqItFb+EpWQOwSlIDWgnGwLkidAaE yj8UtkIkQ0OVqVSVIGHPDV1Y7tkRHIEtX+oh6M7C34T0Yyejz0G4tDvejkgBXAcs AsMafXtkrjkZxgy1bvS57waInj14J4otQV60dZjPSFbMa0YvVdeZOUH5Y4EhKH5Z ePdMd3VnLXcByFA6FPQPZbuMDLXa0RgWzVxB52hspe0gSkhzQHd5WHGex3xzLFMS KRCbSuyHF+oYKYiEOJlXxz1o4mfZRb6LGCgDbR/xIUjWG4nVF00kffGfxU5vwdmJ LcgwsNJWVMZPHLRTnYoYgqPNcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4lyCp/ dp8oasIVgdMRbpmZgdd7MB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu5iUBBSoMkjOybSWgYWo5VlF9cDwEfOO0KAArQwe4NEy61JgKdJCg FUdJ9znpUhuQWrQI5cvJr/3JJbIr6AGthVYcmXXTzVI8tHkJ8GTaWIskxM1A3aig Hk8ROGPlUikcCPtxw15AZQ4k7Avin71UEgJK+h0SSqZUrEspqoDiL/diixt/Utzh JppKkyGaCd1XOvRoe7RlOpSwcibzes3JaTfIe+L+zdlDqYrbIlAodnfALLKvKAvK /Gt3jnoEHSUn9rx1xTLPePC6tiQnHaR0WeLc4Zxa/YAPEcU9ZjkEHmienjWYCTXH 0IW+IrCqaAOlt/csRQE6iSZDOkb4gMXe -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:23 2025 by rpki-client