$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: 2DrCczotEafqARrszjpOFvFHOHxGRaK2p85eaJ1EHH4= Subject key identifier: 59:48:73:37:C1:12:60:C3:47:91:BC:1C:19:BC:E0:C7:46:BD:8F:22 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 07AB Signing time: Sat 18 Oct 2025 22:43:15 +0000 Manifest this update: Sat 18 Oct 2025 22:43:15 +0000 Manifest next update: Sat 25 Oct 2025 22:43:15 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: XUdeeXhohRmR6i3ABx0W1/fVOxRfOFxxyNdSwjmURsA=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: whqCRWJqk83hft05CoOaP7VOGabxQLkV76nu+y1ufPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Oct 18 22:43:15 2025 GMT Not After : Oct 25 22:43:15 2025 GMT Subject: CN=68f41803-1e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:16:b4:5e:fe:39:1b:44:44:dc:3e:7f:48: 9a:78:4f:5a:3f:9b:26:da:96:5e:88:f2:45:50:0a: 62:dc:e5:75:cb:c6:6e:fe:6a:38:82:76:ef:73:15: a3:91:f7:0b:06:c7:c7:ac:b4:a9:ed:45:f2:46:da: 2b:62:04:19:69:f2:87:1e:82:df:4e:c5:78:ee:db: bc:20:04:5e:7f:04:78:b1:30:b3:df:bb:2f:ed:70: d8:d6:84:a4:39:5a:ff:96:a7:7c:86:bf:47:4b:36: 99:a2:25:15:f8:9d:63:24:f2:c3:f0:3e:17:15:5c: d5:a6:02:3d:e1:85:fa:50:0c:18:b7:ca:69:cb:d5: a6:fd:6d:c1:30:08:45:35:ba:14:fa:e4:6c:00:0a: 2c:28:b7:46:dc:ff:f6:2e:25:70:c6:9c:02:4b:3d: 06:cd:19:92:cd:8e:2a:bc:a4:40:ec:f3:12:f7:fb: 14:f9:e8:1a:59:92:48:11:d5:aa:e7:5a:ce:fa:10: e2:b8:b8:c4:6d:b6:50:d7:0c:7f:19:e2:50:66:31: c5:b1:8d:f1:31:cd:36:24:45:c5:34:a4:7d:d8:e4: 25:87:33:e8:6d:0a:1e:07:0d:b9:01:1a:44:61:dd: f7:48:32:3b:5c:37:91:5e:9e:e4:2e:be:78:9e:d7: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:48:73:37:C1:12:60:C3:47:91:BC:1C:19:BC:E0:C7:46:BD:8F:22 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:05:82:dc:ad:92:f2:ca:85:3e:a6:23:e4:39:90:cf:64:91: c7:57:af:24:05:c6:d5:11:1e:4c:9f:46:cc:87:61:68:59:2b: cd:00:66:8f:36:c7:c6:54:0c:25:f0:01:b1:c7:a7:4c:52:69: 09:29:b0:82:9b:01:65:9a:6a:00:df:85:35:48:da:cf:54:e2: b0:ad:76:1a:ab:84:63:da:a8:71:4a:9d:94:51:fc:2d:51:03: 41:db:c0:77:bf:6b:aa:5c:79:60:7b:be:59:b2:7b:9f:43:8d: 39:a7:e1:ff:bf:af:99:ff:c8:af:b4:5c:43:9e:12:ee:6a:22: 7b:56:64:ea:8c:6a:21:69:a5:3c:6b:d3:25:00:ca:13:f1:7a: 9b:97:09:88:81:dd:09:67:c7:b4:95:b9:c7:1b:0a:fe:41:fe: 0f:e4:e1:8d:a6:34:e9:88:75:32:15:26:a4:fa:9a:41:ea:0e: 32:90:51:b6:1f:c6:54:6a:8d:02:bf:b9:0a:ba:4e:ec:9e:9d: f4:59:c8:7f:88:20:c4:39:32:17:cd:36:79:b6:13:0c:33:11: 51:f4:a6:3d:5b:eb:23:ed:1f:a2:5d:c4:48:fd:09:5f:ef:f4: 44:f9:ed:2b:58:35:95:e9:83:36:b9:aa:de:ee:b7:62:ce:1d: 3c:8a:d8:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjUxMDE4MjI0MzE1WhcNMjUxMDI1MjI0MzE1WjAYMRYwFAYD VQQDEw02OGY0MTgwMy0xZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrIWtF7+ORtERNw+f0iaeE9aP5sm2pZeiPJFUApi3OV1y8Zu/mo4gnbvcxWj kfcLBsfHrLSp7UXyRtorYgQZafKHHoLfTsV47tu8IARefwR4sTCz37sv7XDY1oSk OVr/lqd8hr9HSzaZoiUV+J1jJPLD8D4XFVzVpgI94YX6UAwYt8ppy9Wm/W3BMAhF NboU+uRsAAosKLdG3P/2LiVwxpwCSz0GzRmSzY4qvKRA7PMS9/sU+egaWZJIEdWq 51rO+hDiuLjEbbZQ1wx/GeJQZjHFsY3xMc02JEXFNKR92OQlhzPobQoeBw25ARpE Yd33SDI7XDeRXp7kLr54nteDtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlIczfB EmDDR5G8HBm84MdGvY8iMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzBYLcrZLyyoU+piPkOZDPZJHHV68kBcbVER5Mn0bMh2FoWSvNAGaP NsfGVAwl8AGxx6dMUmkJKbCCmwFlmmoA34U1SNrPVOKwrXYaq4Rj2qhxSp2UUfwt UQNB28B3v2uqXHlge75ZsnufQ405p+H/v6+Z/8ivtFxDnhLuaiJ7VmTqjGohaaU8 a9MlAMoT8XqblwmIgd0JZ8e0lbnHGwr+Qf4P5OGNpjTpiHUyFSak+ppB6g4ykFG2 H8ZUao0Cv7kKuk7snp30Wch/iCDEOTIXzTZ5thMMMxFR9KY9W+sj7R+iXcRI/Qlf 7/RE+e0rWDWV6YM2uare7rdizh08itj5 -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:23 2025 by rpki-client