$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: P3YeTxCcg1su2t6Twl5NxrzWVjB9r4Uy1uR2rbq9I/k= Subject key identifier: 28:2C:96:ED:05:9B:8E:8A:9C:DB:BB:C2:16:13:C2:D6:57:60:F4:DC Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 0818 Signing time: Sat 18 Oct 2025 22:08:51 +0000 Manifest this update: Sat 18 Oct 2025 22:08:50 +0000 Manifest next update: Sat 25 Oct 2025 22:08:50 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 36PXCV5fkDuWWsPl8O5Us2QbsAU5qmp2ivMMU41lMTU=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: dLHVUNtLIV41+zRNY3QMkvAZyxZkYsTbNoR5dSniJzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Oct 18 22:08:50 2025 GMT Not After : Oct 25 22:08:50 2025 GMT Subject: CN=68f40ff2-cd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:01:94:2c:19:bd:c5:85:15:fe:a8:d4:c1: c2:c8:e8:9e:09:24:c7:46:72:3b:e6:40:ee:6d:df: 00:20:cf:4c:d2:b7:16:04:5b:9b:b9:63:5a:60:07: d2:78:10:1c:dd:92:3b:bf:e5:20:bb:fd:c9:80:8b: a5:cf:f5:0b:f9:eb:91:c3:e3:f7:94:5b:f1:d0:a5: 5b:aa:b6:b2:bc:6b:be:d5:04:4c:59:8a:1e:95:50: 8b:81:f2:07:d6:19:6c:cd:24:74:5d:56:0f:e7:10: 3b:9c:a7:38:0f:0d:f7:da:2a:3b:01:6a:db:f0:3e: f4:11:28:a1:29:af:1b:63:f0:ad:37:c9:87:7f:2a: d7:5b:f4:3a:72:51:c1:e8:91:3a:cc:96:ef:9a:1b: bc:9a:c6:71:c0:49:d8:2b:f7:f0:92:9b:7d:a2:d7: 95:0f:3b:c1:96:20:21:76:5e:16:e7:4e:ee:e1:72: b2:40:77:ba:4b:e2:0b:46:81:37:b2:1a:65:f6:08: 1e:f0:0b:09:c2:b5:26:54:65:08:11:d8:1d:06:22: e4:02:b0:98:8d:5f:ef:97:10:3f:9e:28:83:12:f3: 6b:a7:fb:5b:10:f0:32:8c:a1:39:72:87:3e:f7:3b: 67:73:08:5c:b2:6b:30:a5:03:2c:ca:1d:89:e2:f7: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:96:ED:05:9B:8E:8A:9C:DB:BB:C2:16:13:C2:D6:57:60:F4:DC X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:af:9b:9a:0c:65:60:fc:a8:10:8d:be:1a:b8:e7:bd:a8:7a: f0:87:88:8d:8d:6e:de:a7:b7:c5:b5:c0:8e:d0:40:33:55:c5: a5:1e:41:18:63:07:79:57:0b:3d:fd:96:75:3f:24:c7:50:4f: 5d:8e:f3:70:ce:13:e2:ec:42:c3:1d:ab:6d:e6:50:cc:d4:25: 70:91:86:30:9e:22:ad:71:ce:82:9c:2c:93:2e:b2:35:f8:5f: 29:cb:aa:e7:a6:1c:4a:24:75:9f:d8:f4:a1:aa:78:82:b9:0e: 9b:8d:15:8e:39:57:91:db:1c:61:0f:12:ad:bb:24:56:e7:51: dc:e5:73:31:c7:3e:01:c9:84:87:7b:e7:34:e9:40:25:07:ad: 17:14:5a:be:a2:ff:31:75:7f:9e:86:b9:12:8c:b0:3f:71:87: 74:7d:d9:a0:c5:fb:a0:20:54:24:99:7e:ac:06:dd:1f:84:ed: 48:a6:2f:28:7a:6c:57:48:a9:1c:04:aa:56:fb:e9:c7:f5:b0: c5:e6:62:9f:f9:bb:81:37:87:46:56:3f:da:9b:0e:7f:1f:06: 14:b6:28:15:91:2c:2c:8b:aa:87:7e:ba:e0:8b:86:fa:b5:cd: 67:2a:7c:75:54:91:14:95:ae:fd:0c:2d:48:9e:6b:fb:a1:cb: 57:e3:8d:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjUxMDE4MjIwODUwWhcNMjUxMDI1MjIwODUwWjAYMRYwFAYD VQQDEw02OGY0MGZmMi1jZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZgBlCwZvcWFFf6o1MHCyOieCSTHRnI75kDubd8AIM9M0rcWBFubuWNaYAfS eBAc3ZI7v+Ugu/3JgIulz/UL+euRw+P3lFvx0KVbqrayvGu+1QRMWYoelVCLgfIH 1hlszSR0XVYP5xA7nKc4Dw332io7AWrb8D70ESihKa8bY/CtN8mHfyrXW/Q6clHB 6JE6zJbvmhu8msZxwEnYK/fwkpt9oteVDzvBliAhdl4W507u4XKyQHe6S+ILRoE3 shpl9gge8AsJwrUmVGUIEdgdBiLkArCYjV/vlxA/niiDEvNrp/tbEPAyjKE5coc+ 9ztncwhcsmswpQMsyh2J4vcgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgslu0F m46KnNu7whYTwtZXYPTcMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKr5uaDGVg/KgQjb4auOe9qHrwh4iNjW7ep7fFtcCO0EAzVcWlHkEY Ywd5Vws9/ZZ1PyTHUE9djvNwzhPi7ELDHatt5lDM1CVwkYYwniKtcc6CnCyTLrI1 +F8py6rnphxKJHWf2PShqniCuQ6bjRWOOVeR2xxhDxKtuyRW51Hc5XMxxz4ByYSH e+c06UAlB60XFFq+ov8xdX+ehrkSjLA/cYd0fdmgxfugIFQkmX6sBt0fhO1Ipi8o emxXSKkcBKpW++nH9bDF5mKf+buBN4dGVj/amw5/HwYUtigVkSwsi6qHfrrgi4b6 tc1nKnx1VJEUla79DC1Inmv7octX440J -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:15 2025 by rpki-client