$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: RRAsh+e/gdYi1FGOMboE79OdjVhZAquelsdil1UTc38= Subject key identifier: 84:BB:AF:E6:E2:4E:E2:17:02:33:5F:06:0C:E5:84:7B:CF:7F:14:2B Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 2F Signing time: Sun 19 Oct 2025 11:13:02 +0000 Manifest this update: Sun 19 Oct 2025 11:13:01 +0000 Manifest next update: Sun 26 Oct 2025 11:13:01 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: 7KDqhVFMbzbVu3VcGQvdnUg3+fM+G1ZdjEMESflw79A=) 2: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Oct 19 11:13:01 2025 GMT Not After : Oct 26 11:13:01 2025 GMT Subject: CN=68f4c7bd-52ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:66:c5:7f:d2:bd:04:e2:17:51:c6:65:73: e0:67:13:46:0a:5c:27:c0:24:af:e6:08:64:74:f7: d5:cf:31:7f:37:64:f2:20:1f:b2:f9:98:4d:3f:69: 8c:f9:6c:ff:aa:b6:86:e7:0e:4a:36:c6:af:d6:67: 9a:0e:15:b1:5f:d8:37:df:da:78:90:41:ad:3a:94: 8b:8b:a8:be:ab:ee:af:d1:2b:0d:e8:f6:03:29:99: 88:c4:c6:05:4c:5a:b1:e3:be:a1:42:06:d3:7f:c1: 3e:3f:2e:7e:51:7b:92:a5:20:7b:70:99:86:7e:37: 73:19:fe:dc:b1:db:bc:1b:c4:28:7c:39:a5:16:33: c7:42:8b:91:ee:4f:9a:cf:a9:dd:02:5c:db:cc:b9: 75:6a:93:ac:3f:fe:2c:4d:0b:96:f1:ed:b7:99:2e: a9:91:49:23:ff:40:9a:34:60:e8:aa:b3:7f:3a:bc: 9b:01:24:d0:36:a8:79:09:26:78:80:24:32:05:b6: 73:9f:7a:4e:fc:c8:b0:7d:da:22:78:a1:76:db:85: 37:87:bc:c2:c2:6d:b6:c9:7a:38:85:da:ce:1a:cf: ec:6e:75:1e:b1:b8:2b:33:78:40:31:35:2f:f2:ff: 06:e1:8a:d5:42:17:6b:36:11:e3:c5:27:83:df:7c: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BB:AF:E6:E2:4E:E2:17:02:33:5F:06:0C:E5:84:7B:CF:7F:14:2B X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:9e:d0:49:41:be:c1:bb:83:bb:fa:36:87:eb:4d:77:ee: 1d:40:55:85:47:99:d3:46:f6:1f:b1:89:a1:d1:33:b7:48:f1: 35:16:5e:44:c2:d6:55:8b:fc:c4:c9:b0:02:c3:6f:44:57:cf: e1:7e:5c:71:c3:dc:42:11:ef:db:a6:f3:b4:18:b0:b2:b9:88: 78:e3:f4:09:22:b5:b1:1c:6d:63:84:c4:d5:9d:a7:4b:37:b4: 8a:5d:da:9e:28:1c:15:ea:3e:b2:c3:52:61:d3:1e:4a:97:f1: 77:c7:ea:3d:de:f6:dd:31:ef:ca:f5:07:00:37:f4:4d:f5:65: 57:c5:2f:e6:7b:51:e5:16:4d:16:4c:91:23:85:5c:a7:05:b3: d2:62:44:de:2b:8c:ba:6b:09:a6:25:2c:8a:0b:f1:fd:ce:16: d2:6e:fb:9d:ca:76:13:5c:13:93:41:3e:ea:c0:19:cc:2d:74: 1f:81:ff:21:ad:2a:1b:98:87:39:f6:c8:b5:70:b2:8e:7b:62: 90:98:b9:1c:ef:5a:bc:cc:60:d0:40:8c:f8:b6:70:05:d2:fd: 7e:4f:7b:c0:af:5d:b1:bd:de:c3:a6:81:69:fa:2d:d8:b2:fd: d8:93:c6:c1:04:36:bb:91:72:d1:62:ea:8d:ab:33:0a:e7:f5: c2:f1:bc:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTEwMTkxMTEzMDFaFw0yNTEwMjYxMTEzMDFaMBgxFjAUBgNV BAMTDTY4ZjRjN2JkLTUyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXP2bFf9K9BOIXUcZlc+BnE0YKXCfAJK/mCGR099XPMX83ZPIgH7L5mE0/aYz5 bP+qtobnDko2xq/WZ5oOFbFf2Dff2niQQa06lIuLqL6r7q/RKw3o9gMpmYjExgVM WrHjvqFCBtN/wT4/Ln5Re5KlIHtwmYZ+N3MZ/tyx27wbxCh8OaUWM8dCi5HuT5rP qd0CXNvMuXVqk6w//ixNC5bx7beZLqmRSSP/QJo0YOiqs386vJsBJNA2qHkJJniA JDIFtnOfek78yLB92iJ4oXbbhTeHvMLCbbbJejiF2s4az+xudR6xuCszeEAxNS/y /wbhitVCF2s2EePFJ4PffCWrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhLuv5uJO 4hcCM18GDOWEe89/FCswHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8YntBJQb7Bu4O7+jaH60137h1AVYVHmdNG9h+xiaHRM7dI8TUWXkTC 1lWL/MTJsALDb0RXz+F+XHHD3EIR79um87QYsLK5iHjj9AkitbEcbWOExNWdp0s3 tIpd2p4oHBXqPrLDUmHTHkqX8XfH6j3e9t0x78r1BwA39E31ZVfFL+Z7UeUWTRZM kSOFXKcFs9JiRN4rjLprCaYlLIoL8f3OFtJu+53KdhNcE5NBPurAGcwtdB+B/yGt KhuYhzn2yLVwso57YpCYuRzvWrzMYNBAjPi2cAXS/X5Pe8CvXbG93sOmgWn6Ldiy /diTxsEENruRctFi6o2rMwrn9cLxvDg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:05 2025 by rpki-client