$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json) Hash identifier: xNv8dXD+d0RwX8dLDd9iM6p+NC2Cgk0SFsFqEK990YQ= Subject key identifier: 04:D8:4E:4F:A6:73:97:F8:3A:98:D1:C8:24:35:AF:27:34:BE:F8:22 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft Manifest number: 0142 Signing time: Sun 19 Oct 2025 07:09:30 +0000 Manifest this update: Sun 19 Oct 2025 07:09:30 +0000 Manifest next update: Sun 26 Oct 2025 07:09:30 +0000 Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: gebonSm2SquBrDwqtLYwOXpHs0qJIvyML8OSwdDWJco=) 2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Oct 19 07:09:30 2025 GMT Not After : Oct 26 07:09:30 2025 GMT Subject: CN=68f48eaa-93a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:de:a3:ba:a1:f5:a3:46:76:7c:94:08:f5: 60:61:c5:2e:e1:33:56:82:da:79:43:cb:22:4e:85: da:7f:62:49:e4:48:fe:e6:9e:6f:19:01:a0:6b:87: de:80:5c:85:4b:5d:cc:07:bf:66:eb:ba:3d:c2:98: 0f:da:43:82:26:10:db:aa:9b:73:23:d2:94:c6:c9: 81:d4:95:a3:d5:4e:3c:4e:71:49:7a:e3:e7:df:ef: b4:0f:5f:6d:3f:9b:0a:41:8b:b9:47:c4:b5:3c:ad: f4:bc:6a:9b:4a:52:ad:d0:81:70:b0:cf:42:a4:5f: 96:dc:ec:f8:75:ec:c3:b5:23:46:3b:f1:bc:e3:c0: 0d:8a:e2:4d:8d:fa:aa:5a:d0:cb:44:48:a4:a1:ad: 31:c1:f0:d7:98:aa:ce:17:e2:4a:13:31:10:f8:f7: 62:a1:b3:0b:d2:8a:96:4f:6e:ee:bc:16:2b:5f:fc: 65:56:d9:d1:b8:a7:05:65:20:e2:08:24:0e:38:d1: bf:a7:86:3f:27:0b:0b:81:26:c3:62:73:c2:3d:34: f7:73:62:bc:9c:6d:ce:c7:db:f6:7c:75:68:42:4a: cb:6a:53:43:41:a3:d0:85:4f:0a:75:5d:ce:4d:fe: bb:54:a3:85:59:41:3b:c5:be:3b:d1:73:f2:27:29: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:4E:4F:A6:73:97:F8:3A:98:D1:C8:24:35:AF:27:34:BE:F8:22 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:35:fa:4f:41:33:30:48:a2:1c:e1:55:2e:68:e9:f7:da: 6d:b5:c4:f4:e7:01:04:e0:2a:7d:8e:6e:97:2a:01:e9:2d:ed: 57:7a:24:9d:b4:55:e6:92:a5:82:5a:43:82:dd:49:c9:40:9a: 31:c2:9a:7a:2c:f8:8d:a4:b8:1b:ba:7d:1a:af:81:3e:40:fc: 81:09:83:10:46:85:57:b0:dd:45:df:10:c0:0b:74:08:0c:cb: bf:1e:05:fc:37:94:80:ca:b3:28:9a:06:25:17:8b:08:d1:ec: 08:f6:c3:1c:94:0a:63:40:3e:80:2c:e5:7e:f3:51:6a:51:bc: 94:90:9e:5f:9b:dd:46:ef:e1:ca:88:ac:c6:04:0c:a8:4a:5f: 56:db:61:6b:30:8e:8c:80:4c:70:fb:92:99:ef:1e:8a:a3:07: dd:7c:db:a5:42:5f:66:fe:ba:95:35:91:6f:a8:cb:bd:e6:ab: bf:ba:52:9a:8c:cb:a3:96:d7:d9:d7:93:f4:9d:fd:69:7a:12: 6f:cf:2b:26:03:11:b5:ff:1c:f4:36:35:59:27:db:fb:3d:3f: c5:b4:9d:dd:6c:6a:6e:6a:a7:d4:8c:9c:27:9b:62:51:bc:e1: 15:66:13:04:78:dc:f6:ef:52:e6:1f:a7:75:70:a0:a7:c6:71: 0e:03:e3:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUxMDE5MDcwOTMwWhcNMjUxMDI2MDcwOTMwWjAYMRYwFAYD VQQDEw02OGY0OGVhYS05M2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3azeo7qh9aNGdnyUCPVgYcUu4TNWgtp5Q8siToXaf2JJ5Ej+5p5vGQGga4fe gFyFS13MB79m67o9wpgP2kOCJhDbqptzI9KUxsmB1JWj1U48TnFJeuPn3++0D19t P5sKQYu5R8S1PK30vGqbSlKt0IFwsM9CpF+W3Oz4dezDtSNGO/G848ANiuJNjfqq WtDLREikoa0xwfDXmKrOF+JKEzEQ+PdiobML0oqWT27uvBYrX/xlVtnRuKcFZSDi CCQOONG/p4Y/JwsLgSbDYnPCPTT3c2K8nG3Ox9v2fHVoQkrLalNDQaPQhU8KdV3O Tf67VKOFWUE7xb470XPyJykodQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATYTk+m c5f4OpjRyCQ1ryc0vvgiMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdzX6T0EzMEiiHOFVLmjp99pttcT05wEE4Cp9jm6XKgHpLe1XeiSd tFXmkqWCWkOC3UnJQJoxwpp6LPiNpLgbun0ar4E+QPyBCYMQRoVXsN1F3xDAC3QI DMu/HgX8N5SAyrMomgYlF4sI0ewI9sMclApjQD6ALOV+81FqUbyUkJ5fm91G7+HK iKzGBAyoSl9W22FrMI6MgExw+5KZ7x6KowfdfNulQl9m/rqVNZFvqMu95qu/ulKa jMujltfZ15P0nf1pehJvzysmAxG1/xz0NjVZJ9v7PT/FtJ3dbGpuaqfUjJwnm2JR vOEVZhMEeNz271LmH6d1cKCnxnEOA+MA -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:11 2025 by rpki-client