$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: YQkSX3e40NH5oe9Vo+8qcWOWEUCH91bb0hjgfAtT/i8= Subject key identifier: CD:92:58:CD:58:40:C7:11:C5:38:F4:0D:B3:51:05:A7:2D:15:A3:1F Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 01C6 Signing time: Sun 19 Oct 2025 05:22:06 +0000 Manifest this update: Sun 19 Oct 2025 05:22:06 +0000 Manifest next update: Sun 26 Oct 2025 05:22:06 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: /J9eUXRZsYKMPKhATIJr6v2bZ0pyeIVIBIHfG6TykBI=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: oxGjZ2qP5KAlzJWT8zUJKcB63LEiuvqe3on36ROaH3g=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: Ugoz9OgYhjx5n/wKBryzHZ0lteBuyiXAGZkUzpN/sg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Oct 19 05:22:06 2025 GMT Not After : Oct 26 05:22:06 2025 GMT Subject: CN=68f4757e-d16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:71:b1:db:5a:90:d6:97:10:67:ca:ef:b1: 77:36:27:bc:48:28:26:44:4b:9c:29:67:0e:e2:ac: 92:7d:4d:2e:8e:4d:6a:bd:bf:e0:c1:9c:dc:15:a5: d4:3f:90:17:dc:0c:4b:b4:7d:0a:74:cf:1a:08:a5: 55:4c:e9:be:75:16:04:3a:f8:e7:ff:ba:fc:79:5c: 7c:a7:7b:11:ca:85:3d:08:6d:53:65:7b:fa:8d:31: 12:b2:53:86:61:fb:02:dc:83:cc:1c:6b:f5:da:22: d2:93:a9:d2:43:83:fb:2b:9f:09:25:b0:bf:86:c0: 54:f9:38:8c:b9:f1:b5:20:ef:96:80:e8:bb:07:c5: 20:51:1c:23:30:3f:3e:b9:27:e9:e9:5c:cb:d0:c1: dd:d5:5a:67:a9:5b:56:7a:04:c5:d1:48:01:fc:ee: 9b:11:85:e8:e2:98:8e:72:4a:1d:7f:43:94:3c:f1: 6b:9d:3e:ec:88:bd:50:b3:f1:9c:d7:90:4d:6c:50: e8:ad:87:9e:fd:8d:5e:f8:60:c7:d6:8d:04:3d:94: 2b:cb:16:86:6d:16:b3:5f:11:19:fa:02:52:23:db: 2a:10:97:3a:cd:96:19:c6:53:03:b3:cf:93:10:5b: dc:93:c6:99:8d:f4:c3:7b:eb:4a:09:78:10:04:f2: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:58:CD:58:40:C7:11:C5:38:F4:0D:B3:51:05:A7:2D:15:A3:1F X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:14:f6:c6:38:7f:e7:23:56:6f:00:03:dc:cd:1b:df:1d:cd: af:04:ff:a9:10:66:57:cc:bd:38:0f:67:c9:13:2e:49:87:3e: f3:e1:2d:b3:19:9a:4c:c8:6a:3c:1d:f4:05:e7:d0:e9:9c:0d: 7f:47:ac:18:35:33:12:25:8e:73:0b:6f:f8:69:25:7e:e1:5b: 95:81:58:ef:5e:19:ad:1e:aa:05:56:a1:11:d9:11:f5:4f:ef: 45:6f:e9:d0:3e:b3:5f:23:e2:26:91:05:c2:75:d0:f3:30:d1: 76:c1:20:49:00:92:e4:f7:18:69:fc:56:38:c9:be:e4:d1:cd: d4:94:f0:b9:fe:1b:91:91:8b:6c:41:fb:0c:ef:3a:13:03:f4: b4:ae:ad:46:cd:a2:8e:a9:d3:db:8a:50:9b:76:c1:ab:e9:e2: be:99:5c:aa:29:3d:8f:f7:57:69:c0:84:1e:13:7d:fb:81:3d: 13:72:5f:10:96:34:c5:13:5c:85:06:6b:0b:6d:56:47:ec:5a: 38:2e:cd:a1:67:03:da:ad:11:66:64:1b:9f:83:c7:b7:f2:b0: ab:59:aa:27:c2:d3:06:eb:ad:b9:87:89:94:12:d9:24:0e:97: 7d:39:44:85:7a:85:41:07:a0:e5:0f:5c:77:4d:06:93:f2:0f: f3:b2:df:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjUxMDE5MDUyMjA2WhcNMjUxMDI2MDUyMjA2WjAYMRYwFAYD VQQDEw02OGY0NzU3ZS1kMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rVxsdtakNaXEGfK77F3Nie8SCgmREucKWcO4qySfU0ujk1qvb/gwZzcFaXU P5AX3AxLtH0KdM8aCKVVTOm+dRYEOvjn/7r8eVx8p3sRyoU9CG1TZXv6jTESslOG YfsC3IPMHGv12iLSk6nSQ4P7K58JJbC/hsBU+TiMufG1IO+WgOi7B8UgURwjMD8+ uSfp6VzL0MHd1VpnqVtWegTF0UgB/O6bEYXo4piOckodf0OUPPFrnT7siL1Qs/Gc 15BNbFDorYee/Y1e+GDH1o0EPZQryxaGbRazXxEZ+gJSI9sqEJc6zZYZxlMDs8+T EFvck8aZjfTDe+tKCXgQBPI8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2SWM1Y QMcRxTj0DbNRBactFaMfMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXFPbGOH/nI1ZvAAPczRvfHc2vBP+pEGZXzL04D2fJEy5Jhz7z4S2z GZpMyGo8HfQF59DpnA1/R6wYNTMSJY5zC2/4aSV+4VuVgVjvXhmtHqoFVqER2RH1 T+9Fb+nQPrNfI+ImkQXCddDzMNF2wSBJAJLk9xhp/FY4yb7k0c3UlPC5/huRkYts QfsM7zoTA/S0rq1GzaKOqdPbilCbdsGr6eK+mVyqKT2P91dpwIQeE337gT0Tcl8Q ljTFE1yFBmsLbVZH7Fo4Ls2hZwParRFmZBufg8e38rCrWaonwtMG6625h4mUEtkk Dpd9OUSFeoVBB6DlD1x3TQaT8g/zst/N -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:22 2025 by rpki-client