$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: vrBLoUnwBe8kiWFSWcoYX1HiG8XLjVEF/fQQ8ZOtZwQ= Subject key identifier: F4:AB:07:68:20:78:FE:CC:C8:6D:9E:BD:C4:27:53:7B:5F:6C:6E:A3 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 09E5 Signing time: Sat 18 Oct 2025 23:06:27 +0000 Manifest this update: Sat 18 Oct 2025 23:06:26 +0000 Manifest next update: Sat 25 Oct 2025 23:06:26 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: MU11Rj49zJpxZf1NmD4/dpt8h6Dm6HpzUEg8x3sgP+w=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: vQWuHkxNO3W+64VKIpJFVWJTeNRMIc+wKzNHsAhde4Q=) 3: 59DBAE3E318311F09059AF40C4F9AE02.roa (hash: aVl556fzOpXZhCAQS6RzMi60L/5QSS92vYE3e8gw1zM=) 4: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: tUqKc58G4NP/ZiNhEE4m52A3vGMH09GTzhVMgnnCe/8=) 5: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: uy/Ya9Uphz8yk5gzFrvw8K92wA25vKbiFTbIY5cp56U=) 6: 61EE2500936E11F091943583C4F9AE02.roa (hash: +rotfG2AWhrtiiZtPYu29pwh/63B/QOjubWCimhGT1Q=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: KHmIhJVDnUN/JIAGOGyBUT9fEQNuIGqQSzduAjkMS7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Oct 18 23:06:26 2025 GMT Not After : Oct 25 23:06:26 2025 GMT Subject: CN=68f41d72-9726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:c3:dc:2c:ac:d1:64:6d:60:71:23:fa:57: d6:f2:68:e2:60:d5:bb:26:89:d7:82:ec:77:98:be: e3:c8:b0:d9:12:4e:73:87:0a:14:34:34:c3:6b:f9: ef:b3:e4:4d:18:cc:dd:22:92:07:bf:05:9e:83:75: db:2b:4b:34:7b:36:f4:1f:62:aa:ca:26:86:6f:a4: ee:fb:01:eb:66:dd:21:9e:a9:ce:93:fb:a1:96:d5: 78:3f:5c:46:8a:5a:e5:99:68:e1:44:2b:c9:c3:3b: 88:08:d9:9c:bd:1c:ea:b5:49:7e:34:1f:f6:1f:46: ad:c6:ad:82:2b:3d:d2:21:68:b2:41:f0:95:05:90: e6:90:43:75:d9:e5:94:2b:6d:d8:ac:01:a8:2e:54: 32:be:da:75:3c:bd:f4:55:a2:52:cd:33:dc:06:42: cf:8a:e9:85:bd:53:6f:8b:e5:b5:c3:5b:b9:3e:e4: 14:fa:02:30:0d:5d:ef:08:e1:16:9a:fa:1d:0f:bd: 7a:18:c4:b7:12:40:bd:45:0a:07:f3:c0:fd:dc:df: bb:d6:1c:46:98:83:55:32:2e:44:ee:e5:d5:af:70: ae:84:3a:a2:4b:57:8e:35:10:b7:62:6e:40:19:0d: d1:4e:3a:91:01:a1:3c:21:84:bc:75:03:50:89:01: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AB:07:68:20:78:FE:CC:C8:6D:9E:BD:C4:27:53:7B:5F:6C:6E:A3 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:70:8c:e2:72:29:65:0a:25:37:b1:7d:f1:ef:17:c5:f3: 51:32:6c:f5:d3:a6:99:d9:b2:80:65:87:d5:ec:e5:8d:01:c4: 6d:d4:ad:d0:7e:ae:b1:eb:80:eb:b7:fd:98:1f:c6:f6:6a:2d: 7b:91:2f:61:2a:cf:94:49:60:34:a4:0d:9b:44:26:12:b8:39: 31:9b:94:f8:47:09:e1:e3:04:a6:cf:b3:de:89:41:a9:12:4e: e2:f7:45:70:ac:a6:6c:1a:a0:fe:71:3a:fe:0e:47:07:0c:00: 64:31:fd:b3:b1:10:a4:d5:bb:3c:f7:10:09:be:72:43:2e:9d: 76:1f:d4:09:87:83:5c:65:47:61:4b:1f:f1:28:66:97:97:45: ab:7e:ca:7b:8a:6d:71:f4:67:f0:54:61:d8:76:64:82:d1:e4: 02:f5:04:12:e5:df:00:34:51:45:31:4c:a5:65:f1:7d:29:c5: 7c:d0:61:b7:c4:1a:f9:10:60:fb:f4:b0:85:b8:5e:46:4d:e4: a5:1c:05:2b:09:b7:67:04:f3:ac:ee:84:b5:ff:c6:70:72:bb: c4:65:97:8a:0b:a5:24:8a:6a:bc:7e:be:6e:8f:b3:3a:6f:18: 75:fa:81:f9:d2:31:3b:d8:4e:47:f8:6e:27:96:51:a6:24:90: 91:8d:e7:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUxMDE4MjMwNjI2WhcNMjUxMDI1MjMwNjI2WjAYMRYwFAYD VQQDEw02OGY0MWQ3Mi05NzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc7D3Cys0WRtYHEj+lfW8mjiYNW7JonXgux3mL7jyLDZEk5zhwoUNDTDa/nv s+RNGMzdIpIHvwWeg3XbK0s0ezb0H2KqyiaGb6Tu+wHrZt0hnqnOk/uhltV4P1xG ilrlmWjhRCvJwzuICNmcvRzqtUl+NB/2H0atxq2CKz3SIWiyQfCVBZDmkEN12eWU K23YrAGoLlQyvtp1PL30VaJSzTPcBkLPiumFvVNvi+W1w1u5PuQU+gIwDV3vCOEW mvodD716GMS3EkC9RQoH88D93N+71hxGmINVMi5E7uXVr3CuhDqiS1eONRC3Ym5A GQ3RTjqRAaE8IYS8dQNQiQEwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSrB2gg eP7MyG2evcQnU3tfbG6jMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQTXCM4nIpZQolN7F98e8XxfNRMmz106aZ2bKAZYfV7OWNAcRt1K3Q fq6x64Drt/2YH8b2ai17kS9hKs+USWA0pA2bRCYSuDkxm5T4Rwnh4wSmz7PeiUGp Ek7i90VwrKZsGqD+cTr+DkcHDABkMf2zsRCk1bs89xAJvnJDLp12H9QJh4NcZUdh Sx/xKGaXl0Wrfsp7im1x9GfwVGHYdmSC0eQC9QQS5d8ANFFFMUylZfF9KcV80GG3 xBr5EGD79LCFuF5GTeSlHAUrCbdnBPOs7oS1/8ZwcrvEZZeKC6Ukimq8fr5uj7M6 bxh1+oH50jE72E5H+G4nllGmJJCRjecS -----END CERTIFICATE-----Generated at Mon Oct 20 07:44:53 2025 by rpki-client