$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: zGwMrjIgjzVUNGvN6F5NLypyKOZqKIEPHXNl47tuiqg= Subject key identifier: 5B:B4:36:2C:AF:3F:BC:CA:1B:D9:25:D7:BF:31:E8:EB:35:1E:D4:34 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0160 Signing time: Sun 19 Oct 2025 06:44:03 +0000 Manifest this update: Sun 19 Oct 2025 06:44:02 +0000 Manifest next update: Sun 26 Oct 2025 06:44:02 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: L8kBbIjyyLe6PZj1p5/aTbzBEm5w1H8IK4zXIZuA8PY=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: I77zej0g2IdMx6WMXQdInqyMmRTM3TktU3rYTAd3Uxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Oct 19 06:44:02 2025 GMT Not After : Oct 26 06:44:02 2025 GMT Subject: CN=68f488b3-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:8e:51:a1:46:12:a2:3c:8d:08:f3:08:80: eb:01:2d:15:0c:fb:53:f5:7c:ce:f9:d6:a7:7d:c2: e0:09:d4:b9:e7:c7:f3:5b:5c:f9:75:f1:eb:61:23: 5b:26:d3:84:94:10:aa:0f:d1:9a:d2:73:f6:86:a2: 97:8a:ee:08:e7:3b:79:6a:e7:ce:0c:c6:7d:20:9a: 80:58:e8:ad:fe:19:c5:3d:87:2f:20:63:27:30:a8: 41:db:f7:bd:de:6d:47:8c:8f:a3:f7:66:98:9b:36: 4c:00:ed:38:6d:59:7e:58:2f:3d:89:fa:72:9e:17: 1d:d4:e4:9e:44:e4:73:54:3e:6f:8a:5f:01:32:4f: cd:6e:75:96:86:4d:bc:cd:04:24:5f:00:c7:d1:3e: 85:36:d4:28:f0:56:32:60:3a:11:4f:ac:69:f3:ca: b5:0a:e7:95:d8:56:42:45:d7:52:f4:d5:24:10:1c: 00:cb:fd:9c:dd:89:01:75:b7:29:25:9c:12:08:6a: 0a:a5:02:04:8c:e9:ce:6f:09:67:82:57:bb:fb:f5: 12:8c:74:65:d4:1e:6d:d0:e7:38:ee:cf:9a:4a:e3: 89:a8:e2:c6:a2:ef:eb:53:e3:bb:85:62:e8:54:4c: ed:6a:4a:14:2b:1c:84:53:7f:c8:87:47:9c:a7:3b: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:36:2C:AF:3F:BC:CA:1B:D9:25:D7:BF:31:E8:EB:35:1E:D4:34 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:09:81:4d:05:15:16:e4:92:aa:2a:f8:58:9a:7d:a1:5f:a1: b0:eb:53:1b:24:b4:d0:ee:5f:15:a1:99:c7:66:e1:d6:1d:8f: d2:bc:52:ba:bd:af:5d:b7:24:c6:b1:bb:8c:1f:75:0f:a1:cd: 6b:67:3d:a9:3e:87:f7:f6:ef:be:dd:e3:17:6a:99:c4:09:ab: d1:72:01:e5:4b:26:45:8d:d7:cb:36:ff:21:65:c4:06:e9:f4: 6f:5e:1e:d0:25:c5:13:29:ef:94:eb:2d:b5:09:7b:da:7e:a4: f0:f3:cf:c7:3a:0c:e4:da:3a:23:9d:6e:d3:03:d6:6e:2c:ba: 86:e6:3f:ae:a9:14:a4:33:7d:75:78:33:8b:d1:4b:73:c7:de: d1:9c:ef:2a:01:68:b3:3c:01:21:0b:e8:3e:b2:e9:07:a9:f2: ad:b7:22:8e:26:30:da:4c:c8:58:51:4b:0a:73:2e:d3:0c:a4: 7a:b6:79:21:c2:e3:67:f2:59:fa:63:00:28:e7:3b:5c:7d:e1: 05:e0:0f:b3:ec:05:69:87:89:17:92:98:91:d8:2a:58:4a:e0: ea:49:0a:5b:f6:c7:07:3c:ca:a9:0f:93:0f:87:e2:04:77:39: f2:f4:51:8f:d4:db:b6:6e:60:e6:7e:08:94:7b:24:65:fa:0b: b2:70:1e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjUxMDE5MDY0NDAyWhcNMjUxMDI2MDY0NDAyWjAYMRYwFAYD VQQDEw02OGY0ODhiMy1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusKOUaFGEqI8jQjzCIDrAS0VDPtT9XzO+danfcLgCdS558fzW1z5dfHrYSNb JtOElBCqD9Ga0nP2hqKXiu4I5zt5aufODMZ9IJqAWOit/hnFPYcvIGMnMKhB2/e9 3m1HjI+j92aYmzZMAO04bVl+WC89ifpynhcd1OSeRORzVD5vil8BMk/NbnWWhk28 zQQkXwDH0T6FNtQo8FYyYDoRT6xp88q1CueV2FZCRddS9NUkEBwAy/2c3YkBdbcp JZwSCGoKpQIEjOnObwlngle7+/USjHRl1B5t0Oc47s+aSuOJqOLGou/rU+O7hWLo VEztakoUKxyEU3/Ih0ecpzs0RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu0Niyv P7zKG9kl178x6Os1HtQ0MB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASCYFNBRUW5JKqKvhYmn2hX6Gw61MbJLTQ7l8VoZnHZuHWHY/SvFK6 va9dtyTGsbuMH3UPoc1rZz2pPof39u++3eMXapnECavRcgHlSyZFjdfLNv8hZcQG 6fRvXh7QJcUTKe+U6y21CXvafqTw88/HOgzk2jojnW7TA9ZuLLqG5j+uqRSkM311 eDOL0Utzx97RnO8qAWizPAEhC+g+sukHqfKttyKOJjDaTMhYUUsKcy7TDKR6tnkh wuNn8ln6YwAo5ztcfeEF4A+z7AVph4kXkpiR2CpYSuDqSQpb9scHPMqpD5MPh+IE dzny9FGP1Nu2bmDmfgiUeyRl+guycB6o -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:37 2025 by rpki-client