$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: BZAx+UIiW4tksPkxJWMO+EcgV1SKeC87PwJtGP4mLow= Subject key identifier: AC:6E:D1:E7:B7:C1:52:8B:97:59:4F:FB:7F:4D:2F:07:E2:A3:67:CC Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2453 Signing time: Sat 18 Oct 2025 16:02:07 +0000 Manifest this update: Sat 18 Oct 2025 16:02:06 +0000 Manifest next update: Sat 25 Oct 2025 16:02:06 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: xmq3xb4eB0AI6mdQqR/8XJvL9LPPqEt0sCURZfLmtt0=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9321 (0x2469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Oct 18 16:02:06 2025 GMT Not After : Oct 25 16:02:06 2025 GMT Subject: CN=68f3b9fe-13cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:40:2d:ce:94:80:0b:f7:8e:ff:31:79:8e: 71:c5:4f:43:4d:ee:5b:be:7f:8e:00:c5:f4:5f:1c: 35:ac:df:ae:ff:75:d1:af:9b:64:75:f8:72:b1:d9: 5e:9f:9b:38:5d:a6:09:43:67:45:3a:aa:e4:67:1a: da:94:6e:de:76:4f:96:94:bd:98:8f:4b:0b:de:74: 95:5f:d8:e2:a0:61:4a:74:f6:ea:5f:8f:2c:4c:f8: 9c:02:fb:87:24:aa:40:ec:75:db:a2:67:51:77:6e: a0:7a:3b:16:d3:87:8a:23:16:01:82:a2:7a:d1:f6: fc:c2:ec:41:27:40:b7:99:08:52:0d:48:b6:a0:ba: cf:23:53:d5:78:46:b6:9a:45:6a:d8:03:ae:07:67: 61:06:e3:46:1a:bc:87:3e:25:21:13:2c:8f:e2:d4: 05:1d:3b:b0:2f:16:48:d9:5b:76:c0:a7:86:2f:58: 83:6e:21:41:84:5a:a1:7a:60:49:f0:8c:2c:f9:1e: 6f:61:a7:61:8b:96:cf:62:81:20:95:6e:14:10:45: e2:70:8a:9b:93:2b:f4:d0:a5:1a:e9:1b:22:a5:3d: 11:ff:7e:c7:c4:5f:22:96:86:d6:49:15:79:a6:81: 42:da:3c:6c:20:d2:26:fc:6f:f5:b8:c4:2c:88:5b: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6E:D1:E7:B7:C1:52:8B:97:59:4F:FB:7F:4D:2F:07:E2:A3:67:CC X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f0:34:78:38:9e:eb:20:49:44:b3:ee:86:48:ef:8a:9c:56: 58:a1:83:6f:bb:7e:fe:b4:56:2f:80:09:33:91:d9:5e:77:ac: ce:5b:1a:0f:37:ca:d7:72:da:c2:4b:8b:7d:e4:4f:04:ec:48: 97:4d:35:5b:54:34:0b:f3:7f:ab:80:2d:78:57:61:59:0a:fa: fc:07:4c:3b:a6:0a:c8:25:19:a6:dc:86:94:db:40:9c:5b:0f: 6e:4f:3f:0d:9c:4f:51:ef:05:e3:e6:fe:16:6f:77:57:4d:29: 0e:95:e3:0f:17:95:c6:ac:25:0c:e5:bc:ba:e4:ea:53:1e:c0: e9:5b:53:1c:1b:f0:6f:c8:1b:47:7f:04:15:bf:09:94:5d:da: d5:f1:8e:30:e8:a4:ae:a1:46:f1:8f:ac:27:9f:fa:44:7d:26: 5c:98:f2:a5:3d:fe:f9:28:5b:f5:8b:17:1c:03:6c:b2:ba:7f: f0:6b:f6:fe:35:f3:ec:f2:82:91:c9:a9:7f:da:ff:e8:94:6f: 4b:46:60:00:f3:03:0e:d0:b6:2f:2c:65:d6:10:15:8e:5f:9b: 24:da:7e:06:5f:8b:70:5a:8f:44:c8:f0:22:36:38:a9:62:a2: 00:f1:a9:46:2b:d8:5c:85:62:8d:9f:31:60:5c:4a:01:08:0e: 2a:dc:30:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUxMDE4MTYwMjA2WhcNMjUxMDI1MTYwMjA2WjAYMRYwFAYD VQQDEw02OGYzYjlmZS0xM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPVALc6UgAv3jv8xeY5xxU9DTe5bvn+OAMX0Xxw1rN+u/3XRr5tkdfhysdle n5s4XaYJQ2dFOqrkZxralG7edk+WlL2Yj0sL3nSVX9jioGFKdPbqX48sTPicAvuH JKpA7HXbomdRd26gejsW04eKIxYBgqJ60fb8wuxBJ0C3mQhSDUi2oLrPI1PVeEa2 mkVq2AOuB2dhBuNGGryHPiUhEyyP4tQFHTuwLxZI2Vt2wKeGL1iDbiFBhFqhemBJ 8Iws+R5vYadhi5bPYoEglW4UEEXicIqbkyv00KUa6RsipT0R/37HxF8ilobWSRV5 poFC2jxsINIm/G/1uMQsiFswEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxu0ee3 wVKLl1lP+39NLwfio2fMMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX8DR4OJ7rIElEs+6GSO+KnFZYoYNvu37+tFYvgAkzkdled6zOWxoP N8rXctrCS4t95E8E7EiXTTVbVDQL83+rgC14V2FZCvr8B0w7pgrIJRmm3IaU20Cc Ww9uTz8NnE9R7wXj5v4Wb3dXTSkOleMPF5XGrCUM5by65OpTHsDpW1McG/BvyBtH fwQVvwmUXdrV8Y4w6KSuoUbxj6wnn/pEfSZcmPKlPf75KFv1ixccA2yyun/wa/b+ NfPs8oKRyal/2v/olG9LRmAA8wMO0LYvLGXWEBWOX5sk2n4GX4twWo9EyPAiNjip YqIA8alGK9hchWKNnzFgXEoBCA4q3DBX -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:30 2025 by rpki-client