$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: YGzWkNiMAUmB0P8NgAwHULPKZKGXeAvDxRV3Br18jGY= Subject key identifier: 2F:9F:A8:2F:CB:DD:F9:0C:BE:17:1E:54:34:94:5E:49:BB:33:A8:8D Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 08 Signing time: Sun 19 Oct 2025 11:38:49 +0000 Manifest this update: Sun 19 Oct 2025 11:38:48 +0000 Manifest next update: Sun 26 Oct 2025 11:38:48 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: kBsyo9ItP5ol6+Bm0lYDuxdiIXpZu/LnRzkpjeeLeq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Oct 19 11:38:48 2025 GMT Not After : Oct 26 11:38:48 2025 GMT Subject: CN=68f4cdc9-fd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:5a:25:03:a3:36:7e:8d:6b:98:93:fd:77: 4c:d5:6c:e5:ed:76:53:ed:1c:17:27:cb:f6:7d:29: 5a:4c:73:07:a0:fc:01:b0:d8:d3:22:92:a8:e0:92: 96:e5:50:a9:76:c5:bd:37:e0:77:ee:6f:97:ad:59: c4:9c:3e:3b:cc:ea:f9:68:db:7a:68:6b:b6:11:b0: b3:f9:f8:b4:6f:8c:1d:d5:63:87:d1:6e:73:2f:e9: c1:94:da:a9:a7:77:b6:c5:49:f4:3d:62:26:e2:93: 91:24:bb:80:c3:db:34:5d:e5:1b:e0:9f:a6:6a:8c: f1:0e:a2:73:03:92:53:30:43:f5:13:3b:26:36:e3: 7e:a4:df:f5:31:b3:94:67:c4:ea:9f:44:ea:2e:73: 82:e2:33:82:8c:bb:9d:b7:27:8d:70:a5:9b:f3:0f: c7:86:12:67:4a:fb:f0:fc:47:cf:a1:0b:d5:9d:bf: 73:84:0a:40:cf:22:fd:47:eb:c3:7b:a5:c5:bb:20: 52:cb:3c:50:b0:d6:ff:b3:0b:6f:11:12:19:01:e7: fe:49:a9:a1:72:2c:5a:c7:b5:f4:bd:a5:49:ce:ea: 2f:23:89:c2:0e:4f:3a:74:0d:07:99:83:4a:44:99: 19:19:dd:de:69:6b:bd:b0:e5:97:bf:cb:62:5a:bd: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:A8:2F:CB:DD:F9:0C:BE:17:1E:54:34:94:5E:49:BB:33:A8:8D X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f2:d0:8c:26:5c:09:37:06:a4:9d:1e:45:75:04:67:17:d7: 65:99:53:3f:f0:65:68:dc:2e:02:44:bd:e9:31:ce:fb:6d:c6: 47:28:6f:6d:85:ab:e0:a5:46:80:0c:5b:5c:7d:9b:10:d9:e2: 49:8c:95:53:e4:6b:95:b4:5a:cc:40:79:1f:b8:5b:22:88:cc: 30:9c:fd:fc:6d:60:63:4e:74:bb:6d:9c:1b:20:f4:00:fe:65: a6:46:51:3e:2a:fb:69:1e:ef:71:5b:67:ea:aa:9f:4b:d2:f1: 64:31:11:52:1d:dc:b8:17:68:38:d1:ec:21:dd:f5:21:8e:c9: 1f:1b:8b:f1:59:14:66:60:de:d2:6a:a7:5d:7a:75:59:ea:8d: 9d:56:14:35:7e:0f:7b:90:11:e8:0c:e7:0b:a7:c2:0a:a0:a2: c3:73:f7:56:f1:b7:ca:d4:29:fb:d7:d8:7c:4a:5e:44:c7:a7: 6b:3a:3d:00:48:53:02:ed:fb:b1:d5:ba:54:ea:fc:e7:07:0c: 0c:30:d3:45:9f:3b:07:68:8d:b5:2f:a1:12:ff:e2:ce:98:4a: 60:08:b5:6f:8c:df:c4:4f:e1:11:bd:33:eb:2f:f8:7c:35:99: c4:fd:2f:a1:ab:1c:39:97:94:65:b3:dd:77:45:19:43:e4:ab: 38:5f:b6:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNTEwMTkxMTM4NDhaFw0yNTEwMjYxMTM4NDhaMBgxFjAUBgNV BAMTDTY4ZjRjZGM5LWZkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJYVolA6M2fo1rmJP9d0zVbOXtdlPtHBcny/Z9KVpMcweg/AGw2NMikqjgkpbl UKl2xb034Hfub5etWcScPjvM6vlo23poa7YRsLP5+LRvjB3VY4fRbnMv6cGU2qmn d7bFSfQ9Yibik5Eku4DD2zRd5Rvgn6ZqjPEOonMDklMwQ/UTOyY2436k3/Uxs5Rn xOqfROouc4LiM4KMu523J41wpZvzD8eGEmdK+/D8R8+hC9Wdv3OECkDPIv1H68N7 pcW7IFLLPFCw1v+zC28REhkB5/5JqaFyLFrHtfS9pUnO6i8jicIOTzp0DQeZg0pE mRkZ3d5pa72w5Ze/y2JaveS7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL5+oL8vd +Qy+Fx5UNJReSbszqI0wHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3y0IwmXAk3BqSdHkV1BGcX12WZUz/wZWjcLgJEvekxzvttxkcob22F q+ClRoAMW1x9mxDZ4kmMlVPka5W0WsxAeR+4WyKIzDCc/fxtYGNOdLttnBsg9AD+ ZaZGUT4q+2ke73FbZ+qqn0vS8WQxEVId3LgXaDjR7CHd9SGOyR8bi/FZFGZg3tJq p116dVnqjZ1WFDV+D3uQEegM5wunwgqgosNz91bxt8rUKfvX2HxKXkTHp2s6PQBI UwLt+7HVulTq/OcHDAww00WfOwdojbUvoRL/4s6YSmAItW+M38RP4RG9M+sv+Hw1 mcT9L6GrHDmXlGWz3XdFGUPkqzhftmk= -----END CERTIFICATE-----Generated at Sun Oct 19 22:56:58 2025 by rpki-client