$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: 5xaU8yZVBrr9F5C1l/AKQ9dV51B0dmfuA9TXZ8vsVyc= Subject key identifier: F0:34:F6:C1:10:42:FD:50:4F:48:F2:21:2B:5D:30:83:8B:28:00:0B Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0A0C Signing time: Sat 18 Oct 2025 20:52:29 +0000 Manifest this update: Sat 18 Oct 2025 20:52:29 +0000 Manifest next update: Sat 25 Oct 2025 20:52:29 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: hGTxFgjmiJQaZCVGrBdajPk3x77PNeFk4K/idmpKYPg=) 2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Oct 18 20:52:29 2025 GMT Not After : Oct 25 20:52:29 2025 GMT Subject: CN=68f3fe0d-a525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:3d:f3:20:a1:3c:71:9f:9f:47:2b:ec:4f: 85:41:ba:04:d7:8d:c1:e8:a3:cc:77:c7:a8:5b:1a: c7:ce:79:d4:90:da:98:cb:15:b9:32:83:4a:4a:1b: d4:97:d6:0d:95:4e:9a:5c:24:40:c4:91:3f:37:34: c0:59:34:8b:f7:5f:e3:68:20:09:18:b7:61:e8:3b: 5f:38:1c:b8:7e:0f:35:cb:56:f4:e2:53:f8:88:cc: 9d:72:0c:2d:a2:a1:5f:e3:54:d6:b9:94:b1:43:51: 3b:07:a7:89:fd:30:72:e9:93:03:c8:62:79:f5:7a: 53:9d:ca:15:ce:0e:ba:10:5e:77:34:39:90:ec:b1: 7a:6a:f2:7a:a1:69:f0:0e:13:61:f0:b4:c4:82:6d: 7d:6e:e0:40:99:2b:0f:ef:75:4d:19:4e:7b:43:ea: e2:79:36:c4:51:a0:f6:51:02:81:4c:62:21:d1:74: a7:ea:ca:c5:7a:7b:69:5c:54:a1:2b:45:91:ae:ad: 43:49:08:1b:b6:5e:25:be:ed:a1:18:15:d6:3d:9c: 6a:af:1b:c4:16:aa:1d:99:be:7c:e7:4b:04:b1:b2: 98:c6:1b:3f:48:63:9d:bf:9f:c2:6a:b9:b8:12:0f: ad:ad:2b:6c:57:a9:c7:21:4c:6e:84:29:4f:47:e5: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:F6:C1:10:42:FD:50:4F:48:F2:21:2B:5D:30:83:8B:28:00:0B X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f4:b7:ee:50:0d:e4:02:4b:71:aa:5a:16:5e:dc:e0:39:c1: ff:7a:0b:ac:04:74:43:19:30:21:5a:4c:03:4d:44:ac:9c:36: 48:dd:99:1e:02:8b:b7:57:3b:52:21:5e:db:47:ca:e1:d1:39: d7:99:b4:d4:a3:88:b5:96:7b:f8:8a:30:63:7f:25:5b:b7:18: a0:d4:b9:5e:ee:b9:ac:07:bd:2c:e1:f7:11:4a:be:f6:a4:d6: 65:3a:06:59:c0:81:92:53:d4:e6:40:6b:21:14:af:c9:d9:fc: cc:19:25:0f:c6:54:f5:54:ca:f6:55:1f:f3:19:d8:05:78:fa: b8:49:53:27:8d:82:cf:b3:13:bf:ce:c0:a0:1e:5b:d7:7b:0e: 6d:43:a0:22:00:4c:86:c7:21:fd:9c:1e:f9:e0:14:f3:5b:ed: 4f:7c:de:59:9a:5a:ff:20:2b:0c:38:d3:0d:3c:57:47:5b:48: 9d:c2:83:be:35:7c:e8:75:4d:49:57:58:25:ff:30:0e:c8:97: 1a:58:7c:16:46:4f:75:a2:6c:36:a0:91:44:80:07:fb:45:06: 7d:4d:25:cb:8a:3a:2e:22:ae:ab:5e:1b:ce:e8:30:32:b1:b4: 34:61:3a:16:c7:28:d4:74:8b:c8:94:c5:74:0f:ca:0c:d7:de: ae:2b:00:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjUxMDE4MjA1MjI5WhcNMjUxMDI1MjA1MjI5WjAYMRYwFAYD VQQDEw02OGYzZmUwZC1hNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyY98yChPHGfn0cr7E+FQboE143B6KPMd8eoWxrHznnUkNqYyxW5MoNKShvU l9YNlU6aXCRAxJE/NzTAWTSL91/jaCAJGLdh6DtfOBy4fg81y1b04lP4iMydcgwt oqFf41TWuZSxQ1E7B6eJ/TBy6ZMDyGJ59XpTncoVzg66EF53NDmQ7LF6avJ6oWnw DhNh8LTEgm19buBAmSsP73VNGU57Q+rieTbEUaD2UQKBTGIh0XSn6srFentpXFSh K0WRrq1DSQgbtl4lvu2hGBXWPZxqrxvEFqodmb5850sEsbKYxhs/SGOdv5/Carm4 Eg+trStsV6nHIUxuhClPR+XypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA09sEQ Qv1QT0jyIStdMIOLKAALMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO9LfuUA3kAktxqloWXtzgOcH/egusBHRDGTAhWkwDTUSsnDZI3Zke Aou3VztSIV7bR8rh0TnXmbTUo4i1lnv4ijBjfyVbtxig1Lle7rmsB70s4fcRSr72 pNZlOgZZwIGSU9TmQGshFK/J2fzMGSUPxlT1VMr2VR/zGdgFePq4SVMnjYLPsxO/ zsCgHlvXew5tQ6AiAEyGxyH9nB754BTzW+1PfN5Zmlr/ICsMONMNPFdHW0idwoO+ NXzodU1JV1gl/zAOyJcaWHwWRk91omw2oJFEgAf7RQZ9TSXLijouIq6rXhvO6DAy sbQ0YToWxyjUdIvIlMV0D8oM196uKwAY -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:00 2025 by rpki-client