$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json) Hash identifier: BKQL1GfMvgjozBYVsPYrTra/3T0mP/xTeMdbesItNDU= Subject key identifier: 17:29:F6:EA:2F:4C:8C:D5:82:B9:50:8A:CD:DB:77:C8:F5:E6:18:63 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft Manifest number: 017A Signing time: Sun 19 Oct 2025 06:23:44 +0000 Manifest this update: Sun 19 Oct 2025 06:23:43 +0000 Manifest next update: Sun 26 Oct 2025 06:23:43 +0000 Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: wLwvQueDhcZWJiuR4FWXKiaxvgTEE5NttDCF/0oKAEs=) 2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: JM8VjK+PFp9u8zNEBK2jqgS7ve8Z/0VuM590GlypGFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Oct 19 06:23:43 2025 GMT Not After : Oct 26 06:23:43 2025 GMT Subject: CN=68f483ef-c41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ee:1a:c6:00:92:ba:44:1e:2d:7e:85:15:da: c5:0a:ae:ae:31:07:6d:d4:3a:8a:e1:2b:49:c4:37: dd:6e:4b:75:6a:a4:81:db:fe:8b:50:00:c8:25:21: 1a:d2:41:76:ad:21:5c:c5:71:97:1b:95:f8:8b:fc: 9c:83:f4:0a:73:cf:f1:59:b4:61:e7:5f:7c:8b:9e: 63:4c:0b:24:2e:ec:d9:02:c1:65:5d:e8:71:17:4f: eb:ea:15:78:26:f8:b8:66:d3:f2:b1:83:9e:48:00: fa:52:95:d3:1b:0e:12:6e:c0:85:b2:1a:bf:7b:82: f9:25:92:d3:ff:88:05:29:96:73:4e:96:fd:69:59: c5:46:3e:41:2a:83:fb:22:70:7b:85:6d:5f:98:1e: bd:2f:f9:1b:52:62:5b:75:d6:1b:f6:b3:ca:20:97: 68:88:4d:7f:9a:f8:b4:b8:35:9b:1f:96:d8:91:c8: 02:d7:3c:4c:98:32:57:bf:75:15:b8:57:cf:32:13: c2:c8:fe:2e:58:4a:b7:21:22:51:aa:79:29:7e:d9: 28:9d:dc:ff:b6:49:5c:db:41:a3:1c:53:37:8b:95: b4:98:5a:bd:21:00:4c:de:2b:8c:46:3a:5c:a1:eb: 17:37:b6:06:9a:32:41:17:f4:b1:7e:fe:df:d0:e5: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:F6:EA:2F:4C:8C:D5:82:B9:50:8A:CD:DB:77:C8:F5:E6:18:63 X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6e:9b:2a:e2:d0:db:49:85:fc:02:dd:31:a0:f3:b8:1b:fe: c6:a5:d3:d8:67:b1:24:46:29:70:57:64:2d:ee:8c:8d:22:49: 37:c2:ff:ae:d3:48:d0:bc:0a:88:78:dc:8f:64:76:5f:9a:e4: a5:33:b9:54:47:fd:71:b8:d0:1c:54:48:92:3f:2a:a4:d9:ea: 6a:87:fc:4c:fa:3f:a0:d6:bb:59:f2:83:8c:6b:ce:5d:e1:f9: 5c:b6:7f:87:a9:c7:d8:cd:ba:d3:95:cb:91:05:e1:14:30:49: 79:e0:71:9e:f1:67:05:cc:e4:ab:7f:11:0a:01:7e:87:af:e4: 8c:99:78:d2:44:86:db:f5:d3:41:b5:50:c6:fa:33:f0:b2:52: 35:17:9d:df:1d:32:7d:fa:8b:41:ea:45:7b:c4:62:0e:e8:d4: 43:3e:48:4b:53:da:e8:79:a2:ae:42:94:71:32:65:c5:92:04: 82:c0:32:7f:43:b1:49:ea:59:6e:0c:8c:4d:d0:5a:e5:5b:f0: a5:c5:b6:68:ee:dc:ee:9c:38:47:15:9d:8b:1a:3c:ab:7f:4d: 2d:66:ab:4a:7a:d4:09:1a:8e:3d:6c:4e:a9:25:de:a6:55:a2: 7d:8c:6e:ff:4f:97:9d:fb:cf:0c:12:b2:86:e8:e1:62:5c:3b: 51:88:b8:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjUxMDE5MDYyMzQzWhcNMjUxMDI2MDYyMzQzWjAYMRYwFAYD VQQDEw02OGY0ODNlZi1jNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+4axgCSukQeLX6FFdrFCq6uMQdt1DqK4StJxDfdbkt1aqSB2/6LUADIJSEa 0kF2rSFcxXGXG5X4i/ycg/QKc8/xWbRh5198i55jTAskLuzZAsFlXehxF0/r6hV4 Jvi4ZtPysYOeSAD6UpXTGw4SbsCFshq/e4L5JZLT/4gFKZZzTpb9aVnFRj5BKoP7 InB7hW1fmB69L/kbUmJbddYb9rPKIJdoiE1/mvi0uDWbH5bYkcgC1zxMmDJXv3UV uFfPMhPCyP4uWEq3ISJRqnkpftkondz/tklc20GjHFM3i5W0mFq9IQBM3iuMRjpc oesXN7YGmjJBF/Sxfv7f0OVEhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcp9uov TIzVgrlQis3bd8j15hhjMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq WjZDMXc2eXJrY1RwOHhHTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfbpsq4tDbSYX8At0xoPO4G/7GpdPYZ7EkRilwV2Qt7oyNIkk3wv+u 00jQvAqIeNyPZHZfmuSlM7lUR/1xuNAcVEiSPyqk2epqh/xM+j+g1rtZ8oOMa85d 4flctn+HqcfYzbrTlcuRBeEUMEl54HGe8WcFzOSrfxEKAX6Hr+SMmXjSRIbb9dNB tVDG+jPwslI1F53fHTJ9+otB6kV7xGIO6NRDPkhLU9roeaKuQpRxMmXFkgSCwDJ/ Q7FJ6lluDIxN0FrlW/ClxbZo7tzunDhHFZ2LGjyrf00tZqtKetQJGo49bE6pJd6m VaJ9jG7/T5ed+88MErKG6OFiXDtRiLhR -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:27 2025 by rpki-client