$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: PNRWRHy6SiMLYXc9+qfj2yCxiozJ2N0/wmhqtAhjilY= Subject key identifier: F3:45:44:AB:9B:6D:8C:A0:43:ED:E1:44:1E:B3:85:95:D7:3D:FB:6E Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 0677 Signing time: Sun 19 Oct 2025 00:03:36 +0000 Manifest this update: Sun 19 Oct 2025 00:03:35 +0000 Manifest next update: Sun 26 Oct 2025 00:03:35 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: ORtuJz8dYf2SASeVw9XhQcoy4e10O7FQVPaXCeiQfvs=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Oct 19 00:03:35 2025 GMT Not After : Oct 26 00:03:35 2025 GMT Subject: CN=68f42ad8-e9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:af:99:bc:9e:6b:c5:96:49:b3:7d:d4:e2: 77:83:9c:a6:2a:a7:00:ce:86:b6:28:86:79:3b:ea: c9:00:ae:34:5f:c1:01:f6:1b:e1:84:e1:dc:b8:8c: a7:9a:c4:de:21:e7:31:ba:d3:b0:52:96:c2:d1:cc: 6d:cc:bf:31:8c:6d:ae:33:3e:6e:37:0d:bb:64:49: c3:07:48:c7:84:b9:87:00:17:7a:4b:48:39:b1:31: 88:b3:8b:84:8f:cf:28:ba:e6:6e:d0:00:bd:69:24: 2e:55:e9:99:dd:f6:46:59:29:61:1f:4c:ba:cb:6c: 5e:64:ed:4b:50:76:c3:a5:cb:c9:a8:c8:66:62:3c: 7d:36:68:b2:32:8d:82:29:81:63:78:00:ce:2e:ba: c7:c6:89:14:e1:2d:66:7a:87:e0:12:e9:7e:a6:88: 40:84:71:45:f2:67:e8:ac:ba:1f:65:fd:f1:da:e7: 39:8f:56:08:73:13:b2:c8:2d:69:61:56:47:3c:ed: dc:c0:43:20:a0:39:3d:88:7c:25:b1:9e:70:74:47: 2d:7c:d2:7e:d0:34:4c:16:5c:c4:b9:6f:49:3a:73: a9:fe:23:a3:ee:97:4d:be:19:e5:7a:4e:c2:66:01: 72:4b:cc:b5:99:56:a3:ac:44:d7:19:0f:13:5f:84: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:44:AB:9B:6D:8C:A0:43:ED:E1:44:1E:B3:85:95:D7:3D:FB:6E X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:dd:81:c2:37:f2:f5:42:64:88:63:4b:32:7b:cc:28:13:ac: 62:3b:af:14:7f:dc:9e:96:f5:a4:10:8e:e9:de:19:ba:91:8d: cb:d9:20:b3:02:9d:24:3b:f4:67:02:1d:b8:d1:46:69:4d:3d: d7:e8:28:cc:e0:04:5f:f9:02:2c:e4:92:46:ba:ad:c4:b1:04: e5:f5:da:be:71:af:31:97:a5:a3:15:6e:c4:e9:37:88:61:11: ef:36:e6:f6:eb:ee:d4:c2:cb:3b:3a:35:d0:29:7d:63:68:d5: 4b:c4:b8:06:26:41:39:94:d8:a6:b8:22:b7:63:bf:35:36:81: d7:03:30:0d:40:84:60:68:b1:3b:b8:16:73:d4:19:c6:e3:9f: a1:e0:3c:0e:ea:77:cc:d9:f2:8d:fb:5d:c8:c8:62:a6:66:e0: e0:50:69:de:a5:21:5b:2c:bc:b0:1e:62:c0:06:25:96:93:6a: 93:f9:5f:fe:b1:11:9d:04:91:1f:53:9e:02:21:9a:a0:6b:a9: 67:7a:9e:67:06:cd:b5:dc:6a:6f:32:8d:f9:d1:16:cf:a4:ed: 03:4d:98:1c:a6:04:d0:85:96:b0:55:a8:5e:08:e9:74:7d:9c: 1a:c8:63:7c:b0:fb:d1:2e:fb:d5:08:6d:64:1e:bb:b0:e0:bf: ea:d9:47:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjUxMDE5MDAwMzM1WhcNMjUxMDI2MDAwMzM1WjAYMRYwFAYD VQQDEw02OGY0MmFkOC1lOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22ivmbyea8WWSbN91OJ3g5ymKqcAzoa2KIZ5O+rJAK40X8EB9hvhhOHcuIyn msTeIecxutOwUpbC0cxtzL8xjG2uMz5uNw27ZEnDB0jHhLmHABd6S0g5sTGIs4uE j88ouuZu0AC9aSQuVemZ3fZGWSlhH0y6y2xeZO1LUHbDpcvJqMhmYjx9NmiyMo2C KYFjeADOLrrHxokU4S1meofgEul+pohAhHFF8mforLofZf3x2uc5j1YIcxOyyC1p YVZHPO3cwEMgoDk9iHwlsZ5wdEctfNJ+0DRMFlzEuW9JOnOp/iOj7pdNvhnlek7C ZgFyS8y1mVajrETXGQ8TX4T8pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNFRKub bYygQ+3hRB6zhZXXPftuMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ3YHCN/L1QmSIY0sye8woE6xiO68Uf9yelvWkEI7p3hm6kY3L2SCz Ap0kO/RnAh240UZpTT3X6CjM4ARf+QIs5JJGuq3EsQTl9dq+ca8xl6WjFW7E6TeI YRHvNub26+7Uwss7OjXQKX1jaNVLxLgGJkE5lNimuCK3Y781NoHXAzANQIRgaLE7 uBZz1BnG45+h4DwO6nfM2fKN+13IyGKmZuDgUGnepSFbLLywHmLABiWWk2qT+V/+ sRGdBJEfU54CIZqga6lnep5nBs213GpvMo350RbPpO0DTZgcpgTQhZawVaheCOl0 fZwayGN8sPvRLvvVCG1kHruw4L/q2UfX -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:41 2025 by rpki-client