$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json) Hash identifier: 0D4YbgabgDCk8kb5zBC+4umDDaBtOUCs6d/J7Kx9iIw= Subject key identifier: A4:2D:84:26:60:ED:FC:4F:97:BD:12:22:A8:39:82:34:0E:59:D7:28 Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft Manifest number: 55 Signing time: Sun 19 Oct 2025 10:36:52 +0000 Manifest this update: Sun 19 Oct 2025 10:36:51 +0000 Manifest next update: Sun 26 Oct 2025 10:36:51 +0000 Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: BmH6+2KWIcqu9069tAQTXygPwpRF7DuA6GMPX0YpJEs=) 2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Validity Not Before: Oct 19 10:36:51 2025 GMT Not After : Oct 26 10:36:51 2025 GMT Subject: CN=68f4bf43-97a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:c5:d3:93:bc:9d:8c:30:72:ba:cd:4e:da: ee:83:26:28:af:fc:72:7c:1f:7d:92:7f:07:b2:98: 59:46:a5:79:4f:da:7a:b2:ea:bb:7a:4d:48:e2:cd: 89:1c:53:66:90:55:5c:89:5e:80:29:b0:19:f9:21: d4:af:29:a2:1b:a9:3f:09:fe:a2:ca:ca:70:02:aa: e9:e3:40:74:37:e0:9a:a5:d0:49:ba:d3:4a:9f:21: 1f:cb:72:35:8a:ac:df:74:14:6b:d7:ad:41:0d:43: 71:04:32:f9:8f:db:8b:cb:b3:a1:fb:ee:16:9d:64: 70:1b:71:04:c4:61:eb:04:b1:a7:68:ed:3c:76:ce: ef:40:9f:d8:47:53:e4:4c:39:c6:e5:2c:01:42:ac: 22:c8:65:32:22:33:e3:21:e8:cd:59:02:97:36:e7: a3:96:26:05:f0:54:89:bd:7b:a8:91:2f:7c:e6:c6: e7:89:c8:d3:b9:ca:4b:ec:ea:c8:26:fe:b3:56:61: 60:69:b2:29:e4:ea:28:3a:44:0e:5e:48:cf:4b:70: 4d:2a:b7:07:1a:37:18:84:06:a3:36:3f:a3:41:05: 02:3f:3c:53:44:6b:74:3b:7f:e1:c6:6e:5e:b5:05: 4e:f7:fc:3e:12:91:fa:3f:dd:df:17:76:85:d9:a6: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:84:26:60:ED:FC:4F:97:BD:12:22:A8:39:82:34:0E:59:D7:28 X509v3 Authority Key Identifier: keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0c:60:28:9d:fc:b7:7b:65:df:72:50:d7:ca:e8:4b:56:e5: 01:e9:61:b0:19:92:78:cc:90:d0:d9:4a:6d:34:0e:dd:67:f6: fc:8e:ae:b9:59:6c:5a:96:58:07:23:2b:0b:e7:4f:2b:ee:56: 12:f7:2a:34:49:2c:f8:e5:b3:d6:5c:1e:b0:58:bd:e6:fc:54: cc:54:20:64:23:e9:7f:6a:f9:1f:27:1d:f3:3e:e1:a0:df:74: e3:74:82:5c:37:c0:65:21:d8:49:51:3d:74:1c:f9:53:67:90: 5c:ce:70:f5:66:41:e7:a9:91:24:18:0b:aa:5c:4d:1c:0f:74: ef:15:4c:fa:44:47:a4:48:23:61:1d:d8:cb:a6:1d:05:a3:99: b2:f1:da:e8:85:f9:ce:dd:b1:f8:f7:6f:54:53:84:88:f6:1b: fb:0b:4f:fe:d7:f2:fc:b5:f4:25:11:0e:39:38:f9:b0:1a:67: 62:d8:1e:13:41:47:9c:73:7d:9c:b6:66:23:d6:4f:80:47:f6: 74:19:e1:75:59:66:85:34:6d:bb:50:c0:1d:a6:58:1d:bf:0f: f2:e2:1d:44:ba:f9:15:c0:38:85:a7:f4:16:d1:39:ac:ac:31: 38:33:6e:12:ec:2b:d5:9f:59:e4:4b:55:d0:84:2f:52:e2:fe: 0f:48:1d:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw Q0ExMEJGRjAeFw0yNTEwMTkxMDM2NTFaFw0yNTEwMjYxMDM2NTFaMBgxFjAUBgNV BAMTDTY4ZjRiZjQzLTk3YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiPcXTk7ydjDByus1O2u6DJiiv/HJ8H32SfweymFlGpXlP2nqy6rt6TUjizYkc U2aQVVyJXoApsBn5IdSvKaIbqT8J/qLKynACqunjQHQ34Jql0Em600qfIR/LcjWK rN90FGvXrUENQ3EEMvmP24vLs6H77hadZHAbcQTEYesEsado7Tx2zu9An9hHU+RM OcblLAFCrCLIZTIiM+Mh6M1ZApc256OWJgXwVIm9e6iRL3zmxueJyNO5ykvs6sgm /rNWYWBpsink6ig6RA5eSM9LcE0qtwcaNxiEBqM2P6NBBQI/PFNEa3Q7f+HGbl61 BU73/D4Skfo/3d8XdoXZpsYXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpC2EJmDt /E+XvRIiqDmCNA5Z1ygwHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwMYCid/Ld7Zd9yUNfK6EtW5QHpYbAZknjMkNDZSm00Dt1n9vyOrrlZ bFqWWAcjKwvnTyvuVhL3KjRJLPjls9ZcHrBYveb8VMxUIGQj6X9q+R8nHfM+4aDf dON0glw3wGUh2ElRPXQc+VNnkFzOcPVmQeepkSQYC6pcTRwPdO8VTPpER6RII2Ed 2MumHQWjmbLx2uiF+c7dsfj3b1RThIj2G/sLT/7X8vy19CURDjk4+bAaZ2LYHhNB R5xzfZy2ZiPWT4BH9nQZ4XVZZoU0bbtQwB2mWB2/D/LiHUS6+RXAOIWn9BbROays MTgzbhLsK9WfWeRLVdCEL1Li/g9IHUE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:42 2025 by rpki-client