$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft File: OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft (raw, json) Hash identifier: t3oAX7tkO1+m7pbn87iAKsp1YL2UPV7WcWfYtYzns6M= Subject key identifier: 26:7B:BA:EF:43:93:75:9E:01:39:24:FF:B4:68:D5:15:27:36:BE:4D Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 Certificate issuer: /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft Manifest number: 0203 Signing time: Sun 19 Oct 2025 04:42:09 +0000 Manifest this update: Sun 19 Oct 2025 04:42:09 +0000 Manifest next update: Sun 26 Oct 2025 04:42:09 +0000 Files and hashes: 1: OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl (hash: 1QbWcHWucr1ix6ZiyUExiLb8rjGBf2iwLpIJXlXcd1M=) 2: DD8D4802932211EDBF466F52C4F9AE02.roa (hash: pmbN5fPCbO/oalKNS7ivInU9ETfH9WfdJG7H7rtfmr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408 Validity Not Before: Oct 19 04:42:09 2025 GMT Not After : Oct 26 04:42:09 2025 GMT Subject: CN=68f46c21-ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:78:9c:2c:7c:df:87:e2:c9:e1:6d:f8:aa: 91:a3:1d:72:05:58:24:48:12:13:27:99:eb:1f:a1: de:4b:06:28:88:80:fe:4d:25:0f:a9:5e:9c:6f:48: 48:37:6c:e3:08:df:47:ec:d7:6f:8e:f4:32:04:c7: 34:84:40:b1:1d:1d:73:0f:56:69:80:4a:d1:ee:8d: 77:38:1d:d5:4a:e0:6f:5a:6c:d4:94:9e:e7:f6:1e: 39:28:52:2e:92:01:21:d9:17:e9:81:95:51:70:c5: 2b:8f:54:2e:22:29:a3:12:de:8c:01:17:30:68:45: 98:b7:3f:1e:75:b3:ac:ba:52:fa:df:66:da:a5:4c: 4c:ae:27:62:32:e5:c1:92:25:10:83:cb:1d:71:60: 3c:90:a7:31:db:48:02:72:97:b4:be:e7:dd:54:af: 76:3b:e8:68:ab:be:57:85:26:ba:cb:6e:8c:12:88: 34:84:56:17:6f:9e:76:fe:c0:04:54:35:2f:36:87: 03:a6:7c:03:59:69:c9:38:66:67:ed:57:27:2d:5e: 26:cc:64:bc:69:ee:69:0c:6f:a9:54:ca:f0:c5:2d: 3d:ca:28:98:31:a6:a5:8c:e7:ab:d7:4b:44:2c:35: 56:94:26:9f:3c:57:e7:1c:62:cc:0b:92:25:b1:d9: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7B:BA:EF:43:93:75:9E:01:39:24:FF:B4:68:D5:15:27:36:BE:4D X509v3 Authority Key Identifier: keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5a:a1:dd:ca:52:21:34:c2:e3:8b:69:a6:91:17:c5:f1:24: 1b:78:39:2b:61:33:34:f7:f7:01:95:fc:14:be:ec:9f:b1:86: 2d:86:fe:da:cb:f0:b6:ac:f5:9e:25:c6:49:6b:07:ee:56:60: b3:9a:78:f4:b8:65:8f:b3:88:80:2c:fb:a6:8e:cf:18:68:09: d3:ad:c6:fe:1c:b1:1b:09:66:b2:35:b5:17:92:fa:4c:94:f1: cf:76:3f:fe:e1:58:d6:f8:3c:a8:ba:a9:06:3e:81:d2:e5:aa: 81:bd:07:7e:bf:35:ba:44:8a:be:84:25:51:f3:0e:47:e6:89: 30:a4:a4:c4:2d:bb:57:9b:29:4a:e5:82:69:d3:8e:9f:c7:9e: bb:d6:c6:12:bf:63:b4:32:aa:15:43:df:af:91:0e:a6:2a:f1: ba:36:41:c9:66:4a:a1:08:02:df:65:9a:d0:f3:f3:26:ef:88: 5e:aa:9e:ac:42:77:a7:de:a5:b1:97:61:37:b7:d0:ff:96:43: 47:06:c0:45:bc:2c:63:4b:d8:1a:ce:dd:98:fa:45:5d:36:a2: b2:be:55:6e:94:55:54:4a:59:c8:77:4e:62:88:a2:e0:cb:d0: 95:eb:8e:2f:55:08:6c:7c:fa:78:cc:b5:71:b4:30:27:e8:75: aa:d4:77:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3 QkE2OTU0MDgwHhcNMjUxMDE5MDQ0MjA5WhcNMjUxMDI2MDQ0MjA5WjAYMRYwFAYD VQQDEw02OGY0NmMyMS1lYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9l4nCx834fiyeFt+KqRox1yBVgkSBITJ5nrH6HeSwYoiID+TSUPqV6cb0hI N2zjCN9H7NdvjvQyBMc0hECxHR1zD1ZpgErR7o13OB3VSuBvWmzUlJ7n9h45KFIu kgEh2RfpgZVRcMUrj1QuIimjEt6MARcwaEWYtz8edbOsulL632bapUxMridiMuXB kiUQg8sdcWA8kKcx20gCcpe0vufdVK92O+hoq75XhSa6y26MEog0hFYXb552/sAE VDUvNocDpnwDWWnJOGZn7VcnLV4mzGS8ae5pDG+pVMrwxS09yiiYMaaljOer10tE LDVWlCafPFfnHGLMC5Ilsdn2kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ7uu9D k3WeATkk/7Ro1RUnNr5NMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkQwOS9GMEYyRURCMjkzMUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1y TWY2R1J2SkVwOEI3cHBWQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJWqHdylIhNMLji2mmkRfF8SQbeDkrYTM09/cBlfwUvuyfsYYthv7a y/C2rPWeJcZJawfuVmCzmnj0uGWPs4iALPumjs8YaAnTrcb+HLEbCWayNbUXkvpM lPHPdj/+4VjW+DyouqkGPoHS5aqBvQd+vzW6RIq+hCVR8w5H5okwpKTELbtXmylK 5YJp046fx5671sYSv2O0MqoVQ9+vkQ6mKvG6NkHJZkqhCALfZZrQ8/Mm74heqp6s Qnen3qWxl2E3t9D/lkNHBsBFvCxjS9gazt2Y+kVdNqKyvlVulFVUSlnId05iiKLg y9CV644vVQhsfPp4zLVxtDAn6HWq1HcP -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:24 2025 by rpki-client