$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json) Hash identifier: ECuRfm8X1AerZw/WPYdRMCenicUTo7McV5jyW8mRnx8= Subject key identifier: AE:4C:CA:D1:7C:92:DB:CD:CB:4B:63:97:1F:A7:0F:A8:58:33:AB:B6 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 05:57:40 +0000 Manifest this update: Sun 19 Oct 2025 05:57:40 +0000 Manifest next update: Sun 26 Oct 2025 05:57:40 +0000 Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: QEzSsC6nAg0R9e39sVQBpacq+Tje3+5Wh35AYmPsp4Q=) 2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: F8BQEsLxz2XO34zN3GNH3AuMPZU87rOGItPVHiqWabQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Oct 19 05:57:40 2025 GMT Not After : Oct 26 05:57:40 2025 GMT Subject: CN=68f47dd4-9ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:e2:2d:51:dc:73:47:c0:81:5b:0d:97:1a: a8:fb:db:21:89:b5:80:d1:49:e6:f8:e3:ae:d0:bc: 02:de:b8:0b:25:45:de:e8:6d:43:62:a3:85:d6:2b: 13:ab:db:33:81:8f:ac:e7:77:93:6f:ca:08:be:2e: 02:52:d9:23:21:7e:6e:38:d5:0b:81:36:2f:58:99: de:ec:c5:f6:f6:92:c4:49:d7:88:f4:54:87:63:b0: 34:bd:60:e6:b9:8b:d5:0e:75:b9:a1:59:65:e5:04: 8a:23:9a:ce:7f:93:ab:34:64:0d:83:1e:31:fc:2d: e4:ec:92:79:00:31:0f:07:32:54:4c:ae:e3:45:a7: aa:af:fb:1c:74:79:18:fc:7e:95:77:b5:09:9b:7b: 6e:e5:b1:48:04:0f:b4:60:85:25:28:6c:65:87:a2: 5c:fc:ec:c3:a5:3c:aa:43:57:db:96:de:7d:43:fb: c8:7f:d0:3b:d0:0f:31:66:45:ac:4d:41:16:50:db: fb:7b:2b:e4:b3:2a:d4:ea:c1:c7:1a:f8:3a:64:1f: e9:0e:96:78:92:cb:8a:c4:ae:c7:8b:e1:ec:23:56: ab:e2:3b:0b:68:0f:14:99:52:32:7f:e8:0c:31:f8: c6:c1:43:1e:5e:f3:10:3f:3f:ab:b1:68:2d:ca:44: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:CA:D1:7C:92:DB:CD:CB:4B:63:97:1F:A7:0F:A8:58:33:AB:B6 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:4c:9e:09:61:ad:d9:8e:e3:84:77:1f:aa:25:b7:61:c9: 21:93:66:3b:eb:14:ce:ff:74:aa:d5:2a:ce:8f:2d:b4:6b:b3: f8:85:96:61:2c:6a:f2:11:f3:78:8a:85:36:6c:74:8a:1c:f6: 0f:fd:ff:6d:8f:38:e0:37:65:71:93:26:1d:2a:b0:6d:47:5c: 9e:39:33:f7:31:5b:48:de:18:09:f5:65:82:ac:5d:d5:48:de: 90:72:55:8c:e3:f9:76:d6:c5:38:09:18:2a:24:8b:52:1a:e6: db:6a:ee:a3:b3:da:6b:34:25:62:f0:cf:88:7d:e8:38:f9:dc: 51:bd:2d:00:d1:32:51:a3:a7:c4:33:ef:91:19:5b:ec:f2:bd: b8:f9:21:ef:f4:26:d2:3d:4a:8c:f7:cc:8b:da:d2:8d:d5:b6: 84:f3:50:a2:f4:8f:6e:5f:84:7e:6e:ed:14:a6:2e:cb:03:fc: ba:ce:e8:9e:02:75:b6:ba:ff:da:57:9c:87:64:b6:89:f7:c5: d2:e2:6b:13:a1:62:01:04:68:84:ee:48:9a:04:72:92:31:3a: 5a:20:f2:a3:cc:8a:f2:b8:52:d3:86:21:71:59:5e:d6:2b:97: a6:f5:72:d3:07:7b:98:7e:41:b1:82:01:51:60:5e:f6:fa:67: 81:1d:5e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUxMDE5MDU1NzQwWhcNMjUxMDI2MDU1NzQwWjAYMRYwFAYD VQQDEw02OGY0N2RkNC05YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiXiLVHcc0fAgVsNlxqo+9shibWA0Unm+OOu0LwC3rgLJUXe6G1DYqOF1isT q9szgY+s53eTb8oIvi4CUtkjIX5uONULgTYvWJne7MX29pLESdeI9FSHY7A0vWDm uYvVDnW5oVll5QSKI5rOf5OrNGQNgx4x/C3k7JJ5ADEPBzJUTK7jRaeqr/scdHkY /H6Vd7UJm3tu5bFIBA+0YIUlKGxlh6Jc/OzDpTyqQ1fblt59Q/vIf9A70A8xZkWs TUEWUNv7eyvksyrU6sHHGvg6ZB/pDpZ4ksuKxK7Hi+HsI1ar4jsLaA8UmVIyf+gM MfjGwUMeXvMQPz+rsWgtykQqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5MytF8 ktvNy0tjlx+nD6hYM6u2MB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9Ickhp ZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa+0yeCWGt2Y7jhHcfqiW3Yckhk2Y76xTO/3Sq1SrOjy20a7P4hZZh LGryEfN4ioU2bHSKHPYP/f9tjzjgN2VxkyYdKrBtR1yeOTP3MVtI3hgJ9WWCrF3V SN6QclWM4/l21sU4CRgqJItSGubbau6js9prNCVi8M+Ifeg4+dxRvS0A0TJRo6fE M++RGVvs8r24+SHv9CbSPUqM98yL2tKN1baE81Ci9I9uX4R+bu0Upi7LA/y6zuie AnW2uv/aV5yHZLaJ98XS4msToWIBBGiE7kiaBHKSMTpaIPKjzIryuFLThiFxWV7W K5em9XLTB3uYfkGxggFRYF72+meBHV43 -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:23 2025 by rpki-client