$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: X/+6DKcUpeKPtz5ScvMc8D3j17CLbZX6oMa1r7y7iN0= Subject key identifier: 67:89:C2:44:68:6C:B0:C3:CE:86:30:D6:AC:5E:07:99:2C:D8:E7:4F Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: BB Signing time: Sun 19 Oct 2025 09:06:07 +0000 Manifest this update: Sun 19 Oct 2025 09:06:06 +0000 Manifest next update: Sun 26 Oct 2025 09:06:06 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: kTGGIXdaZRoaXc3aUqjpEG14XxDs5sx/dcGuPo2BQYY=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Oct 19 09:06:06 2025 GMT Not After : Oct 26 09:06:06 2025 GMT Subject: CN=68f4a9ff-c6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:ee:01:df:ea:48:44:c2:f2:48:40:f8:aa: e1:da:00:35:f3:60:40:70:ab:29:46:49:0f:33:d9: cf:2d:2c:d6:7c:97:d6:00:05:05:25:d3:d8:09:a0: 32:e9:74:dd:28:31:ad:3f:34:2b:b5:ad:b5:0e:82: 84:a4:70:e5:d9:f7:66:b6:e1:be:ee:a8:aa:a8:cc: 8a:ad:91:80:8c:96:40:09:b7:52:e1:76:b9:5a:e3: 99:d0:68:b1:31:8a:91:df:a0:6f:74:d1:91:b1:54: 85:86:e8:af:a5:6b:93:46:19:0f:d9:27:5f:86:5f: 7a:2b:68:c5:5a:b5:f8:27:8c:3b:ad:4c:5a:f7:5f: ea:cd:c0:82:39:2b:d6:2b:bd:7a:bc:5e:03:8a:1a: c5:17:e3:d5:c2:24:69:6a:8f:eb:0a:6b:ac:8b:66: 18:c4:b7:13:71:3e:01:db:b1:3e:86:10:5c:83:19: 25:fd:bb:45:aa:7e:b3:af:30:95:00:44:f0:5e:8c: d9:ce:05:82:c1:95:42:ba:0e:61:78:65:6c:53:b5: 15:67:3e:21:65:c9:9a:03:9b:9d:35:20:6a:a3:93: 16:4e:55:61:e6:17:4e:23:2d:bb:c4:68:05:6e:5a: b7:c6:d3:e4:ac:60:ff:73:16:97:e7:82:d6:b4:4d: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:C2:44:68:6C:B0:C3:CE:86:30:D6:AC:5E:07:99:2C:D8:E7:4F X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6a:47:fa:04:a5:6a:ec:af:28:7a:fc:3a:23:ef:11:d1:f8: fc:aa:d0:5a:bb:9b:5c:dc:03:29:71:8c:32:54:24:fb:e6:1f: 87:b8:fb:56:75:f6:a6:43:2b:13:93:a4:ad:e7:d1:24:e9:f5: 16:f1:af:ff:f7:f3:23:ca:ca:19:51:18:f1:22:85:cf:a7:48: e4:af:f4:44:7f:71:cf:44:ec:84:0e:45:a9:27:41:a3:39:24: 45:1a:b4:99:03:e7:95:25:0f:47:53:aa:a9:73:fe:e1:47:96: e1:99:56:fb:c5:8b:8d:13:92:af:c9:ee:7a:e0:1e:8d:77:85: 18:78:71:1e:90:ce:f6:1a:fc:4a:94:e0:9a:20:e3:50:31:a3: 6f:4d:33:72:99:6b:8f:ff:b7:55:48:8a:bd:74:0e:b8:ec:b6: 44:a7:95:4d:26:62:0e:b2:95:5a:c6:7f:73:b3:47:27:7c:77: 46:20:19:df:33:46:ca:f1:fe:c2:6c:5f:c9:7e:3f:07:48:96: d4:bc:3d:ac:7e:8b:b2:7a:c2:27:d8:1a:9a:78:c3:93:a5:8f: 44:89:88:5c:ae:e5:67:c5:28:5b:b1:8e:ce:2d:d0:b1:ce:55: 50:f7:e7:19:5d:46:2f:e2:ad:ff:ac:89:2e:10:26:15:00:01: d8:15:21:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUxMDE5MDkwNjA2WhcNMjUxMDI2MDkwNjA2WjAYMRYwFAYD VQQDEw02OGY0YTlmZi1jNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfDuAd/qSETC8khA+Krh2gA182BAcKspRkkPM9nPLSzWfJfWAAUFJdPYCaAy 6XTdKDGtPzQrta21DoKEpHDl2fdmtuG+7qiqqMyKrZGAjJZACbdS4Xa5WuOZ0Gix MYqR36BvdNGRsVSFhuivpWuTRhkP2Sdfhl96K2jFWrX4J4w7rUxa91/qzcCCOSvW K716vF4DihrFF+PVwiRpao/rCmusi2YYxLcTcT4B27E+hhBcgxkl/btFqn6zrzCV AETwXozZzgWCwZVCug5heGVsU7UVZz4hZcmaA5udNSBqo5MWTlVh5hdOIy27xGgF blq3xtPkrGD/cxaX54LWtE1I0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeJwkRo bLDDzoYw1qxeB5ks2OdPMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoakf6BKVq7K8oevw6I+8R0fj8qtBau5tc3AMpcYwyVCT75h+HuPtW dfamQysTk6St59Ek6fUW8a//9/MjysoZURjxIoXPp0jkr/REf3HPROyEDkWpJ0Gj OSRFGrSZA+eVJQ9HU6qpc/7hR5bhmVb7xYuNE5Kvye564B6Nd4UYeHEekM72GvxK lOCaIONQMaNvTTNymWuP/7dVSIq9dA647LZEp5VNJmIOspVaxn9zs0cnfHdGIBnf M0bK8f7CbF/Jfj8HSJbUvD2sfouyesIn2BqaeMOTpY9EiYhcruVnxShbsY7OLdCx zlVQ9+cZXUYv4q3/rIkuECYVAAHYFSEC -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:29 2025 by rpki-client