$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: noghJzxjOF4LKNSBOJjR9QBA17pih0otqq9VUfAFegc= Subject key identifier: 29:58:9E:62:BF:E5:C2:74:60:AF:0F:AC:8A:BB:79:93:76:FD:84:DD Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 2432 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 6090 Signing time: Mon 20 Oct 2025 14:15:21 +0000 Manifest this update: Mon 20 Oct 2025 14:15:21 +0000 Manifest next update: Mon 27 Oct 2025 14:15:21 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: JYE8Rl21R7celrk6mRIoXbdR5HQRIRizIZTFftA5His=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9266 (0x2432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Oct 20 14:15:21 2025 GMT Not After : Oct 27 14:15:21 2025 GMT Subject: CN=68f643f9-99dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:da:99:20:9a:f4:b1:12:03:8b:8e:57:f2: 39:0c:79:c4:41:87:d6:92:e9:85:3e:49:60:dc:fc: 2c:c8:86:95:00:46:35:a1:ed:38:17:c7:26:9e:89: 9d:37:3a:ac:ed:44:da:28:bd:1d:5e:ed:bb:40:75: 42:ef:03:f3:e5:f3:23:2b:3e:0e:3f:b5:6d:9d:ea: 3b:fe:ae:16:b1:be:47:f3:5f:8d:3f:59:56:fa:89: fe:d1:93:8e:6f:54:3d:27:2d:fe:71:97:38:b4:1d: 2b:a8:0a:fd:b1:fc:65:42:00:0f:a2:9c:29:fc:81: 40:8d:f1:17:78:0f:1c:3b:eb:ba:fe:81:c7:68:ee: 3f:06:9c:2b:d3:02:ca:4a:e9:68:c4:c6:3e:b7:71: 71:26:d0:ff:12:d1:f6:86:ba:1c:1f:d9:06:ad:6b: f3:39:6b:fa:7a:94:55:9b:f3:64:c0:01:6f:37:00: 12:6e:0d:86:8b:6f:5b:0e:7e:7a:82:9c:04:19:ec: 6f:8a:d6:55:ae:1e:7b:21:86:2d:40:4e:55:90:f7: c5:ee:9e:4b:47:dc:a6:42:01:fe:87:be:5a:37:55: 1d:99:83:4d:6e:82:2b:df:f5:d6:ac:95:c2:bb:d6: 26:3d:1f:59:e2:46:55:f9:bc:90:e1:3b:78:36:c6: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:9E:62:BF:E5:C2:74:60:AF:0F:AC:8A:BB:79:93:76:FD:84:DD X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6b:f5:af:a2:15:82:52:b5:7b:a7:b5:1b:71:d4:22:c0:86: 41:f4:c1:49:45:0d:fd:d1:72:ee:1b:82:c4:58:ab:07:89:c9: fe:bd:a6:76:1c:43:ce:d3:81:d0:73:70:f3:3b:98:58:a0:7a: 32:85:c6:6f:95:bd:26:19:92:d2:d0:6f:bf:64:55:40:aa:b6: ae:14:87:42:05:81:99:91:b7:44:60:98:fc:d4:4e:cc:71:7b: 25:4a:45:02:ad:af:b7:73:e2:6b:33:18:0c:64:14:ed:56:32: 6a:1f:fa:f0:68:09:2b:bb:05:ca:f3:2f:a2:89:66:41:35:e3: eb:45:04:c1:4f:05:c3:48:c7:22:ac:e6:46:d6:a4:b8:0e:d6: 28:bd:e8:e6:30:20:d4:8a:9c:20:fd:82:20:14:75:74:ea:17: c3:51:e1:02:28:b1:2b:a2:21:2e:0d:6d:61:1b:be:6b:13:30: 14:09:cb:44:53:33:ab:90:c5:c2:b0:1c:04:24:b3:36:35:38: 46:ec:2c:c4:23:dd:9d:79:ba:76:76:71:cd:00:c0:c9:db:1c: 8d:fc:97:37:6d:10:d8:bb:28:5b:31:18:6f:bf:b3:ce:68:95: 27:af:63:94:c6:db:1e:38:2f:5b:28:f4:43:05:ce:60:5c:f4: e4:26:bc:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUxMDIwMTQxNTIxWhcNMjUxMDI3MTQxNTIxWjAYMRYwFAYD VQQDEw02OGY2NDNmOS05OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte3amSCa9LESA4uOV/I5DHnEQYfWkumFPklg3PwsyIaVAEY1oe04F8cmnomd Nzqs7UTaKL0dXu27QHVC7wPz5fMjKz4OP7Vtneo7/q4Wsb5H81+NP1lW+on+0ZOO b1Q9Jy3+cZc4tB0rqAr9sfxlQgAPopwp/IFAjfEXeA8cO+u6/oHHaO4/Bpwr0wLK SuloxMY+t3FxJtD/EtH2hrocH9kGrWvzOWv6epRVm/NkwAFvNwASbg2Gi29bDn56 gpwEGexvitZVrh57IYYtQE5VkPfF7p5LR9ymQgH+h75aN1UdmYNNboIr3/XWrJXC u9YmPR9Z4kZV+byQ4Tt4NsbvyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClYnmK/ 5cJ0YK8PrIq7eZN2/YTdMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBla/WvohWCUrV7p7UbcdQiwIZB9MFJRQ390XLuG4LEWKsHicn+vaZ2 HEPO04HQc3DzO5hYoHoyhcZvlb0mGZLS0G+/ZFVAqrauFIdCBYGZkbdEYJj81E7M cXslSkUCra+3c+JrMxgMZBTtVjJqH/rwaAkruwXK8y+iiWZBNePrRQTBTwXDSMci rOZG1qS4DtYovejmMCDUipwg/YIgFHV06hfDUeECKLEroiEuDW1hG75rEzAUCctE UzOrkMXCsBwEJLM2NThG7CzEI92debp2dnHNAMDJ2xyN/Jc3bRDYuyhbMRhvv7PO aJUnr2OUxtseOC9bKPRDBc5gXPTkJrwb -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:51 2025 by rpki-client