$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: fOEGYz/OzGQKw/+/yLkffhFz4O3X0D+V4kmsjdKjPEU= Subject key identifier: E3:AD:3F:D2:93:5F:1E:53:09:FD:8A:F1:FF:00:AE:AE:56:4B:D0:2F Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0391 Signing time: Sun 19 Oct 2025 02:46:09 +0000 Manifest this update: Sun 19 Oct 2025 02:46:08 +0000 Manifest next update: Sun 26 Oct 2025 02:46:08 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: /X/ur8XmgW48MhJ16CdiVQ0k2O8TsWWZkDMo6TvfgfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Oct 19 02:46:08 2025 GMT Not After : Oct 26 02:46:08 2025 GMT Subject: CN=68f450f0-7f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:d8:4b:3a:0f:a7:2d:88:52:02:3a:77:cd: 59:69:6c:23:45:70:84:8f:ad:69:08:0f:7c:21:b2: 31:8d:bd:61:27:c0:ca:5f:62:9c:d3:87:f7:36:11: 1f:fb:6e:76:c4:ac:ae:ef:0a:b6:70:70:21:63:6f: 3c:d0:6f:56:3d:14:7d:5f:ee:60:c1:cc:5f:0b:7b: e9:d3:3e:fb:38:42:40:df:68:24:bb:dc:69:23:19: d0:e9:fe:8e:e8:f1:8e:f5:91:f5:0f:71:b0:ef:e0: d4:82:ea:9d:f5:70:c4:67:eb:be:ce:e0:08:57:49: fb:ed:55:62:bc:9e:56:1b:f6:9b:85:0a:66:15:42: a7:b8:8b:9e:04:b2:7d:44:7b:e0:0c:f8:cb:59:01: 6d:e4:ad:75:82:73:38:3e:7d:e0:65:ed:e1:33:ea: 88:9f:85:f1:5a:4b:61:49:00:c3:b1:0c:38:c3:0c: 4b:20:99:15:2b:36:d5:99:cb:9b:25:85:a4:ab:01: 8a:ae:3a:fa:ba:ad:7f:6b:75:14:60:c8:ab:e5:df: 31:74:8a:5b:b7:bc:5d:2b:c0:01:43:84:0f:54:f0: c3:c9:48:ad:68:a7:3b:67:f5:86:1f:c2:1d:7d:18: 75:7e:e7:c2:67:53:02:92:ac:a7:44:fc:2b:a6:3a: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AD:3F:D2:93:5F:1E:53:09:FD:8A:F1:FF:00:AE:AE:56:4B:D0:2F X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:77:e3:21:72:27:2d:97:b5:6d:b4:fe:61:3c:61:74:c3: bc:64:0a:aa:a5:78:5a:6f:ca:91:95:05:4c:85:de:c9:fb:84: e5:c1:0d:bf:32:6b:ae:bd:12:62:4d:50:39:5c:a2:e7:2a:e5: da:c5:da:e6:2a:dc:69:d7:c7:55:5b:04:09:e4:44:64:9e:dc: 96:37:87:2d:cc:12:42:48:1b:b9:f5:84:16:89:c4:11:fb:8f: 7c:17:f3:ec:f6:fa:67:37:fe:b9:fd:72:d4:88:e0:44:bf:55: 86:e0:ed:69:a8:db:cb:12:cd:af:54:66:8a:43:b2:07:80:48: 8d:e4:db:6d:ea:87:9b:40:78:dc:94:33:74:a6:15:75:a8:a3: cb:2d:e8:df:67:13:cb:fc:72:2e:0f:c7:62:82:7c:96:b4:16: 12:0e:df:e4:b6:3a:31:1d:0e:4c:4a:52:57:e4:d7:e9:e2:c9: e5:48:8d:73:97:20:54:22:5e:23:2a:ba:3d:cb:68:7e:07:8f: 5c:cc:b8:6f:92:01:83:96:9c:1e:a7:10:c6:a6:a5:3d:45:d2: ca:46:e9:3b:76:1a:41:0d:57:ad:50:30:1b:92:e3:56:b0:14: 45:ce:45:a8:43:2a:5e:a5:a6:e3:b6:50:17:a6:6d:fc:06:a8: 6f:80:2d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjUxMDE5MDI0NjA4WhcNMjUxMDI2MDI0NjA4WjAYMRYwFAYD VQQDEw02OGY0NTBmMC03ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzorYSzoPpy2IUgI6d81ZaWwjRXCEj61pCA98IbIxjb1hJ8DKX2Kc04f3NhEf +252xKyu7wq2cHAhY2880G9WPRR9X+5gwcxfC3vp0z77OEJA32gku9xpIxnQ6f6O 6PGO9ZH1D3Gw7+DUguqd9XDEZ+u+zuAIV0n77VVivJ5WG/abhQpmFUKnuIueBLJ9 RHvgDPjLWQFt5K11gnM4Pn3gZe3hM+qIn4XxWkthSQDDsQw4wwxLIJkVKzbVmcub JYWkqwGKrjr6uq1/a3UUYMir5d8xdIpbt7xdK8ABQ4QPVPDDyUitaKc7Z/WGH8Id fRh1fufCZ1MCkqynRPwrpjp22wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOtP9KT Xx5TCf2K8f8Arq5WS9AvMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAid3fjIXInLZe1bbT+YTxhdMO8ZAqqpXhab8qRlQVMhd7J+4TlwQ2/ MmuuvRJiTVA5XKLnKuXaxdrmKtxp18dVWwQJ5ERkntyWN4ctzBJCSBu59YQWicQR +498F/Ps9vpnN/65/XLUiOBEv1WG4O1pqNvLEs2vVGaKQ7IHgEiN5Ntt6oebQHjc lDN0phV1qKPLLejfZxPL/HIuD8dignyWtBYSDt/ktjoxHQ5MSlJX5Nfp4snlSI1z lyBUIl4jKro9y2h+B49czLhvkgGDlpwepxDGpqU9RdLKRuk7dhpBDVetUDAbkuNW sBRFzkWoQypepabjtlAXpm38BqhvgC3C -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:08 2025 by rpki-client