$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: twzdxfjvNhNeF4pOaykHjAR8n5nRTFakFpEQWh3NQVU= Subject key identifier: 4C:2F:71:87:FF:87:DE:96:D9:A9:AB:C8:04:24:45:B5:78:8C:B8:BC Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 0714 Signing time: Sat 18 Oct 2025 23:17:39 +0000 Manifest this update: Sat 18 Oct 2025 23:17:39 +0000 Manifest next update: Sat 25 Oct 2025 23:17:39 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: y4UzlBdCdDlwZzAcXWhyOAmW6YyC4s6/rwMurlKgdIE=) 2: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: yTmvbluMS1ekznu7xZrwRWvvc1OJawaqZvLZNGq9gz8=) 3: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: clJzNQtpotr4QSXsgUT08usDpM+kRLKmxfMjpmGDJ6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Oct 18 23:17:39 2025 GMT Not After : Oct 25 23:17:39 2025 GMT Subject: CN=68f42013-a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:a9:4a:12:89:5a:72:e6:33:a3:f7:f7:c5: 86:f3:cd:d5:61:f4:f5:61:65:fe:5b:6c:fb:a0:63: 9e:b2:aa:f3:b5:f9:dd:d8:32:a7:91:25:22:24:53: d7:72:d7:7d:60:de:37:f0:cf:3c:c5:a6:1c:58:f5: ea:ed:ce:ad:8a:79:c1:87:8a:a1:2d:1d:41:42:f9: 5a:62:13:31:64:a4:6d:64:f3:59:2e:7a:ae:2d:e7: 99:37:03:0e:b4:58:9c:21:fc:ce:13:d5:87:28:31: 73:31:73:0c:52:a5:44:f9:64:1e:d2:90:71:c4:8f: 02:08:ec:e0:cf:d5:73:d2:90:1f:92:0d:47:f1:20: 72:4d:31:00:e1:93:78:cf:8a:0a:63:84:f3:9b:4a: f4:71:6a:ff:8c:34:05:45:4f:c2:e9:b7:a4:9e:c5: 5f:cd:86:e6:d3:d4:86:3b:53:a1:47:d7:ab:16:fb: 55:7b:bb:85:f2:53:b5:97:75:a3:c2:3b:48:1a:f1: 0e:da:79:28:2e:a5:10:b8:18:9d:14:1b:94:39:1d: 20:d3:16:4c:aa:16:ef:3a:ab:92:c6:16:e1:9c:c8: 96:ec:cd:47:37:ba:8b:4d:52:0a:9f:2a:17:13:1d: 0c:ed:32:f0:df:ed:04:5c:f2:02:39:1a:a9:f1:7f: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:71:87:FF:87:DE:96:D9:A9:AB:C8:04:24:45:B5:78:8C:B8:BC X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1b:45:52:32:15:7d:62:87:c9:cc:c2:e1:f9:c0:42:4d:a2: f4:bb:02:70:9f:5c:af:e9:45:f2:b4:a8:61:f9:4c:63:e6:94: 91:17:87:a4:c4:af:5f:70:29:5f:72:d4:fd:67:92:01:83:c4: 39:ae:1e:d3:f7:a8:a9:cc:18:8e:ac:70:6f:7c:64:84:c8:fe: 2f:57:9b:8c:bf:dd:b8:03:f4:91:f9:06:0e:ad:c4:23:1a:41: dd:d9:ce:25:e2:88:5f:82:99:c7:7d:06:e8:05:1c:ea:bb:b8: a2:3a:cc:70:1c:1c:0c:f3:eb:bc:8f:60:10:55:90:d3:05:c7: 4f:2c:eb:ce:b7:8c:0e:79:2c:fb:cd:e2:0a:83:31:b4:72:94: f8:db:16:5a:ca:ce:49:4a:5c:97:67:65:17:59:12:e5:33:c3: 56:1d:75:fd:ea:8a:7a:b4:e0:0a:81:93:a8:c8:04:e3:17:f9: 56:a8:a1:82:0e:51:7b:70:9b:c0:2d:83:32:e2:f0:02:8b:a3: 4e:a9:aa:9b:af:67:08:dc:2a:44:a6:fc:cf:ff:5e:71:cc:48: 30:c6:92:8d:65:58:ad:23:88:52:ed:11:fc:36:81:4a:01:20: 68:c2:b3:e4:10:00:7b:ca:16:47:71:13:67:6f:98:7e:87:bc: e2:5d:6c:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUxMDE4MjMxNzM5WhcNMjUxMDI1MjMxNzM5WjAYMRYwFAYD VQQDEw02OGY0MjAxMy1hN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPKpShKJWnLmM6P398WG883VYfT1YWX+W2z7oGOesqrztfnd2DKnkSUiJFPX ctd9YN438M88xaYcWPXq7c6tinnBh4qhLR1BQvlaYhMxZKRtZPNZLnquLeeZNwMO tFicIfzOE9WHKDFzMXMMUqVE+WQe0pBxxI8CCOzgz9Vz0pAfkg1H8SByTTEA4ZN4 z4oKY4Tzm0r0cWr/jDQFRU/C6beknsVfzYbm09SGO1OhR9erFvtVe7uF8lO1l3Wj wjtIGvEO2nkoLqUQuBidFBuUOR0g0xZMqhbvOquSxhbhnMiW7M1HN7qLTVIKnyoX Ex0M7TLw3+0EXPICORqp8X/dYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwvcYf/ h96W2amryAQkRbV4jLi8MB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIG0VSMhV9YofJzMLh+cBCTaL0uwJwn1yv6UXytKhh+Uxj5pSRF4ek xK9fcClfctT9Z5IBg8Q5rh7T96ipzBiOrHBvfGSEyP4vV5uMv924A/SR+QYOrcQj GkHd2c4l4ohfgpnHfQboBRzqu7iiOsxwHBwM8+u8j2AQVZDTBcdPLOvOt4wOeSz7 zeIKgzG0cpT42xZays5JSlyXZ2UXWRLlM8NWHXX96op6tOAKgZOoyATjF/lWqKGC DlF7cJvALYMy4vACi6NOqaqbr2cI3CpEpvzP/15xzEgwxpKNZVitI4hS7RH8NoFK ASBowrPkEAB7yhZHcRNnb5h+h7ziXWzF -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:53 2025 by rpki-client