$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: cM49pBbdOl8QEsFAEHDlsZsYkQ34FhtrC6rPHvT0WKs= Subject key identifier: 87:D4:B6:E9:14:BF:61:28:8B:EA:62:3B:85:D8:06:C0:50:8D:9E:F7 Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 13D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 13CC Signing time: Mon 20 Oct 2025 17:20:36 +0000 Manifest this update: Mon 20 Oct 2025 17:20:35 +0000 Manifest next update: Mon 27 Oct 2025 17:20:35 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: tBwe1+Gt1TwxK6SlSpotWF7I1nK9da4eMUmGKWRsrzU=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 9C6Tg9SKyHhrTv8/E20KOofW2E66mUILhErIQqYMZ/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5078 (0x13d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Oct 20 17:20:35 2025 GMT Not After : Oct 27 17:20:35 2025 GMT Subject: CN=68f66f63-dcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:01:f7:a3:d6:d3:97:36:36:6e:12:6d:ae: d6:0b:2f:54:6d:59:f3:77:d7:75:ff:f5:a4:ff:03: 50:43:b5:3f:ed:27:c1:79:29:33:fa:4c:fd:2a:a0: a7:78:5a:0b:1f:8d:72:0e:12:41:44:af:b4:7b:16: c2:68:8c:d9:2d:ef:bc:1e:d9:d5:a9:26:45:71:c9: eb:2f:9d:2d:39:72:8a:c6:81:dd:27:26:7d:20:b7: 42:0d:80:e4:8c:80:86:52:7c:c1:fb:31:59:75:68: 56:97:ff:79:d1:32:e5:cb:9d:17:96:b4:db:01:bd: 24:25:09:f8:73:d5:c3:7a:bc:64:b5:84:10:9f:ec: 8c:f6:cb:1d:bc:95:2f:c6:78:e2:04:a9:71:d8:f9: d7:ac:54:e6:77:3e:a9:78:d8:56:41:46:0c:9d:00: 09:47:95:5e:81:0f:66:01:30:c6:6a:0a:df:8c:2a: fd:08:c3:fc:fc:99:df:a2:83:41:62:ef:d7:d1:ea: ac:ed:c9:cb:a1:dd:eb:09:26:bd:ad:a7:e1:9b:d5: 3f:c3:73:a4:e3:ef:24:81:44:cb:b0:aa:7b:f2:a2: c7:01:41:ff:7b:13:24:b5:2b:f8:09:f9:74:13:96: d1:c2:a9:4a:52:bb:d6:50:f8:1b:e9:a0:ab:04:d3: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:B6:E9:14:BF:61:28:8B:EA:62:3B:85:D8:06:C0:50:8D:9E:F7 X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:02:33:ee:56:a1:df:61:23:ba:8a:8d:f5:bc:ab:1b:8d:db: f0:27:96:e9:92:09:d9:a9:24:78:44:84:11:9b:36:d6:32:ed: e3:7f:b9:43:55:d3:7e:19:63:6a:c7:b9:30:15:46:26:51:c9: a1:ac:1c:8c:41:8f:17:aa:fd:7f:42:2d:26:51:d1:c4:ad:c8: 05:82:a1:ab:d7:f6:a9:59:4f:2f:ff:83:d5:33:b8:34:db:7b: 8b:58:5d:f9:30:82:fa:4b:7f:06:e7:75:36:0a:06:98:27:ae: d4:0c:cf:5e:c8:1a:76:13:7c:e7:3d:43:21:7f:9c:8f:ca:71: 1d:2e:58:5f:c6:d0:2a:28:61:44:a2:fd:4d:55:b6:fc:c3:54: 20:cb:42:18:d9:8f:3c:ae:48:57:5f:f1:17:5c:f6:91:be:ab: e7:68:02:77:c8:74:dc:1d:2e:3c:13:00:0d:92:24:b0:76:48: 21:75:da:a7:46:6d:46:7c:fc:ca:66:d4:4f:95:6a:11:e7:0a: 6f:0f:bb:05:d8:b2:28:d5:ca:40:06:2d:97:6b:58:fa:8e:20: c8:26:ec:fe:12:84:0a:56:0a:4a:f6:6c:a4:33:6f:c4:b1:d3: d5:ed:42:4c:58:6b:25:9d:a9:fd:e5:d0:3b:c2:b8:b4:7d:fb: 42:75:da:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjUxMDIwMTcyMDM1WhcNMjUxMDI3MTcyMDM1WjAYMRYwFAYD VQQDEw02OGY2NmY2My1kY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ywB96PW05c2Nm4Sba7WCy9UbVnzd9d1//Wk/wNQQ7U/7SfBeSkz+kz9KqCn eFoLH41yDhJBRK+0exbCaIzZLe+8HtnVqSZFccnrL50tOXKKxoHdJyZ9ILdCDYDk jICGUnzB+zFZdWhWl/950TLly50XlrTbAb0kJQn4c9XDerxktYQQn+yM9ssdvJUv xnjiBKlx2PnXrFTmdz6peNhWQUYMnQAJR5VegQ9mATDGagrfjCr9CMP8/JnfooNB Yu/X0eqs7cnLod3rCSa9rafhm9U/w3Ok4+8kgUTLsKp78qLHAUH/exMktSv4Cfl0 E5bRwqlKUrvWUPgb6aCrBNPy8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfUtukU v2Eoi+piO4XYBsBQjZ73MB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYAjPuVqHfYSO6io31vKsbjdvwJ5bpkgnZqSR4RIQRmzbWMu3jf7lD VdN+GWNqx7kwFUYmUcmhrByMQY8Xqv1/Qi0mUdHErcgFgqGr1/apWU8v/4PVM7g0 23uLWF35MIL6S38G53U2CgaYJ67UDM9eyBp2E3znPUMhf5yPynEdLlhfxtAqKGFE ov1NVbb8w1Qgy0IY2Y88rkhXX/EXXPaRvqvnaAJ3yHTcHS48EwANkiSwdkghddqn Rm1GfPzKZtRPlWoR5wpvD7sF2LIo1cpABi2Xa1j6jiDIJuz+EoQKVgpK9mykM2/E sdPV7UJMWGslnan95dA7wri0fftCddo7 -----END CERTIFICATE-----Generated at Tue Oct 21 05:01:34 2025 by rpki-client