$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: +Z2m9wOm5ldC1AXIrlF5MAZVmt/lqxExHr8mVWyrp3Q= Subject key identifier: 8C:F3:E4:B7:34:08:BD:71:6A:49:0D:04:EF:9B:75:E7:D1:3C:1D:0D Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 0206 Signing time: Sun 19 Oct 2025 04:42:42 +0000 Manifest this update: Sun 19 Oct 2025 04:42:41 +0000 Manifest next update: Sun 26 Oct 2025 04:42:41 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: rkiqd2OJ5FfVRtZ29u2fUDODGDlOq03uaCopH1WJxHE=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Oct 19 04:42:41 2025 GMT Not After : Oct 26 04:42:41 2025 GMT Subject: CN=68f46c41-2715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:02:d4:07:35:e7:45:fe:72:d4:81:84:cf: e1:40:a6:74:3e:9b:bf:4e:39:5f:57:2c:6a:79:83: 76:4c:20:2b:95:93:65:0e:1a:70:95:57:cf:ba:67: a2:16:2e:fc:ba:9f:d3:1e:6e:7d:06:38:22:3e:6a: 02:1e:09:1a:d3:84:a4:cb:5f:98:55:3b:29:b6:d3: 8f:0d:8a:4f:df:6e:ee:a8:b8:5d:3c:32:89:b9:a4: 0c:02:74:f3:a4:6b:88:0f:c3:6a:1b:79:4c:66:50: 9c:ca:29:f5:c6:21:a5:2b:7a:d0:09:04:91:42:fa: 0d:8f:27:92:af:39:1a:77:c8:61:1d:10:a2:a9:7f: 79:3c:98:0d:be:f3:00:ec:2d:cf:68:d6:ba:9b:77: e3:1c:db:94:fb:b4:cc:22:85:a8:ab:fb:b1:ab:e6: 22:d5:a0:c9:f7:d2:ef:42:ac:9d:eb:4c:49:83:1f: 8b:cd:94:3b:4b:32:f5:db:ca:08:45:0b:07:e3:39: 51:f1:3d:21:28:36:bc:30:3f:77:9e:f6:5c:c4:b0: 55:62:cd:91:fd:86:a8:e6:5f:89:da:f3:13:2d:5d: 63:6f:5e:bd:a3:41:f3:7b:5e:fc:ba:e6:dc:d8:82: 02:13:7e:93:11:00:c7:dd:2a:9c:7a:b7:b1:e2:46: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:E4:B7:34:08:BD:71:6A:49:0D:04:EF:9B:75:E7:D1:3C:1D:0D X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:f5:8b:dc:c3:55:42:7c:73:7f:d7:4f:a6:65:b3:72:04: 8f:66:e1:22:45:f2:3e:0d:a5:e3:d1:61:6b:ab:2f:dd:e5:e9: 07:ec:b1:9f:4d:16:ae:49:bb:49:6f:85:05:2b:aa:ec:9d:df: 6d:7b:8a:99:3f:f0:ec:fd:30:70:82:d2:da:81:de:30:75:ea: e9:d3:52:b5:a4:0b:8e:00:4f:84:e4:75:ff:f5:ba:ba:2b:cb: ad:58:1d:05:59:6a:d1:69:a0:fa:42:ae:f9:94:b8:a2:66:72: 8a:bc:c8:7c:06:f8:d3:de:35:5e:4d:bb:a7:ed:17:36:78:16: 6e:80:43:e1:10:bf:27:c9:72:83:bc:08:78:e5:f3:e7:d1:2e: fa:bb:b6:c4:ef:11:85:02:68:ef:37:d9:54:5d:09:10:60:e4: 7d:49:d9:62:12:86:e0:29:d0:4f:f1:c8:48:67:50:fd:38:79: da:52:16:1d:42:33:51:a7:8b:ad:60:d7:f2:61:61:4b:e4:9b: 89:8c:73:d6:ab:27:df:75:ac:44:01:0e:b0:36:af:e2:1e:62: 9d:38:fa:e4:a5:da:f4:3d:b9:94:32:0f:f1:f6:da:ba:79:0f: 42:90:d6:a3:f4:b7:48:f3:a5:e5:4a:c0:e3:93:23:e1:4d:ae: 92:b7:0d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjUxMDE5MDQ0MjQxWhcNMjUxMDI2MDQ0MjQxWjAYMRYwFAYD VQQDEw02OGY0NmM0MS0yNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjkC1Ac150X+ctSBhM/hQKZ0Ppu/TjlfVyxqeYN2TCArlZNlDhpwlVfPumei Fi78up/THm59BjgiPmoCHgka04Sky1+YVTspttOPDYpP327uqLhdPDKJuaQMAnTz pGuID8NqG3lMZlCcyin1xiGlK3rQCQSRQvoNjyeSrzkad8hhHRCiqX95PJgNvvMA 7C3PaNa6m3fjHNuU+7TMIoWoq/uxq+Yi1aDJ99LvQqyd60xJgx+LzZQ7SzL128oI RQsH4zlR8T0hKDa8MD93nvZcxLBVYs2R/Yao5l+J2vMTLV1jb169o0Hze178uubc 2IICE36TEQDH3Sqcerex4kZUwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzz5Lc0 CL1xakkNBO+bdefRPB0NMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO3vWL3MNVQnxzf9dPpmWzcgSPZuEiRfI+DaXj0WFrqy/d5ekH7LGf TRauSbtJb4UFK6rsnd9te4qZP/Ds/TBwgtLagd4wderp01K1pAuOAE+E5HX/9bq6 K8utWB0FWWrRaaD6Qq75lLiiZnKKvMh8BvjT3jVeTbun7Rc2eBZugEPhEL8nyXKD vAh45fPn0S76u7bE7xGFAmjvN9lUXQkQYOR9SdliEobgKdBP8chIZ1D9OHnaUhYd QjNRp4utYNfyYWFL5JuJjHPWqyffdaxEAQ6wNq/iHmKdOPrkpdr0PbmUMg/x9tq6 eQ9CkNaj9LdI86XlSsDjkyPhTa6Stw1c -----END CERTIFICATE-----Generated at Mon Oct 20 00:20:22 2025 by rpki-client