$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json) Hash identifier: y40by1n8K6sJawfAYrg+SCBYALasS1sBAjFgBcEisko= Subject key identifier: 62:EA:BE:D8:B6:1F:E5:CA:E4:F9:B2:9D:12:BF:EA:44:B0:A1:6F:26 Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft Manifest number: 37 Signing time: Sun 19 Oct 2025 11:03:38 +0000 Manifest this update: Sun 19 Oct 2025 11:03:37 +0000 Manifest next update: Sun 26 Oct 2025 11:03:37 +0000 Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: 2ICV/v3Bhj/0H+zy29Ik2GQYT5So4ubpRIMVuuKk6xs=) 2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: oCx5plSmqi8Rm6TAvFIAJcsQRs4OdtkOfKnCiaRUGsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Validity Not Before: Oct 19 11:03:37 2025 GMT Not After : Oct 26 11:03:37 2025 GMT Subject: CN=68f4c589-003c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:c8:41:19:f7:9e:20:9b:64:c4:b7:18:fc: 58:59:64:2e:d3:ce:e2:bd:ba:8c:12:79:4d:0f:2d: d1:63:2a:77:a7:5f:33:be:58:f5:d1:ec:f8:a0:12: 0d:a8:6d:fd:bd:80:4c:34:ec:4b:50:99:88:45:c4: c5:df:db:61:1f:2b:8e:2b:a0:7c:c7:ca:8a:6f:92: 84:76:6b:7f:ca:b6:c4:22:d9:15:d9:88:4d:9b:ed: 49:9c:7e:b3:73:39:2b:ae:6a:c0:89:1a:15:5b:35: fb:11:bf:c1:94:60:97:50:74:7d:ed:65:d2:83:86: 2f:36:a1:f0:10:7b:d0:d6:1c:07:83:75:22:07:2d: 8f:fe:5c:43:b3:57:5d:d1:ed:ed:a9:b2:aa:ac:78: ed:00:53:c2:a4:b3:b6:e7:49:c0:82:e6:c6:d5:a6: eb:9f:34:d8:b6:c6:6a:64:e5:35:b5:c9:20:1d:a7: d4:32:1c:6e:3a:8c:ec:9a:d5:d4:6b:06:76:9d:4f: dc:ad:c6:64:db:ce:9b:f5:27:00:d1:13:7b:b8:7d: db:6b:1b:ca:d7:33:be:ce:ef:8b:d8:f4:8e:75:ef: 7f:67:a1:4a:a9:c0:69:cf:47:9f:da:58:b9:f5:0c: 77:82:0a:a7:5e:45:24:8e:99:3d:89:36:a8:c4:d3: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EA:BE:D8:B6:1F:E5:CA:E4:F9:B2:9D:12:BF:EA:44:B0:A1:6F:26 X509v3 Authority Key Identifier: keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e9:28:ac:e0:9d:4b:08:21:0a:d2:95:ac:3c:64:67:00:3f: fd:b6:c2:e3:e1:b2:09:12:e0:85:02:14:60:48:67:26:86:3b: 62:15:9a:c3:5e:fe:9d:54:65:02:49:5d:a0:d3:86:18:c8:41: a0:8b:9f:a6:ef:52:44:8f:b5:f1:dd:a9:19:81:35:92:b3:ee: bd:68:ec:ea:6a:c9:ec:8b:99:16:8e:20:ba:91:17:09:87:a1: e0:fc:52:51:0c:98:68:8c:87:df:b6:f3:86:fc:58:46:f4:66: e2:91:fd:04:33:d1:07:df:97:04:64:40:77:8f:4b:56:8f:0f: fc:97:fc:79:70:d0:82:48:1f:73:1c:93:fc:95:bb:63:a9:12: 38:b9:86:50:3c:f3:3d:ba:3e:5d:2a:70:fc:09:e9:3d:bd:74: 16:18:09:e3:8c:8a:2a:6a:d2:55:fe:98:ee:a8:26:43:7d:90: e1:87:51:03:e8:b1:b4:36:7f:52:5c:69:97:0e:ae:6b:0e:73: dc:bb:da:75:33:f3:e1:61:be:77:eb:f7:bc:ce:2b:5b:55:26: 47:b4:65:17:2c:17:38:9d:7c:83:db:75:f7:fd:54:7b:40:06: 6b:c3:af:38:73:97:47:63:b3:be:9a:aa:81:39:04:b2:d0:fc: d7:8b:64:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEYwRjExMC8GA1UEBRMoMzhFQjBEOEU3QUYxRUIxODdENUFBM0ZDNUY3OTQxOTEz MzhCREI2NjAeFw0yNTEwMTkxMTAzMzdaFw0yNTEwMjYxMTAzMzdaMBgxFjAUBgNV BAMTDTY4ZjRjNTg5LTAwM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvmchBGfeeIJtkxLcY/FhZZC7TzuK9uowSeU0PLdFjKnenXzO+WPXR7PigEg2o bf29gEw07EtQmYhFxMXf22EfK44roHzHyopvkoR2a3/KtsQi2RXZiE2b7UmcfrNz OSuuasCJGhVbNfsRv8GUYJdQdH3tZdKDhi82ofAQe9DWHAeDdSIHLY/+XEOzV13R 7e2psqqseO0AU8Kks7bnScCC5sbVpuufNNi2xmpk5TW1ySAdp9QyHG46jOya1dRr BnadT9ytxmTbzpv1JwDRE3u4fdtrG8rXM77O74vY9I51739noUqpwGnPR5/aWLn1 DHeCCqdeRSSOmT2JNqjE0y6zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYuq+2LYf 5crk+bKdEr/qRLChbyYwHwYDVR0jBBgwFoAUOOsNjnrx6xh9WqP8X3lBkTOL22Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRjBGLzVDMThBNjEyNURF NzExRjBBODY3OTE0RUM0RjlBRTAyL09Pc05qbnJ4NnhoOVdxUDhYM2xCa1RPTDIy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT09zTmpucng2eGg5V3FQOFgzbEJrVE9MMjJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RjBGLzVDMThBNjEyNURFNzExRjBBODY3OTE0RUM0RjlBRTAyL09Pc05qbnJ4Nnho OVdxUDhYM2xCa1RPTDIyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvpKKzgnUsIIQrSlaw8ZGcAP/22wuPhsgkS4IUCFGBIZyaGO2IVmsNe /p1UZQJJXaDThhjIQaCLn6bvUkSPtfHdqRmBNZKz7r1o7OpqyeyLmRaOILqRFwmH oeD8UlEMmGiMh9+284b8WEb0ZuKR/QQz0QfflwRkQHePS1aPD/yX/Hlw0IJIH3Mc k/yVu2OpEji5hlA88z26Pl0qcPwJ6T29dBYYCeOMiipq0lX+mO6oJkN9kOGHUQPo sbQ2f1JcaZcOrmsOc9y72nUz8+Fhvnfr97zOK1tVJke0ZRcsFzidfIPbdff9VHtA BmvDrzhzl0djs76aqoE5BLLQ/NeLZE4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:42 2025 by rpki-client