$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: WYpmAbFIWPRVsgSwWcLTXtret9uHUKPXXievOsk1v8s= Subject key identifier: 27:19:BB:E5:44:45:AA:4F:EA:BF:05:95:45:EA:A9:11:20:51:AE:DB Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 76 Signing time: Sun 19 Oct 2025 10:13:26 +0000 Manifest this update: Sun 19 Oct 2025 10:13:25 +0000 Manifest next update: Sun 26 Oct 2025 10:13:25 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: OKb1HkrtkL5LKW/7H8J6/TQ3GEQFGQKGWW3Nq3QCCO4=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) 4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Oct 19 10:13:25 2025 GMT Not After : Oct 26 10:13:25 2025 GMT Subject: CN=68f4b9c5-bab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:91:ea:31:b2:83:7a:e6:45:39:45:ad:15: ae:85:43:36:d2:fa:20:26:a5:82:13:c1:bc:f7:0b: bf:c6:2d:d6:56:3e:a4:92:bd:3d:73:ab:f2:de:bc: 26:dc:d5:0c:b2:5f:d9:ec:f6:b8:4d:5e:08:e1:6f: 1a:01:d2:a7:16:05:77:27:3f:61:44:7a:6c:47:c2: c8:3e:18:ae:e2:3c:ab:f5:2b:7a:ce:e4:7a:a2:75: 46:57:c5:09:46:ed:af:25:be:e1:eb:c1:72:43:cb: a2:6d:3c:fc:4b:ef:87:b7:f4:fb:64:7b:a0:05:cc: f2:bc:95:77:53:80:48:46:c9:a4:88:3b:fb:00:f6: 51:f4:da:79:20:fb:48:17:1a:3b:e6:db:77:3d:a0: e0:19:bb:1b:80:d1:28:1e:23:fc:1e:f7:1c:d4:87: 93:c6:b5:c5:75:1d:78:55:63:0a:7d:e5:7c:ea:12: c3:cd:b1:9a:ad:6e:4b:1c:e2:c7:3f:6d:5a:83:5d: b1:b4:6e:24:99:b2:93:49:7a:fd:6e:e3:b8:15:da: 14:1b:55:2c:81:e7:5c:11:32:2c:65:24:37:71:07: c3:1d:68:ad:23:6c:d9:be:0b:6e:7e:ba:21:36:46: 41:80:4c:93:0e:a1:03:1a:ea:41:ad:59:09:67:34: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:BB:E5:44:45:AA:4F:EA:BF:05:95:45:EA:A9:11:20:51:AE:DB X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:71:03:03:fc:84:a6:a4:9d:67:f7:60:ae:8c:d3:41:98:30: b4:fb:8b:14:9f:48:90:cf:41:57:3a:80:11:09:4c:8f:44:e8: f4:f9:b5:3c:35:4e:39:5d:dd:45:43:39:66:15:da:bc:1e:57: f1:4a:53:1b:9a:e2:89:c2:ba:31:22:c9:66:7c:a5:94:9f:45: 1b:ec:74:03:b7:63:b7:d2:9d:69:ad:f5:2f:8d:53:5b:23:80: ca:a1:c7:a3:ea:1f:d1:98:1f:10:fd:64:cb:19:5b:8c:e2:35: 90:3c:8d:67:04:09:fd:b6:98:c3:29:2f:39:3a:f0:89:40:b2: 84:1f:af:02:ac:24:ef:dc:ab:f7:da:f3:4f:22:a9:dc:68:0b: 37:14:e0:8b:db:d7:4e:d1:ac:9b:e3:8b:d4:54:07:5b:45:c7: 28:7f:00:51:0a:31:43:5f:1a:f6:c7:6d:3c:5b:a4:57:9b:2d: 97:59:a7:fb:55:b8:c1:4d:dd:e8:ed:a8:de:fb:a8:27:6d:1d: 23:e8:5f:a2:c0:ac:7d:7a:21:ec:b8:d1:4e:32:2b:75:ee:f3: c2:98:0e:88:22:13:69:8d:c9:d5:4c:32:8d:c3:0d:ab:87:a2: 6e:29:45:55:31:fd:40:12:ce:50:e3:ca:aa:7f:4a:bd:fb:3e: 43:d6:ac:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTEwMTkxMDEzMjVaFw0yNTEwMjYxMDEzMjVaMBgxFjAUBgNV BAMTDTY4ZjRiOWM1LWJhYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTX5HqMbKDeuZFOUWtFa6FQzbS+iAmpYITwbz3C7/GLdZWPqSSvT1zq/LevCbc 1QyyX9ns9rhNXgjhbxoB0qcWBXcnP2FEemxHwsg+GK7iPKv1K3rO5HqidUZXxQlG 7a8lvuHrwXJDy6JtPPxL74e39Ptke6AFzPK8lXdTgEhGyaSIO/sA9lH02nkg+0gX Gjvm23c9oOAZuxuA0SgeI/we9xzUh5PGtcV1HXhVYwp95XzqEsPNsZqtbksc4sc/ bVqDXbG0biSZspNJev1u47gV2hQbVSyB51wRMixlJDdxB8MdaK0jbNm+C25+uiE2 RkGATJMOoQMa6kGtWQlnNJi/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJxm75URF qk/qvwWVReqpESBRrtswHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx N0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVy X21DMmJRSUQ0dmtEM3RyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJxAwP8hKaknWf3YK6M00GYMLT7ixSfSJDPQVc6gBEJTI9E6PT5tTw1 Tjld3UVDOWYV2rweV/FKUxua4onCujEiyWZ8pZSfRRvsdAO3Y7fSnWmt9S+NU1sj gMqhx6PqH9GYHxD9ZMsZW4ziNZA8jWcECf22mMMpLzk68IlAsoQfrwKsJO/cq/fa 808iqdxoCzcU4Ivb107RrJvji9RUB1tFxyh/AFEKMUNfGvbHbTxbpFebLZdZp/tV uMFN3ejtqN77qCdtHSPoX6LArH16Iey40U4yK3Xu88KYDogiE2mNydVMMo3DDauH om4pRVUx/UASzlDjyqp/Sr37PkPWrFM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:51:14 2025 by rpki-client