$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: 6/MaoAzCcmn0YqQcJT/aa5ahBjK0bOZp2BfOoslCFy8= Subject key identifier: 4A:D2:A4:D2:48:85:B8:55:87:D2:08:8B:C1:0B:67:48:E9:B9:6C:D7 Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0EF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0EEC Signing time: Mon 20 Oct 2025 18:07:39 +0000 Manifest this update: Mon 20 Oct 2025 18:07:39 +0000 Manifest next update: Mon 27 Oct 2025 18:07:39 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: EgRqNM0/N8s961fBT/yTYs8by2nXmz8lUS9Sc2RZW+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Oct 20 18:07:39 2025 GMT Not After : Oct 27 18:07:39 2025 GMT Subject: CN=68f67a6b-f14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:ff:77:df:29:73:d1:6b:64:b2:ee:6c:7d: 42:1e:09:8b:97:e8:72:69:35:a0:65:3e:13:79:50: ab:d1:13:e4:45:6a:af:ef:ed:6a:bb:bc:2f:3c:18: 33:db:45:ac:fd:f1:69:a9:6d:e3:05:5c:92:4c:08: d9:01:ae:c4:94:66:15:ee:58:52:b9:d1:7f:40:ea: fe:7c:63:4a:1e:2e:30:7c:ad:d4:5d:6e:25:ff:8f: 48:49:97:9f:59:25:00:ee:ef:a1:fa:d2:b5:a2:f5: ea:5d:c7:32:dc:c7:1b:19:de:80:f3:08:e5:73:de: 22:da:d2:66:c3:96:14:32:e1:4c:6e:2c:13:e5:76: 6e:0f:6e:f8:f6:f0:a4:92:6f:51:35:49:ee:4e:ca: 0f:a8:b4:7d:8d:43:59:4f:c5:3d:fe:12:80:40:bd: 86:46:4f:1b:53:41:ba:1a:8e:82:2f:1b:e1:82:b5: 3d:47:e9:f2:7d:57:9e:aa:5e:80:75:1e:16:aa:63: 79:6e:c5:aa:05:08:9a:1e:0b:32:ef:37:44:7e:77: c7:1d:bd:7e:42:28:b9:2d:23:2a:66:ff:d5:63:cf: a4:68:35:d5:69:4f:b8:b6:a1:af:ae:c9:9e:6c:5c: e1:fd:1c:a3:25:98:5e:2d:f9:d9:5d:2b:1a:42:6d: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:A4:D2:48:85:B8:55:87:D2:08:8B:C1:0B:67:48:E9:B9:6C:D7 X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:a3:b2:f1:d0:f0:e0:2c:e7:5d:95:10:a5:37:3c:53:d5:d9: 7e:7a:04:1d:e1:13:b4:18:82:bb:90:d8:32:5e:db:95:6c:0c: 35:27:69:d8:e9:67:f1:3e:6a:ee:7c:46:ec:1f:4d:e0:22:45: 28:00:8f:26:c2:34:1e:95:f3:80:c0:ab:e9:ec:57:5b:3a:31: 5c:40:a3:b0:f7:df:3e:cf:2f:a4:30:61:de:6c:5d:5a:61:73: 0e:ca:df:1a:e5:5e:95:d9:69:e7:4b:f5:ae:32:89:af:35:3f: b1:c2:a5:e8:27:52:7b:e4:77:91:ed:4f:e8:a2:05:58:26:ac: ae:4a:01:4a:63:29:a4:08:4f:ed:9b:80:aa:c0:8b:e4:04:db: 8e:1f:ef:2c:62:b5:b4:8a:db:18:6c:5c:ca:a2:14:13:d0:f1: 43:f1:14:4d:93:b3:6c:35:bc:9f:8d:cd:60:8e:e5:1f:7e:7a: 0a:24:d8:c0:1a:31:08:64:b1:b5:7b:40:ca:72:6c:69:76:6b: ea:e5:e8:d2:70:d1:87:42:22:b3:31:f8:cd:59:af:ba:05:3c: 65:44:59:da:e1:1a:d4:1b:89:4b:f7:62:9e:5e:74:b2:88:22: 8d:43:78:e0:69:0f:af:22:25:77:18:c0:6f:32:c1:6f:77:5c: a5:11:81:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjUxMDIwMTgwNzM5WhcNMjUxMDI3MTgwNzM5WjAYMRYwFAYD VQQDEw02OGY2N2E2Yi1mMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq67/d98pc9FrZLLubH1CHgmLl+hyaTWgZT4TeVCr0RPkRWqv7+1qu7wvPBgz 20Ws/fFpqW3jBVySTAjZAa7ElGYV7lhSudF/QOr+fGNKHi4wfK3UXW4l/49ISZef WSUA7u+h+tK1ovXqXccy3McbGd6A8wjlc94i2tJmw5YUMuFMbiwT5XZuD2749vCk km9RNUnuTsoPqLR9jUNZT8U9/hKAQL2GRk8bU0G6Go6CLxvhgrU9R+nyfVeeql6A dR4WqmN5bsWqBQiaHgsy7zdEfnfHHb1+Qii5LSMqZv/VY8+kaDXVaU+4tqGvrsme bFzh/RyjJZheLfnZXSsaQm2L4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErSpNJI hbhVh9IIi8ELZ0jpuWzXMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRo7Lx0PDgLOddlRClNzxT1dl+egQd4RO0GIK7kNgyXtuVbAw1J2nY 6WfxPmrufEbsH03gIkUoAI8mwjQelfOAwKvp7FdbOjFcQKOw998+zy+kMGHebF1a YXMOyt8a5V6V2WnnS/WuMomvNT+xwqXoJ1J75HeR7U/oogVYJqyuSgFKYymkCE/t m4CqwIvkBNuOH+8sYrW0itsYbFzKohQT0PFD8RRNk7NsNbyfjc1gjuUffnoKJNjA GjEIZLG1e0DKcmxpdmvq5ejScNGHQiKzMfjNWa+6BTxlRFna4RrUG4lL92KeXnSy iCKNQ3jgaQ+vIiV3GMBvMsFvd1ylEYHX -----END CERTIFICATE-----Generated at Mon Oct 20 20:29:40 2025 by rpki-client