$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: VCQ1A5YIEVBXmThqTh3kVOMTamWeurtmin5yYjrT6x4= Subject key identifier: C7:80:3D:C3:E4:99:9A:89:C4:0E:A7:29:60:90:4C:BB:39:F6:22:EE Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0CAD Signing time: Mon 20 Oct 2025 18:46:24 +0000 Manifest this update: Mon 20 Oct 2025 18:46:23 +0000 Manifest next update: Mon 27 Oct 2025 18:46:23 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: 4Psv09+pLXsPReEVoqFebbwxVxi6Pa4qRnPJsafofhI=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Oct 20 18:46:23 2025 GMT Not After : Oct 27 18:46:23 2025 GMT Subject: CN=68f68380-7b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:1a:52:47:82:20:57:20:78:86:f1:df:af: 5e:ef:fd:60:5f:b9:a7:fb:a0:fc:8b:0b:30:d3:19: 58:03:35:f9:6c:b7:bc:db:67:1f:82:a3:5e:c6:6d: f9:45:5f:6c:7d:40:dd:d6:8c:1a:a3:6c:53:6a:c6: dc:cf:28:0b:f7:27:9e:f1:0a:11:ec:7f:08:01:a5: ce:ba:3a:12:91:2f:79:24:7b:62:0b:fa:7d:27:8e: f4:db:47:ba:ef:4e:b7:12:19:63:f5:c5:0e:f0:c1: 22:b3:2d:0d:47:69:85:44:d3:14:b4:b0:02:41:8a: 03:17:ec:3f:00:20:7f:61:66:c0:e9:d5:c4:26:8b: da:4a:a3:11:0e:08:e8:e0:5b:79:76:b4:ac:3d:49: ae:21:a2:07:2a:0a:0d:c2:c4:a4:1a:23:da:c1:10: 00:0f:25:23:7c:97:9d:09:1e:ed:01:cb:c1:30:2b: 30:8c:18:b0:ab:48:d3:d7:6d:8d:d6:1c:12:6f:86: 94:bb:9f:eb:f0:42:c7:54:46:e4:13:40:2c:a7:f8: 2c:3f:9b:85:47:e8:57:1f:1b:29:7a:d3:36:6c:62: 78:84:45:73:33:fa:00:1f:b3:25:dc:2c:53:eb:c1: 49:f1:7c:fb:05:3b:8b:e3:5d:21:6c:d4:dd:c2:83: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:80:3D:C3:E4:99:9A:89:C4:0E:A7:29:60:90:4C:BB:39:F6:22:EE X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:72:f3:e2:cd:31:7e:c9:ae:67:02:c4:38:72:11:a8:54:e7: 3d:66:d8:75:30:ed:fb:a2:fc:cb:0a:99:d8:ff:92:13:98:77: 44:1b:a8:99:66:27:53:e6:6c:ef:10:25:ac:6a:74:e4:59:df: a3:f7:2c:98:3d:a2:ce:90:33:39:b3:ca:00:ad:03:ca:14:08: 63:88:f8:a9:a0:eb:a6:41:e5:4a:12:eb:e4:95:ec:9c:c8:77: 65:2b:81:cf:c9:d8:c8:08:3c:f1:04:4e:53:ce:2a:02:f8:48: 41:14:4d:eb:d2:8d:2d:24:45:10:b8:dc:ad:83:66:28:68:de: 37:2d:58:e0:d0:2a:21:c2:a6:22:dc:53:00:da:bf:13:05:ba: 86:00:47:05:7b:91:4d:db:65:0a:d1:40:39:66:63:9f:3d:cc: 22:e9:ce:09:6c:49:84:96:2d:49:7e:9b:fc:e5:4a:b6:28:23: 58:9a:50:b4:9f:90:c2:89:06:4b:69:bf:e8:5f:c9:d9:dd:5b: bd:1e:46:a5:fb:30:fa:59:65:99:7f:b5:e2:fb:ed:b2:48:20: 42:01:55:fe:85:b8:09:ab:5d:8e:0b:c1:56:be:22:52:be:e2: 95:89:d9:36:bd:c3:95:28:6c:11:34:8d:d9:4e:47:bc:e7:2c: 5e:07:f9:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUxMDIwMTg0NjIzWhcNMjUxMDI3MTg0NjIzWjAYMRYwFAYD VQQDEw02OGY2ODM4MC03YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/IaUkeCIFcgeIbx369e7/1gX7mn+6D8iwsw0xlYAzX5bLe822cfgqNexm35 RV9sfUDd1owao2xTasbczygL9yee8QoR7H8IAaXOujoSkS95JHtiC/p9J47020e6 7063Ehlj9cUO8MEisy0NR2mFRNMUtLACQYoDF+w/ACB/YWbA6dXEJovaSqMRDgjo 4Ft5drSsPUmuIaIHKgoNwsSkGiPawRAADyUjfJedCR7tAcvBMCswjBiwq0jT122N 1hwSb4aUu5/r8ELHVEbkE0Asp/gsP5uFR+hXHxspetM2bGJ4hEVzM/oAH7Ml3CxT 68FJ8Xz7BTuL410hbNTdwoMUzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeAPcPk mZqJxA6nKWCQTLs59iLuMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCcvPizTF+ya5nAsQ4chGoVOc9Zth1MO37ovzLCpnY/5ITmHdEG6iZ ZidT5mzvECWsanTkWd+j9yyYPaLOkDM5s8oArQPKFAhjiPipoOumQeVKEuvkleyc yHdlK4HPydjICDzxBE5TzioC+EhBFE3r0o0tJEUQuNytg2YoaN43LVjg0CohwqYi 3FMA2r8TBbqGAEcFe5FN22UK0UA5ZmOfPcwi6c4JbEmEli1Jfpv85Uq2KCNYmlC0 n5DCiQZLab/oX8nZ3Vu9Hkal+zD6WWWZf7Xi++2ySCBCAVX+hbgJq12OC8FWviJS vuKVidk2vcOVKGwRNI3ZTke85yxeB/m7 -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:14 2025 by rpki-client