$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft File: MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json) Hash identifier: vRfl2qb1U3q3zMO/0mQLJ4f4wLDMDJNFP7tGkEiZEsk= Subject key identifier: 4F:63:F3:81:CC:3A:13:81:A5:2E:63:86:AD:11:9B:F1:1D:0B:DE:22 Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft Manifest number: 0656 Signing time: Sun 19 Oct 2025 00:13:58 +0000 Manifest this update: Sun 19 Oct 2025 00:13:57 +0000 Manifest next update: Sun 26 Oct 2025 00:13:57 +0000 Files and hashes: 1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: Ir6aMWqXr6A6k85Dua4UWfuGEjSWvfDXEGntSVcrddY=) 2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: BLYldDR5zxqTMcX8NQEJYFIKVTzk5VrQGbTFGjfROjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Validity Not Before: Oct 19 00:13:57 2025 GMT Not After : Oct 26 00:13:57 2025 GMT Subject: CN=68f42d46-8cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:91:0e:68:42:c8:9e:36:11:c9:4d:9a:32: ec:60:2e:e2:2c:a6:35:be:02:88:fe:ce:a2:49:89: 3b:7b:5a:b9:c6:93:87:7e:59:25:21:08:d7:b1:03: 98:91:08:2d:29:c0:78:2f:ac:71:a3:1b:f3:34:ad: d7:fb:d9:a7:d1:65:39:6f:e0:c3:0a:03:f1:3a:92: 0a:ce:a8:65:e4:32:6d:b7:8d:02:15:8e:1d:03:58: ab:0f:26:96:77:b6:53:4e:e6:eb:b2:e3:d2:e1:c2: 42:51:4d:2c:13:79:e5:56:c9:df:5b:65:ef:95:ff: 9b:d0:4d:4d:02:41:02:f1:7f:5b:c1:7f:8e:49:19: 99:64:96:ce:f2:45:c9:61:67:e5:de:74:8d:02:8c: 5c:6e:9e:33:17:82:2f:60:84:84:fa:2e:89:db:86: 36:bf:02:5a:79:c9:b6:d4:d7:bf:74:9f:34:33:a2: 3b:fb:6f:39:d7:76:2a:ba:42:c5:f8:91:cc:b3:1f: 23:2e:7f:fa:1f:5c:e3:d3:14:a6:f1:86:5c:6c:02: e5:05:fe:3a:1f:16:e3:68:ad:49:63:c0:18:60:bc: dc:b5:4d:2c:3a:1e:0e:ea:3f:17:20:9a:a0:a6:43: e7:a9:48:f6:8a:1a:bc:bc:38:10:46:64:f3:fa:16: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:F3:81:CC:3A:13:81:A5:2E:63:86:AD:11:9B:F1:1D:0B:DE:22 X509v3 Authority Key Identifier: keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e0:9d:fd:a8:93:fa:e1:c1:ba:c5:da:50:1c:4b:9d:8e:6a: 05:d0:84:be:8d:25:b6:e5:d1:e2:1a:a3:6f:70:5a:46:13:bd: 4c:f2:63:b5:11:96:42:3b:87:6c:c8:de:6a:3c:97:ed:33:ae: 16:ac:f4:8b:9d:b2:6c:53:a2:34:c9:8f:60:9a:b5:54:af:58: 9f:72:6b:a5:e0:0f:91:9f:bf:e1:8f:f7:9d:98:9e:d1:44:5f: fb:3e:d6:98:bd:af:12:20:aa:8f:a4:59:44:a4:aa:a4:49:f9: eb:58:4e:7a:d4:7c:56:f2:67:5d:01:60:1f:a2:28:6e:2e:1a: c0:0a:13:37:50:87:8b:8b:33:e5:42:19:e3:e3:d8:9b:e4:d5: 5e:6e:5f:a4:91:94:99:76:d7:99:6b:51:26:b5:25:14:d8:9d: cf:3e:10:76:db:7c:77:01:8f:ab:68:b5:8d:30:0c:d9:0b:e5: b7:d9:37:c2:1f:71:1e:5c:01:84:af:60:c5:c3:19:cc:d7:15: 1c:79:bd:56:0d:b6:04:69:a5:59:ba:46:f9:25:d9:1f:b5:0e: cc:05:a7:b8:3e:bd:3d:85:16:0d:1d:43:11:a5:ce:c2:7d:cc: d7:0f:0e:31:82:fd:65:49:3b:5f:e7:bd:fa:d6:83:99:63:16: fa:08:8b:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC N0RBRjEwRjEwHhcNMjUxMDE5MDAxMzU3WhcNMjUxMDI2MDAxMzU3WjAYMRYwFAYD VQQDEw02OGY0MmQ0Ni04Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqiRDmhCyJ42EclNmjLsYC7iLKY1vgKI/s6iSYk7e1q5xpOHflklIQjXsQOY kQgtKcB4L6xxoxvzNK3X+9mn0WU5b+DDCgPxOpIKzqhl5DJtt40CFY4dA1irDyaW d7ZTTubrsuPS4cJCUU0sE3nlVsnfW2Xvlf+b0E1NAkEC8X9bwX+OSRmZZJbO8kXJ YWfl3nSNAoxcbp4zF4IvYISE+i6J24Y2vwJaecm21Ne/dJ80M6I7+28513YqukLF +JHMsx8jLn/6H1zj0xSm8YZcbALlBf46HxbjaK1JY8AYYLzctU0sOh4O6j8XIJqg pkPnqUj2ihq8vDgQRmTz+hY/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9j84HM OhOBpS5jhq0Rm/EdC94iMB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4 MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODZFOC80ODg5NTk0RUE4MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2 Y0Y4NmF5LS12bDIzMnZFUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA94J39qJP64cG6xdpQHEudjmoF0IS+jSW25dHiGqNvcFpGE71M8mO1 EZZCO4dsyN5qPJftM64WrPSLnbJsU6I0yY9gmrVUr1ifcmul4A+Rn7/hj/edmJ7R RF/7PtaYva8SIKqPpFlEpKqkSfnrWE561HxW8mddAWAfoihuLhrAChM3UIeLizPl Qhnj49ib5NVebl+kkZSZdteZa1EmtSUU2J3PPhB223x3AY+raLWNMAzZC+W32TfC H3EeXAGEr2DFwxnM1xUceb1WDbYEaaVZukb5JdkftQ7MBae4Pr09hRYNHUMRpc7C fczXDw4xgv1lSTtf57361oOZYxb6CItG -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:45 2025 by rpki-client