$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: mt1mQvEg2m0zh1eOQypOMgtAws3TR9efH7E9kR4eOvM= Subject key identifier: FB:63:E5:25:A0:D0:B2:72:BA:51:A7:25:DC:C1:9E:A6:28:1D:56:6B Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 0113 Signing time: Sun 19 Oct 2025 07:44:50 +0000 Manifest this update: Sun 19 Oct 2025 07:44:49 +0000 Manifest next update: Sun 26 Oct 2025 07:44:49 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: 0qRigd3rW1VvbfJwPdRgrz/0hD2sMjFhPS9tnCqv4Pk=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Oct 19 07:44:49 2025 GMT Not After : Oct 26 07:44:49 2025 GMT Subject: CN=68f496f1-fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:b6:ba:69:23:03:a5:14:dd:1e:42:d4:c6: 07:16:ac:0d:31:f3:06:70:e0:a7:39:2d:cc:8c:46: bb:e0:39:ec:f5:06:9b:5d:69:1a:73:a7:77:17:b2: 01:1c:ca:a8:3d:c9:de:25:e9:8d:f5:f3:ed:73:ba: b4:0d:1d:df:cd:a9:44:0a:e5:93:d3:42:8e:e6:f6: f3:dd:6c:21:16:0c:f3:2c:b8:a4:c1:0b:70:26:12: 6a:13:86:f5:7f:62:d0:d5:6a:ca:73:8c:c3:14:ec: 21:0c:9e:43:14:e8:41:b3:e0:39:2a:19:ec:ea:54: b8:96:b6:ae:6e:6e:56:8d:85:9a:b7:80:83:9f:74: 04:74:4e:03:6d:dd:62:17:1e:0b:14:eb:e3:cc:37: da:1e:b6:a0:ff:37:da:b7:37:97:0c:f6:ba:b4:0c: 64:e6:0c:5d:2b:ae:a9:49:8a:3a:2e:58:ad:ce:35: ae:f3:69:39:aa:d0:5f:ad:0b:d4:75:97:a3:c9:45: 28:d0:5f:0b:8a:51:8f:08:35:24:f5:78:35:c8:5a: 69:25:bd:78:e6:62:5e:fb:a8:1a:63:9e:b9:14:b0: 15:a6:e3:28:57:fd:fa:2e:57:44:e5:75:a5:83:74: bc:d2:78:bc:9c:bc:08:98:ae:d4:18:48:03:76:79: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:E5:25:A0:D0:B2:72:BA:51:A7:25:DC:C1:9E:A6:28:1D:56:6B X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6f:03:8e:85:f9:ca:34:f6:cd:6b:f8:78:f5:34:a8:cd:8c: da:d6:0f:7b:98:f5:e5:25:8b:92:1b:50:d4:af:14:ef:92:59: 85:97:74:dd:99:c2:40:09:6a:59:be:d1:2f:6d:a1:26:da:d9: 2d:3c:2e:c0:73:9a:a6:27:f8:17:45:b8:31:a9:64:b5:94:ba: 74:32:a4:19:f0:7a:a0:7d:b9:13:8a:1d:c8:d9:41:e6:50:2e: 0d:f5:74:f7:0c:89:0d:8f:ba:3b:1b:d2:36:5d:af:d0:de:db: a8:2a:67:03:a4:69:81:65:5f:9f:fe:71:a1:6e:13:2a:59:ff: 1d:60:67:bb:f1:a1:c6:4f:14:e9:12:ef:bd:62:be:00:3e:0c: df:5b:46:2c:aa:c2:b5:06:f2:77:1d:f5:75:0a:42:c0:39:52: b8:96:22:86:5f:c8:99:7f:5d:47:aa:03:af:fe:c5:da:f6:0f: 4b:e6:5c:b1:7d:e4:1e:75:02:8c:42:77:8f:d8:25:12:6b:c6: a5:17:e7:f7:66:8c:70:e7:cd:11:39:e8:44:81:36:38:33:97: 73:7f:a3:08:45:2d:7e:89:de:19:f9:ff:8a:87:5c:12:64:6b: 6c:00:56:a4:c7:9a:8e:0b:f0:a8:bf:e0:54:09:43:db:1f:5b: 4e:88:3a:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjUxMDE5MDc0NDQ5WhcNMjUxMDI2MDc0NDQ5WjAYMRYwFAYD VQQDEw02OGY0OTZmMS1mYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Oq2umkjA6UU3R5C1MYHFqwNMfMGcOCnOS3MjEa74Dns9QabXWkac6d3F7IB HMqoPcneJemN9fPtc7q0DR3fzalECuWT00KO5vbz3WwhFgzzLLikwQtwJhJqE4b1 f2LQ1WrKc4zDFOwhDJ5DFOhBs+A5Khns6lS4lraubm5WjYWat4CDn3QEdE4Dbd1i Fx4LFOvjzDfaHrag/zfatzeXDPa6tAxk5gxdK66pSYo6LlitzjWu82k5qtBfrQvU dZejyUUo0F8LilGPCDUk9Xg1yFppJb145mJe+6gaY565FLAVpuMoV/36LldE5XWl g3S80ni8nLwImK7UGEgDdnm5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtj5SWg 0LJyulGnJdzBnqYoHVZrMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTbwOOhfnKNPbNa/h49TSozYza1g97mPXlJYuSG1DUrxTvklmFl3Td mcJACWpZvtEvbaEm2tktPC7Ac5qmJ/gXRbgxqWS1lLp0MqQZ8HqgfbkTih3I2UHm UC4N9XT3DIkNj7o7G9I2Xa/Q3tuoKmcDpGmBZV+f/nGhbhMqWf8dYGe78aHGTxTp Eu+9Yr4APgzfW0YsqsK1BvJ3HfV1CkLAOVK4liKGX8iZf11HqgOv/sXa9g9L5lyx feQedQKMQneP2CUSa8alF+f3Zoxw580ROehEgTY4M5dzf6MIRS1+id4Z+f+Kh1wS ZGtsAFakx5qOC/Cov+BUCUPbH1tOiDpW -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:10 2025 by rpki-client