$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: cUlY4oLqswuC7tk0JXkq3Gla16Xc4lSttRQ2lHt71+s= Subject key identifier: A3:A1:29:59:F1:0F:CB:75:7B:5F:2B:BA:FD:73:95:75:42:EC:6B:11 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0895 Signing time: Sat 18 Oct 2025 21:42:17 +0000 Manifest this update: Sat 18 Oct 2025 21:42:17 +0000 Manifest next update: Sat 25 Oct 2025 21:42:17 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: mfxBQhcauhfOmr0ZaKhjN2G5pPRjeulrgo9/y0axB+E=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Oct 18 21:42:17 2025 GMT Not After : Oct 25 21:42:17 2025 GMT Subject: CN=68f409b9-308f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:75:f3:5f:59:44:6e:fd:fc:90:22:ee:e3: ff:ac:67:83:ec:e3:74:0a:1d:05:bd:be:d1:51:ab: fe:fe:78:74:2e:2a:b9:c7:de:22:ff:74:12:c3:28: e9:4d:f0:e3:f3:a8:01:be:df:23:ba:9b:03:ac:56: 36:4b:bb:36:13:c9:3e:93:fb:e8:c4:83:7d:59:b8: fd:d3:ea:a1:e2:7f:a5:08:dd:b2:12:59:61:2c:40: 1f:87:db:30:b6:d7:fd:34:4f:d5:91:11:65:29:b3: ae:b1:57:a3:5f:e5:e3:1a:26:ff:50:cb:55:a5:0f: f4:41:99:ea:d7:7a:6b:ec:f3:76:4e:f0:e2:2a:10: 23:23:92:83:dd:94:6e:5a:86:f4:cc:b5:1f:bf:af: 95:f1:15:ae:50:3b:5e:10:f1:40:dd:8d:5f:65:96: 10:ff:7a:71:4d:38:cb:12:26:f6:a0:eb:44:12:f6: 12:03:22:cd:71:5b:6c:42:a2:bd:68:89:4b:9c:f6: 34:00:aa:8a:10:c5:33:df:c7:c0:ba:24:cf:b0:29: b4:ba:74:7c:b3:23:14:d8:b1:43:74:58:7f:c9:df: b4:d9:aa:ae:8f:68:11:b5:92:71:a7:51:05:b0:1c: 6d:0c:c7:df:0b:be:d6:92:a6:94:f3:7e:88:6b:ab: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A1:29:59:F1:0F:CB:75:7B:5F:2B:BA:FD:73:95:75:42:EC:6B:11 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:de:df:21:e3:2b:a0:36:09:ac:61:cb:be:d6:1d:44:c1:cc: 5c:58:1d:64:e8:3f:cc:55:a9:d9:ad:aa:17:f0:c9:36:0c:7c: 6f:c8:fe:50:b4:fa:77:67:bb:e2:17:12:34:56:a3:91:a6:60: 87:f5:cc:bb:2c:5b:40:19:12:b4:93:b7:f6:d4:c8:8b:af:4b: 5b:ec:d5:22:96:39:13:ba:1a:47:2e:e6:62:a5:be:65:10:a1: 3d:a6:e3:ee:56:d4:57:28:50:12:b1:7c:3d:10:06:ad:63:21: 7f:93:72:51:63:df:39:73:e6:fc:bd:13:c8:12:f9:f4:34:3c: 51:29:a3:29:9d:43:03:86:4a:94:22:1f:fe:69:db:13:45:7e: b2:ae:63:19:0a:dd:c0:ef:e4:46:dc:8a:b0:b7:15:36:5c:2b: d8:16:cb:74:0f:28:3b:a0:70:7b:70:9d:e0:3d:4c:43:7f:d5: af:b3:58:5f:6d:c1:5d:1f:a2:d4:23:eb:76:62:59:08:c1:c6: 16:fc:fb:f9:2f:61:e9:22:1a:cc:3a:f1:6d:8a:72:7c:f2:98: dd:af:f6:6a:cf:55:e8:0e:a3:cd:60:df:44:46:bb:b1:70:37: aa:f1:62:02:8b:47:ee:aa:81:67:b7:ad:be:cd:7a:5b:86:a0: 71:78:e6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUxMDE4MjE0MjE3WhcNMjUxMDI1MjE0MjE3WjAYMRYwFAYD VQQDEw02OGY0MDliOS0zMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQN1819ZRG79/JAi7uP/rGeD7ON0Ch0Fvb7RUav+/nh0Liq5x94i/3QSwyjp TfDj86gBvt8jupsDrFY2S7s2E8k+k/voxIN9Wbj90+qh4n+lCN2yEllhLEAfh9sw ttf9NE/VkRFlKbOusVejX+XjGib/UMtVpQ/0QZnq13pr7PN2TvDiKhAjI5KD3ZRu Wob0zLUfv6+V8RWuUDteEPFA3Y1fZZYQ/3pxTTjLEib2oOtEEvYSAyLNcVtsQqK9 aIlLnPY0AKqKEMUz38fAuiTPsCm0unR8syMU2LFDdFh/yd+02aquj2gRtZJxp1EF sBxtDMffC77WkqaU836Ia6uJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOhKVnx D8t1e18ruv1zlXVC7GsRMB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj3t8h4yugNgmsYcu+1h1EwcxcWB1k6D/MVanZraoX8Mk2DHxvyP5Q tPp3Z7viFxI0VqORpmCH9cy7LFtAGRK0k7f21MiLr0tb7NUiljkTuhpHLuZipb5l EKE9puPuVtRXKFASsXw9EAatYyF/k3JRY985c+b8vRPIEvn0NDxRKaMpnUMDhkqU Ih/+adsTRX6yrmMZCt3A7+RG3IqwtxU2XCvYFst0Dyg7oHB7cJ3gPUxDf9Wvs1hf bcFdH6LUI+t2YlkIwcYW/Pv5L2HpIhrMOvFtinJ88pjdr/Zqz1XoDqPNYN9ERrux cDeq8WICi0fuqoFnt62+zXpbhqBxeObt -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:17 2025 by rpki-client