$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: Uog2mFo6obXFqvHc9ax4lGhe6siUs22VgUxqS5l9rhE= Subject key identifier: 11:35:CA:C2:6F:66:1F:10:08:6B:8D:34:A2:4D:18:CD:A4:A7:F3:C4 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0CC4 Signing time: Sat 18 Oct 2025 18:53:44 +0000 Manifest this update: Sat 18 Oct 2025 18:53:44 +0000 Manifest next update: Sat 25 Oct 2025 18:53:44 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: qT6pRCviGZHcEEMFxJG6STBPgMSnZ7MbI4l8SlyzK/c=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: 6JiNuWz5Fkw8aMu3lON6uTLPgLOG+xf9uCqK1rE3Qew=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: 80MLiBcpNIycThAKM26TDicBsDE58l79IER/QoSPi08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Oct 18 18:53:44 2025 GMT Not After : Oct 25 18:53:44 2025 GMT Subject: CN=68f3e238-9411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:2e:fe:4a:34:0a:0f:e4:3e:04:a0:d8:c9: a4:8e:db:09:30:36:53:5f:3f:72:da:7e:fe:ee:5a: 91:6b:5b:00:06:0a:4c:d4:3f:df:74:3c:b3:82:f8: b3:70:2c:2f:06:e7:71:0c:96:d6:ca:ca:7a:19:c8: 95:2f:b1:c8:95:f9:de:68:73:10:60:14:02:10:cd: 47:54:e3:a8:ee:0c:3e:fb:cb:37:c7:a9:77:50:d9: 5e:e5:39:7c:27:09:ba:bc:ca:94:3b:71:6d:5c:9a: 35:48:23:6c:44:40:20:b3:95:aa:8a:4b:11:9e:d2: ee:44:43:e2:a6:8a:16:1b:aa:ef:a9:58:06:8c:9a: 70:2b:aa:46:6b:f1:92:69:0d:09:aa:76:f4:07:67: d4:61:6d:4a:d6:8f:c2:70:c2:1b:00:e8:46:31:45: f8:8f:ee:42:3c:24:ce:db:36:62:48:0a:39:6e:89: d7:f2:63:7b:23:3a:88:2d:ef:8b:bf:61:cc:da:45: 13:aa:ec:e6:31:98:d3:31:9a:e8:cb:7f:25:45:6a: 15:bc:41:08:e9:40:4e:f6:1f:28:87:6a:24:7c:dd: a0:77:fc:28:e3:21:b5:d2:c6:41:d0:0c:1d:90:0e: a3:c9:a0:7d:18:29:57:af:01:12:58:74:95:87:32: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:CA:C2:6F:66:1F:10:08:6B:8D:34:A2:4D:18:CD:A4:A7:F3:C4 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b6:4d:94:de:ad:45:f2:20:8a:de:7b:bd:a5:33:ff:40:f4: d2:e2:92:d1:d8:b1:d8:f2:a4:75:dd:cf:f8:dd:e8:12:e2:48: 1e:49:c2:cf:19:09:17:60:07:75:86:f4:e5:66:44:83:77:b3: 2f:8f:44:d5:69:1b:19:4e:2b:9c:dd:f1:9a:22:01:37:6f:6d: 8c:61:9f:a3:9f:71:d2:e6:73:e3:14:86:2a:cf:54:17:d2:d8: 7d:cf:85:e5:2f:a3:ab:4a:bf:15:7b:0d:03:6b:3e:9c:af:11: 30:f7:01:a6:c1:50:64:3d:b4:da:4b:3a:fa:b6:4c:b8:7e:0b: 9f:87:df:78:03:6e:34:d1:f6:3f:dd:31:c4:24:08:73:82:bf: a6:e6:2f:72:8a:ca:83:6e:e9:c8:21:62:a9:9e:a4:6c:54:8b: 90:a1:d2:8f:cf:ab:9c:60:bf:2d:cf:2e:95:09:dc:cf:27:d1: 77:f5:d0:e7:c2:d9:e7:e8:fd:62:6c:bd:3b:54:8d:ec:47:51: ad:ea:2d:ee:9b:dc:27:a4:58:30:98:79:d4:25:84:33:c1:3f: ae:a3:b9:a9:73:e4:b4:4b:d9:bf:ec:d4:15:e5:f3:db:4c:0a: e6:28:ce:93:51:0a:10:f2:b1:09:9a:16:70:8c:0f:e4:0d:ca: b7:62:08:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjUxMDE4MTg1MzQ0WhcNMjUxMDI1MTg1MzQ0WjAYMRYwFAYD VQQDEw02OGYzZTIzOC05NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot8u/ko0Cg/kPgSg2MmkjtsJMDZTXz9y2n7+7lqRa1sABgpM1D/fdDyzgviz cCwvBudxDJbWysp6GciVL7HIlfneaHMQYBQCEM1HVOOo7gw++8s3x6l3UNle5Tl8 Jwm6vMqUO3FtXJo1SCNsREAgs5WqiksRntLuREPipooWG6rvqVgGjJpwK6pGa/GS aQ0Jqnb0B2fUYW1K1o/CcMIbAOhGMUX4j+5CPCTO2zZiSAo5bonX8mN7IzqILe+L v2HM2kUTquzmMZjTMZroy38lRWoVvEEI6UBO9h8oh2okfN2gd/wo4yG10sZB0Awd kA6jyaB9GClXrwESWHSVhzKMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE1ysJv Zh8QCGuNNKJNGM2kp/PEMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjtk2U3q1F8iCK3nu9pTP/QPTS4pLR2LHY8qR13c/43egS4kgeScLP GQkXYAd1hvTlZkSDd7Mvj0TVaRsZTiuc3fGaIgE3b22MYZ+jn3HS5nPjFIYqz1QX 0th9z4XlL6OrSr8Vew0Daz6crxEw9wGmwVBkPbTaSzr6tky4fgufh994A2400fY/ 3THEJAhzgr+m5i9yisqDbunIIWKpnqRsVIuQodKPz6ucYL8tzy6VCdzPJ9F39dDn wtnn6P1ibL07VI3sR1Gt6i3um9wnpFgwmHnUJYQzwT+uo7mpc+S0S9m/7NQV5fPb TArmKM6TUQoQ8rEJmhZwjA/kDcq3Ygjq -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:41 2025 by rpki-client