$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: vCBt9i/8LxhrI0WnpKqT9DJVXc8gxp+f+lWPEncsHew= Subject key identifier: 8C:B0:A1:8A:E4:22:63:82:0C:FA:EE:2D:01:ED:62:5B:32:49:3D:2C Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 1002 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 0FF3 Signing time: Sat 18 Oct 2025 18:03:54 +0000 Manifest this update: Sat 18 Oct 2025 18:03:53 +0000 Manifest next update: Sat 25 Oct 2025 18:03:53 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: 0f0R5FrEE20JDiH6mWDH5hfgatKpgOUyQlJyZnT/Dso=) 2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: +yhzJzGn+WxW2d4EtUHBstgfBIaoIoaYoJwg0N+/u2I=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4098 (0x1002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Oct 18 18:03:53 2025 GMT Not After : Oct 25 18:03:53 2025 GMT Subject: CN=68f3d689-e39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:34:f0:0d:08:e8:7d:0a:ad:e1:09:63:d0: 22:58:e1:e3:d9:03:bb:a5:dd:69:54:52:e4:01:54: 22:68:43:0e:05:28:48:f2:8d:cf:cb:e5:21:11:24: d8:1e:ab:15:2a:cd:c0:00:06:43:e0:95:dd:43:66: 1b:42:a6:29:98:90:a5:dc:73:26:a4:6d:c6:f5:53: c4:09:f8:b6:e9:eb:4d:6f:de:36:d1:3c:0f:22:63: f9:34:93:79:88:1c:8d:6f:8a:2d:a0:8d:ea:2b:b8: 1e:d1:b5:08:25:32:b8:04:c1:d0:58:27:b3:45:e0: 79:5f:cb:85:d4:1c:4b:9c:82:e8:da:08:6f:83:4e: f0:0f:c9:ed:a5:6c:c7:48:f6:a4:3e:ec:a5:70:ac: 13:c5:03:4c:e4:ae:c1:a7:fd:a3:8c:5a:6f:96:4d: c6:0e:45:31:ef:55:85:96:64:71:de:c1:37:82:79: 65:9d:c0:0d:11:82:8d:78:a2:cc:09:16:46:f6:f6: 19:16:06:45:1e:f0:57:1a:a0:55:d4:12:24:a3:2b: a4:0e:ba:89:1f:0e:d0:e1:e3:9c:37:75:cc:55:e0: d6:eb:61:2f:02:3e:21:d0:2c:94:4b:ec:25:67:c6: fe:27:69:6d:d0:5e:3b:a9:e6:c6:f3:05:c1:f2:e3: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:A1:8A:E4:22:63:82:0C:FA:EE:2D:01:ED:62:5B:32:49:3D:2C X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:83:50:04:fd:0f:39:d2:f3:01:1f:79:1f:7e:15:0a:a4:99: 01:24:46:97:66:87:77:83:3d:30:2a:02:93:40:e6:c6:f5:e9: c3:ee:63:88:9e:2b:2a:bd:77:df:23:c2:22:98:f3:a3:f1:73: 5f:23:e4:8b:83:7f:54:3c:10:eb:f1:a6:a8:dc:f5:4c:84:45: bc:e3:68:7b:00:d4:7a:34:83:e1:6c:81:03:2b:91:e9:eb:86: c4:ce:a0:12:76:52:3f:34:15:58:06:26:ed:9a:4a:80:6d:b1: 08:86:52:4d:35:ee:f8:e3:16:c7:8f:8c:92:b9:32:23:fc:e9: bf:1a:2b:54:54:ef:eb:0a:26:22:f2:d3:6b:3d:bb:11:ab:7e: 2d:f8:06:73:7b:77:94:eb:10:6e:5c:97:23:bc:29:73:e5:e8: 5c:19:39:13:95:b5:09:aa:89:d7:f9:3e:40:eb:ed:c9:c5:a5: cf:1a:9e:7a:ba:84:8a:97:af:22:02:ba:de:b5:cf:e0:55:1b: 8e:1b:46:88:5e:ed:21:1b:5d:32:93:40:14:e1:4d:db:62:c9: b5:8d:87:8c:b6:b4:2c:ab:fb:bf:ec:4c:6c:7a:9d:68:4b:59: 7c:38:8d:89:bf:af:c6:48:0f:c8:a2:63:09:25:cd:94:15:8f: c4:75:ee:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUxMDE4MTgwMzUzWhcNMjUxMDI1MTgwMzUzWjAYMRYwFAYD VQQDEw02OGYzZDY4OS1lMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp008A0I6H0KreEJY9AiWOHj2QO7pd1pVFLkAVQiaEMOBShI8o3Py+UhESTY HqsVKs3AAAZD4JXdQ2YbQqYpmJCl3HMmpG3G9VPECfi26etNb9420TwPImP5NJN5 iByNb4otoI3qK7ge0bUIJTK4BMHQWCezReB5X8uF1BxLnILo2ghvg07wD8ntpWzH SPakPuylcKwTxQNM5K7Bp/2jjFpvlk3GDkUx71WFlmRx3sE3gnllncANEYKNeKLM CRZG9vYZFgZFHvBXGqBV1BIkoyukDrqJHw7Q4eOcN3XMVeDW62EvAj4h0CyUS+wl Z8b+J2lt0F47qebG8wXB8uNoTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIywoYrk ImOCDPruLQHtYlsyST0sMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyg1AE/Q850vMBH3kffhUKpJkBJEaXZod3gz0wKgKTQObG9enD7mOI nisqvXffI8IimPOj8XNfI+SLg39UPBDr8aao3PVMhEW842h7ANR6NIPhbIEDK5Hp 64bEzqASdlI/NBVYBibtmkqAbbEIhlJNNe744xbHj4ySuTIj/Om/GitUVO/rCiYi 8tNrPbsRq34t+AZze3eU6xBuXJcjvClz5ehcGTkTlbUJqonX+T5A6+3JxaXPGp56 uoSKl68iArretc/gVRuOG0aIXu0hG10yk0AU4U3bYsm1jYeMtrQsq/u/7Exsep1o S1l8OI2Jv6/GSA/IomMJJc2UFY/Ede6P -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:21 2025 by rpki-client