$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json) Hash identifier: Xpd4462OID9Za5dzzPzb3pLvwmqwLFNjerHyzee291E= Subject key identifier: 95:72:D5:3B:43:32:3A:F5:FB:68:41:1E:26:E0:1E:2E:EB:0E:D2:90 Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 04:57:58 +0000 Manifest this update: Sun 19 Oct 2025 04:57:58 +0000 Manifest next update: Sun 26 Oct 2025 04:57:58 +0000 Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: BGFVFtFSuMzWfopkAAmZnwiviju7J0DAryps6z6wuRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Validity Not Before: Oct 19 04:57:58 2025 GMT Not After : Oct 26 04:57:58 2025 GMT Subject: CN=68f46fd6-a51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:b9:9d:ed:c9:c5:bc:ff:f5:08:18:3c:f1: ca:a1:14:cd:0a:02:63:f7:21:fb:5c:a3:d9:f0:a5: a7:a8:37:0f:17:13:d3:71:3e:80:d7:c8:ed:cf:4e: 48:46:73:74:61:5e:18:c3:bb:e2:ab:62:ac:a7:ad: 6d:04:57:8f:31:c3:ab:96:99:ac:78:6b:73:16:7e: 28:60:9c:97:0a:2a:56:a1:82:b3:97:2c:71:95:65: c8:a2:f2:ab:1b:1a:b5:ec:64:c6:51:79:9a:d7:ea: 61:f7:0a:c3:01:31:ba:bd:73:c0:9e:54:34:4e:a1: ed:d5:45:cf:2d:8b:cf:9b:ea:d9:8b:cd:14:bf:ea: 29:07:0b:77:36:eb:30:88:96:e7:75:9a:d9:a8:06: 3b:51:8b:59:11:c7:0d:4e:08:6f:0b:2e:36:15:5c: dc:bc:d7:70:70:07:e0:c2:f2:9d:33:d4:e6:0f:72: e9:b6:65:55:3a:ab:40:e0:f6:40:81:20:74:51:32: b3:90:c3:4b:29:f0:11:37:76:f6:d1:58:8c:09:34: 5f:a2:06:24:15:fe:51:6a:49:9e:c7:ed:5e:53:e4: b7:23:9f:f5:b3:38:ca:58:25:02:1f:2a:4a:55:6e: 5d:aa:a1:30:74:47:3b:b3:ee:a1:91:e6:91:15:97: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:D5:3B:43:32:3A:F5:FB:68:41:1E:26:E0:1E:2E:EB:0E:D2:90 X509v3 Authority Key Identifier: keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:43:fc:11:36:a8:b4:2b:f7:79:67:7a:c3:ab:46:84:d8: 9e:fe:31:5c:0a:5b:e4:94:44:10:b9:ec:c0:b2:f2:eb:c6:01: ec:b0:4f:96:52:0b:45:35:ed:fe:93:d7:cf:89:65:92:f1:6a: 80:1b:b7:8d:ca:22:7b:55:62:3b:c2:21:f4:c3:ce:f6:7e:8e: 7b:00:5a:45:4a:c0:54:8c:2d:00:51:63:63:ec:82:9c:82:c0: 7e:39:f2:8e:b1:ce:d3:60:c3:8f:02:42:1d:6a:4e:64:b1:00: fd:65:71:e0:96:63:6a:e2:39:7e:f1:0b:e1:71:5b:2b:d3:f7: fd:b1:6a:96:c7:02:0f:69:bd:e0:3e:f5:2b:fb:c1:22:96:27: b7:0f:b3:d8:80:05:29:ff:8d:5b:f8:d4:1c:33:3d:1e:87:07: a6:d9:fd:36:ea:5f:48:44:75:75:74:f0:38:cc:06:d6:40:7b: e0:90:79:b4:25:1a:ec:92:d3:68:51:63:3a:e3:22:9a:6c:f0: 58:33:4a:e2:a2:8e:f5:0e:38:59:e5:9d:af:12:e1:f3:9b:f1: 29:49:f0:89:4b:6e:c5:c7:fb:8f:b0:8c:9d:8d:c9:0d:38:23: b8:4a:0e:fc:49:19:31:cc:3a:dc:20:5b:f6:b4:ee:6c:f5:f3: 9c:8c:99:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDNCQTQ4QzRBRkIwMEY3MzM0MjI0QzA1MTUzQUFDNkYy Njg2ODQzQjcwHhcNMjUxMDE5MDQ1NzU4WhcNMjUxMDI2MDQ1NzU4WjAYMRYwFAYD VQQDEw02OGY0NmZkNi1hNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV65ne3Jxbz/9QgYPPHKoRTNCgJj9yH7XKPZ8KWnqDcPFxPTcT6A18jtz05I RnN0YV4Yw7viq2Ksp61tBFePMcOrlpmseGtzFn4oYJyXCipWoYKzlyxxlWXIovKr Gxq17GTGUXma1+ph9wrDATG6vXPAnlQ0TqHt1UXPLYvPm+rZi80Uv+opBwt3Nusw iJbndZrZqAY7UYtZEccNTghvCy42FVzcvNdwcAfgwvKdM9TmD3LptmVVOqtA4PZA gSB0UTKzkMNLKfARN3b20ViMCTRfogYkFf5Rakmex+1eU+S3I5/1szjKWCUCHypK VW5dqqEwdEc7s+6hkeaRFZd11wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVy1TtD Mjr1+2hBHibgHi7rDtKQMB8GA1UdIwQYMBaAFDukjEr7APczQiTAUVOqxvJoaEO3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC84MEI4MTcxQUNF RDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6TkNKTUJSVTZyRzhtaG9R N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL082U01TdnNBOXpOQ0pNQlJVNnJHOG1ob1E3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC84MEI4MTcxQUNFRDExMUVFOEJGNjRCNzNDNEY5QUUwMi9PNlNNU3ZzQTl6 TkNKTUJSVTZyRzhtaG9RN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpkEP8ETaotCv3eWd6w6tGhNie/jFcClvklEQQuezAsvLrxgHssE+W UgtFNe3+k9fPiWWS8WqAG7eNyiJ7VWI7wiH0w872fo57AFpFSsBUjC0AUWNj7IKc gsB+OfKOsc7TYMOPAkIdak5ksQD9ZXHglmNq4jl+8QvhcVsr0/f9sWqWxwIPab3g PvUr+8Eilie3D7PYgAUp/41b+NQcMz0ehwem2f026l9IRHV1dPA4zAbWQHvgkHm0 JRrsktNoUWM64yKabPBYM0rioo71DjhZ5Z2vEuHzm/EpSfCJS27Fx/uPsIydjckN OCO4Sg78SRkxzDrcIFv2tO5s9fOcjJmw -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:05 2025 by rpki-client