$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft File: o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json) Hash identifier: Izt8F9GbKUxXWM9xrihjmjKY6tCDpuoIUzjV416CiME= Subject key identifier: DD:0C:3C:48:98:E4:4E:6F:DA:1E:BF:DD:0C:A0:ED:B5:EB:69:51:7C Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 Certificate issuer: /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft Manifest number: 0430 Signing time: Sun 19 Oct 2025 02:11:31 +0000 Manifest this update: Sun 19 Oct 2025 02:11:31 +0000 Manifest next update: Sun 26 Oct 2025 02:11:31 +0000 Files and hashes: 1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: M5Xm/I+w/LKfUnjlCHgY0iRgLVNwA9s2Okg+IM/iWC4=) 2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 7VcZosPp1uH1LHkRjpyCPhzaiPyFOlncH9YUjxzCpg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Validity Not Before: Oct 19 02:11:31 2025 GMT Not After : Oct 26 02:11:31 2025 GMT Subject: CN=68f448d3-0ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d0:bb:23:b1:59:55:d1:e9:93:50:42:76:1a: b1:55:48:a1:6e:4b:d9:56:4e:c5:39:46:b1:d1:3a: ea:1d:04:68:82:ee:12:df:3a:e5:56:d5:5b:55:9c: 38:d1:6d:d2:cc:d7:1c:73:1f:81:e2:49:9d:be:f3: 15:83:0f:86:3a:68:11:1e:88:7e:d5:e7:d4:b6:39: 2a:2b:dd:57:a1:a7:a6:9b:73:a3:b4:18:3a:01:c9: 91:fd:c0:e1:63:d1:2e:ac:86:8c:09:0e:38:25:57: 86:8a:6c:3e:43:91:f8:c3:df:2b:17:7f:13:b7:67: 4e:82:bc:0e:34:c0:1a:2c:af:c0:6e:e5:e0:92:04: ef:27:8e:fd:62:09:ad:0c:a6:50:95:1c:9a:af:65: 2d:53:40:98:ad:9b:7a:ea:83:f2:43:63:5e:46:16: 4c:ba:52:ae:70:39:7b:f6:7e:2c:76:ec:bb:bd:d1: a1:32:e8:64:08:52:37:c3:97:6f:81:ba:e3:5d:8e: 01:8c:70:93:15:dc:02:93:05:07:58:cb:09:f0:bc: a2:1e:66:07:3a:d6:f1:fe:1a:ea:70:30:c3:2c:c3: 5c:90:f1:85:76:22:d5:3d:11:d5:e1:74:b1:7c:e0: 85:e8:dd:cf:c7:39:ae:b2:e4:ea:14:f5:c6:7a:64: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:3C:48:98:E4:4E:6F:DA:1E:BF:DD:0C:A0:ED:B5:EB:69:51:7C X509v3 Authority Key Identifier: keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:dd:41:2d:2d:78:b3:95:3d:ab:86:47:5f:ae:a0:73:0c:68: ce:7f:37:ce:80:4a:49:fe:be:03:a2:ef:12:be:a1:9b:c2:cf: 4c:2c:40:5b:c7:32:e0:e7:8c:d1:58:5a:f7:46:32:bf:df:2f: 00:b4:e2:80:fa:43:a0:d6:da:15:35:b7:55:29:b9:23:7b:13: 2e:5a:79:f7:aa:3a:dd:16:63:46:01:f4:a2:3a:50:7e:46:58: 5a:2b:ac:18:da:cb:af:d5:2f:3a:a6:4f:44:01:64:c4:79:58: 80:80:e1:f0:23:d4:3f:41:62:f8:34:37:bd:02:44:0a:8a:f5: a6:79:03:04:b5:a0:78:53:72:0e:b6:ee:9f:c4:68:c4:e0:7d: 85:f7:23:8c:21:d6:c6:21:d1:ee:55:bc:6e:ce:7e:63:84:91: 78:70:91:28:38:a5:31:e2:d5:1f:f5:ff:e1:54:ec:a7:e1:0e: f5:5c:8b:d6:6d:bc:66:9c:51:15:11:bb:7e:ed:e1:aa:0d:d1: 68:47:ae:93:2d:a9:e5:63:00:44:59:85:5c:96:67:9d:e9:76: b6:59:15:06:fe:eb:10:88:11:f0:57:e2:fb:ac:8f:69:c7:49: ab:20:f5:9c:f3:b5:81:5e:ab:1b:34:0b:39:81:64:7d:76:29: 47:79:d9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxNUQxMTAvBgNVBAUTKEEzOThERkQ0RDM5NzVFQUI5NkZEMzgwMzM5NjgyNDZF NDc1RTI4QjMwHhcNMjUxMDE5MDIxMTMxWhcNMjUxMDI2MDIxMTMxWjAYMRYwFAYD VQQDEw02OGY0NDhkMy0wZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NC7I7FZVdHpk1BCdhqxVUihbkvZVk7FOUax0TrqHQRogu4S3zrlVtVbVZw4 0W3SzNcccx+B4kmdvvMVgw+GOmgRHoh+1efUtjkqK91Xoaemm3OjtBg6AcmR/cDh Y9EurIaMCQ44JVeGimw+Q5H4w98rF38Tt2dOgrwONMAaLK/AbuXgkgTvJ479Ygmt DKZQlRyar2UtU0CYrZt66oPyQ2NeRhZMulKucDl79n4sduy7vdGhMuhkCFI3w5dv gbrjXY4BjHCTFdwCkwUHWMsJ8LyiHmYHOtbx/hrqcDDDLMNckPGFdiLVPRHV4XSx fOCF6N3PxzmusuTqFPXGemS0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0MPEiY 5E5v2h6/3Qyg7bXraVF8MB8GA1UdIwQYMBaAFKOY39TTl16rlv04AzloJG5HXiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTE1RC83MTA5RUZDNDdE QzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhxdVdfVGdET1dna2JrZGVL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281amYxTk9YWHF1V19UZ0RPV2drYmtkZUtMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTE1RC83MTA5RUZDNDdEQzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhx dVdfVGdET1dna2JrZGVLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm3UEtLXizlT2rhkdfrqBzDGjOfzfOgEpJ/r4Dou8SvqGbws9MLEBb xzLg54zRWFr3RjK/3y8AtOKA+kOg1toVNbdVKbkjexMuWnn3qjrdFmNGAfSiOlB+ RlhaK6wY2suv1S86pk9EAWTEeViAgOHwI9Q/QWL4NDe9AkQKivWmeQMEtaB4U3IO tu6fxGjE4H2F9yOMIdbGIdHuVbxuzn5jhJF4cJEoOKUx4tUf9f/hVOyn4Q71XIvW bbxmnFEVEbt+7eGqDdFoR66TLanlYwBEWYVclmed6Xa2WRUG/usQiBHwV+L7rI9p x0mrIPWc87WBXqsbNAs5gWR9dilHednK -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:36 2025 by rpki-client