$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: PpxafXP6qj7LO/NQ2omjJ5SCglK9PEcq7a5yjK9XlMw= Subject key identifier: 11:76:A7:CC:F7:51:44:C2:B9:21:73:EF:15:FE:8D:C8:18:15:05:DF Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 94 Signing time: Sun 19 Oct 2025 09:56:34 +0000 Manifest this update: Sun 19 Oct 2025 09:56:34 +0000 Manifest next update: Sun 26 Oct 2025 09:56:34 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: 6v5OXw7Q1MiDu76z83uMP3colRFA5dlarVGlLCjx04c=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Oct 19 09:56:34 2025 GMT Not After : Oct 26 09:56:34 2025 GMT Subject: CN=68f4b5d2-99ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:f2:fe:d1:99:9e:11:e7:cc:8f:78:51:ce: 32:69:fa:a9:e3:41:0c:03:92:93:9a:bf:99:c0:36: 56:b6:d9:11:15:ec:0b:be:3c:45:f6:35:04:9b:ec: 8e:d2:bc:0c:b0:d2:9d:4f:35:c9:b8:6e:2c:45:aa: 80:45:20:0c:30:34:a1:33:88:94:d3:1f:fd:8d:71: 14:e0:d3:92:2d:b9:1f:58:94:70:9b:03:4d:3d:ae: 1f:77:e8:d9:66:dd:25:07:4d:43:ba:1e:58:90:24: ea:79:a9:fd:be:08:c3:2e:8d:1c:b9:38:b1:35:f9: 60:48:c4:42:77:8d:f2:38:13:7b:36:20:20:e0:b8: 85:1b:fa:6c:bb:7b:e8:be:8b:aa:4c:a3:3c:d0:3e: 27:da:75:97:fd:b3:71:68:0b:13:2b:ab:ef:4e:cb: 2c:1d:aa:54:db:35:5c:d0:ef:58:5e:76:25:cf:90: 7c:49:d5:7e:fd:2f:83:6d:f9:ff:e2:74:63:77:49: 7e:50:9e:30:dc:1c:da:73:ac:56:d6:b2:58:cb:42: c6:d9:ad:d2:d7:7a:a7:f7:99:a4:c3:0a:9f:9e:60: 10:24:c2:06:bc:99:0b:61:a0:07:7a:43:e2:02:55: 37:82:9a:25:cf:d7:c7:e3:c2:b4:b4:20:c8:90:3a: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:76:A7:CC:F7:51:44:C2:B9:21:73:EF:15:FE:8D:C8:18:15:05:DF X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:87:dd:85:04:aa:df:d0:39:81:00:a3:22:1e:b6:60:5a:e5: 2d:8f:5f:07:70:bf:d4:f9:5a:44:5f:3a:c4:b4:66:ef:36:99: 8a:83:4f:a3:ab:4e:54:13:95:59:78:f4:08:38:cd:29:d0:6e: 00:3e:f3:d8:ce:a4:1a:b1:2b:82:83:e3:a0:d7:15:fc:e8:d9: 8a:d1:77:2a:cf:44:a9:a0:f5:19:a9:c8:e5:47:76:76:49:8e: 9f:88:dd:67:c8:45:5f:a9:d5:85:4e:17:df:ec:7e:2a:81:73: ed:08:d4:18:ce:5c:fd:46:ea:ec:d7:ba:d6:2b:e3:a6:7e:c0: 5c:f2:ed:d1:b2:a5:64:e4:ac:e4:8d:48:56:97:80:c7:c2:fe: 47:32:88:44:d3:9f:da:4e:60:c6:6d:0e:50:e2:29:03:e4:1a: 54:9c:25:35:b0:fb:73:07:50:95:01:62:ae:3a:e9:93:a3:29: 54:89:34:21:78:c6:aa:86:eb:25:3f:92:45:cc:a0:ae:44:9c: 85:1e:85:e7:f2:25:87:29:68:5c:fa:75:c2:c7:93:6e:32:42: c9:88:36:6e:75:e7:3f:5a:04:fe:86:97:ec:29:68:03:4d:54: b3:b1:46:b9:10:5e:2f:f3:35:6d:5a:25:a0:8f:4e:70:45:66: d2:b2:a8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjUxMDE5MDk1NjM0WhcNMjUxMDI2MDk1NjM0WjAYMRYwFAYD VQQDEw02OGY0YjVkMi05OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6ny/tGZnhHnzI94Uc4yafqp40EMA5KTmr+ZwDZWttkRFewLvjxF9jUEm+yO 0rwMsNKdTzXJuG4sRaqARSAMMDShM4iU0x/9jXEU4NOSLbkfWJRwmwNNPa4fd+jZ Zt0lB01Duh5YkCTqean9vgjDLo0cuTixNflgSMRCd43yOBN7NiAg4LiFG/psu3vo vouqTKM80D4n2nWX/bNxaAsTK6vvTsssHapU2zVc0O9YXnYlz5B8SdV+/S+Dbfn/ 4nRjd0l+UJ4w3Bzac6xW1rJYy0LG2a3S13qn95mkwwqfnmAQJMIGvJkLYaAHekPi AlU3gpolz9fH48K0tCDIkDqjPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF2p8z3 UUTCuSFz7xX+jcgYFQXfMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWh92FBKrf0DmBAKMiHrZgWuUtj18HcL/U+VpEXzrEtGbvNpmKg0+j q05UE5VZePQIOM0p0G4APvPYzqQasSuCg+Og1xX86NmK0Xcqz0SpoPUZqcjlR3Z2 SY6fiN1nyEVfqdWFThff7H4qgXPtCNQYzlz9Rurs17rWK+OmfsBc8u3RsqVk5Kzk jUhWl4DHwv5HMohE05/aTmDGbQ5Q4ikD5BpUnCU1sPtzB1CVAWKuOumToylUiTQh eMaqhuslP5JFzKCuRJyFHoXn8iWHKWhc+nXCx5NuMkLJiDZudec/WgT+hpfsKWgD TVSzsUa5EF4v8zVtWiWgj05wRWbSsqiD -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:41 2025 by rpki-client