$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: rMHLgkTA2ys/Qj8EFcbgSH6QKApEkuUkPVXGhD9xGoM= Subject key identifier: E3:8F:31:DF:90:45:DA:6C:91:1A:05:62:18:B7:8B:AA:37:0F:F8:BE Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: B6 Signing time: Sun 19 Oct 2025 09:14:10 +0000 Manifest this update: Sun 19 Oct 2025 09:14:09 +0000 Manifest next update: Sun 26 Oct 2025 09:14:09 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: Ui+OHYKSQYY8LNOgmoTxtS3C21JbsUvBhX9TpLX/l6w=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Oct 19 09:14:09 2025 GMT Not After : Oct 26 09:14:09 2025 GMT Subject: CN=68f4abe1-d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:1a:a3:ff:a5:0f:fa:0f:f4:ff:fd:a0:63: 4b:bc:8a:c1:46:8f:1e:46:b1:d8:46:bd:db:af:50: c2:6c:6c:b2:91:32:4a:05:fb:2b:81:83:16:6c:96: e6:27:c0:00:b2:c4:75:6c:5f:62:16:1c:8f:b1:a0: 89:8c:03:ee:b2:fe:52:b0:68:76:42:76:79:81:ab: 8e:22:78:20:0f:9d:8c:99:84:a2:5e:09:a4:ff:b0: 51:90:fc:f9:30:63:8f:34:3f:12:d7:d2:aa:46:b6: cb:69:64:c1:df:5b:d4:12:40:d4:a4:ee:88:3f:73: cc:59:5d:63:08:b1:66:e7:64:b0:2f:5b:d4:4b:27: 0a:d7:0b:30:af:10:79:b8:cf:86:0c:84:74:3c:f6: df:11:b9:eb:f9:c4:4c:b8:36:e7:d8:67:a2:7f:ac: 2b:42:29:29:cf:d7:64:b1:80:ba:12:c0:47:61:84: 80:1c:2b:01:db:00:21:8a:30:38:89:d8:a6:0e:e8: 43:d8:81:7f:68:e3:3c:13:22:54:6f:1c:e5:53:64: 32:89:ab:3e:bf:9c:c2:74:33:b8:54:1c:29:28:25: b9:a4:de:a8:62:e8:d8:3e:39:1c:c8:2c:1d:c4:74: b3:a0:79:70:03:d3:31:28:52:1f:cf:76:ce:86:a5: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:31:DF:90:45:DA:6C:91:1A:05:62:18:B7:8B:AA:37:0F:F8:BE X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:de:02:e9:81:35:7c:67:59:42:fa:c0:41:8c:3d:89:e3:8e: a4:c6:68:70:3b:3b:16:f0:77:41:7f:79:df:58:15:e5:ea:4d: 6b:6e:03:42:7a:0a:fa:32:5f:e7:11:f0:7e:66:ff:b8:59:1c: 63:13:a7:22:d1:f3:d7:78:45:22:25:fe:80:62:60:c2:85:58: 0f:48:53:1f:56:c0:40:2c:52:6e:29:f6:94:f6:96:97:14:ac: 76:e1:65:f7:36:33:b5:3f:80:a8:94:3c:82:6b:49:64:c1:ac: 39:62:ef:65:3c:21:39:9e:d1:75:3e:b6:d2:c7:2d:59:e3:a9: 39:73:87:e0:97:75:bc:03:a0:4a:b9:92:48:19:08:04:2b:ec: 9c:7f:8c:60:fd:87:08:9a:34:1e:47:34:b0:6c:71:70:98:28: 8e:77:5a:ee:c0:fb:51:f5:5c:fe:3d:92:75:34:68:f5:a6:8f: 71:0b:01:16:28:a2:06:d9:1a:cb:80:9e:d5:8b:d2:80:79:21: 7b:ba:79:ea:aa:0e:d0:6a:8e:fa:2b:1e:1d:62:c1:e7:ef:58: fa:c0:5e:12:7f:27:d5:07:eb:2b:eb:6c:15:da:4d:07:87:b6: e7:8c:fd:3f:87:ce:c8:26:af:ba:c4:9d:26:f1:14:cd:93:16: fb:d1:e6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjUxMDE5MDkxNDA5WhcNMjUxMDI2MDkxNDA5WjAYMRYwFAYD VQQDEw02OGY0YWJlMS1kMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHQao/+lD/oP9P/9oGNLvIrBRo8eRrHYRr3br1DCbGyykTJKBfsrgYMWbJbm J8AAssR1bF9iFhyPsaCJjAPusv5SsGh2QnZ5gauOInggD52MmYSiXgmk/7BRkPz5 MGOPND8S19KqRrbLaWTB31vUEkDUpO6IP3PMWV1jCLFm52SwL1vUSycK1wswrxB5 uM+GDIR0PPbfEbnr+cRMuDbn2Geif6wrQikpz9dksYC6EsBHYYSAHCsB2wAhijA4 idimDuhD2IF/aOM8EyJUbxzlU2Qyias+v5zCdDO4VBwpKCW5pN6oYujYPjkcyCwd xHSzoHlwA9MxKFIfz3bOhqUGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOPMd+Q RdpskRoFYhi3i6o3D/i+MB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC13gLpgTV8Z1lC+sBBjD2J446kxmhwOzsW8HdBf3nfWBXl6k1rbgNC egr6Ml/nEfB+Zv+4WRxjE6ci0fPXeEUiJf6AYmDChVgPSFMfVsBALFJuKfaU9paX FKx24WX3NjO1P4ColDyCa0lkwaw5Yu9lPCE5ntF1PrbSxy1Z46k5c4fgl3W8A6BK uZJIGQgEK+ycf4xg/YcImjQeRzSwbHFwmCiOd1ruwPtR9Vz+PZJ1NGj1po9xCwEW KKIG2RrLgJ7Vi9KAeSF7unnqqg7Qao76Kx4dYsHn71j6wF4SfyfVB+sr62wV2k0H h7bnjP0/h87IJq+6xJ0m8RTNkxb70ebe -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:46 2025 by rpki-client