$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: buS4C9ekRTA4yGxTWby60Kj/qpWDC+64w5sryGjbFG4= Subject key identifier: 60:A4:71:FE:35:91:CB:EE:1D:84:1F:39:3E:0C:75:F2:93:5A:31:29 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 011C Signing time: Sun 19 Oct 2025 07:46:34 +0000 Manifest this update: Sun 19 Oct 2025 07:46:33 +0000 Manifest next update: Sun 26 Oct 2025 07:46:33 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: v/e56nOTfuRk3uVXuzj6GICNgRbISOS/YGLj29JcTmA=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Oct 19 07:46:33 2025 GMT Not After : Oct 26 07:46:33 2025 GMT Subject: CN=68f49759-7150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:5b:d4:6e:e7:3f:22:67:d0:e0:50:24:ab: 33:84:03:d9:73:43:9a:f6:12:cc:6c:ab:cc:b4:d8: 3c:5d:4e:ae:b8:3d:e4:35:70:e9:9f:f8:02:03:e5: 9e:25:60:a5:33:9e:df:a1:3a:2c:8b:f7:84:e2:4a: 35:5d:89:e2:6a:1b:ad:f3:e7:ce:d4:7c:cc:e6:d0: d0:88:59:8e:35:b8:5c:ed:4d:98:3c:fa:ed:48:78: 55:8d:fc:49:07:a1:90:f3:03:a0:89:08:58:db:d2: ba:2f:5b:b4:08:cc:fb:f5:ba:bc:bb:c3:20:cc:63: db:98:67:28:39:a8:22:ff:51:03:3c:05:c4:25:0c: 98:a8:07:61:ae:c3:78:26:6d:cc:ea:d2:f2:33:fe: 6e:09:f5:43:d8:20:74:59:4d:5f:48:91:f2:42:9c: e4:1e:96:d8:1a:3a:09:a9:68:fc:72:14:25:48:11: db:6a:6f:08:42:f1:aa:66:d6:10:1f:02:43:50:39: 72:51:df:4c:66:8a:f9:c6:72:32:6e:8b:b8:69:3d: e6:96:ad:b9:1f:dd:34:ee:97:30:30:c8:fb:9f:f6: ac:1d:85:0f:f9:0d:e3:e0:ed:82:dd:b3:ce:94:78: 52:9f:27:d5:8f:60:91:a2:cc:8a:4c:cf:7c:ff:03: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:71:FE:35:91:CB:EE:1D:84:1F:39:3E:0C:75:F2:93:5A:31:29 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0b:c1:a4:62:27:26:c0:0c:96:4f:a0:84:9e:bf:7d:e0:d4: 9b:fa:a5:e0:b6:6b:39:ae:84:fe:54:cb:a7:25:67:7b:30:e6: 77:76:29:4d:e6:5d:5c:37:08:64:62:a5:dc:21:f9:bf:38:9b: 40:f1:49:5f:6f:1f:6f:56:70:47:ce:3f:61:20:5c:3b:25:c3: bd:68:60:71:3f:3f:81:1e:ff:e9:9d:4a:39:e7:d2:3e:06:64: d9:82:54:ad:51:e4:87:af:3a:06:f4:02:c4:01:c4:b6:41:78: b8:f7:94:b5:7a:f5:0d:9e:5b:88:f2:54:0d:2c:ed:e0:16:09: f9:71:4a:b9:dd:ec:5e:98:b2:c3:0f:da:bb:b6:aa:ba:74:c1: 7d:13:9f:0f:3b:ee:30:d7:5b:13:00:7b:6b:3f:32:8f:a8:c0: 80:8f:0b:57:1b:83:b6:96:fa:f3:62:9b:0b:9e:9a:d4:1a:ac: 00:46:b0:09:da:62:d2:bb:df:30:ff:07:1d:b1:c3:42:cc:c3: 0d:12:69:2e:25:37:96:07:5a:4d:cd:49:3f:72:86:98:67:57: b8:e4:21:1c:d0:51:40:b1:1e:9e:ab:74:7d:0f:43:56:4b:30: 8a:a9:c9:ce:c0:b2:90:21:a8:c5:57:24:d2:fe:94:9f:49:23: 64:9e:8d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjUxMDE5MDc0NjMzWhcNMjUxMDI2MDc0NjMzWjAYMRYwFAYD VQQDEw02OGY0OTc1OS03MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNpb1G7nPyJn0OBQJKszhAPZc0Oa9hLMbKvMtNg8XU6uuD3kNXDpn/gCA+We JWClM57foTosi/eE4ko1XYniahut8+fO1HzM5tDQiFmONbhc7U2YPPrtSHhVjfxJ B6GQ8wOgiQhY29K6L1u0CMz79bq8u8MgzGPbmGcoOagi/1EDPAXEJQyYqAdhrsN4 Jm3M6tLyM/5uCfVD2CB0WU1fSJHyQpzkHpbYGjoJqWj8chQlSBHbam8IQvGqZtYQ HwJDUDlyUd9MZor5xnIybou4aT3mlq25H9007pcwMMj7n/asHYUP+Q3j4O2C3bPO lHhSnyfVj2CRosyKTM98/wMu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCkcf41 kcvuHYQfOT4MdfKTWjEpMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiC8GkYicmwAyWT6CEnr994NSb+qXgtms5roT+VMunJWd7MOZ3dilN 5l1cNwhkYqXcIfm/OJtA8Ulfbx9vVnBHzj9hIFw7JcO9aGBxPz+BHv/pnUo559I+ BmTZglStUeSHrzoG9ALEAcS2QXi495S1evUNnluI8lQNLO3gFgn5cUq53exemLLD D9q7tqq6dMF9E58PO+4w11sTAHtrPzKPqMCAjwtXG4O2lvrzYpsLnprUGqwARrAJ 2mLSu98w/wcdscNCzMMNEmkuJTeWB1pNzUk/coaYZ1e45CEc0FFAsR6eq3R9D0NW SzCKqcnOwLKQIajFVyTS/pSfSSNkno1X -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:31 2025 by rpki-client