$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: NQAkdtJx2bjDi/e7NoauTmbnwqp8b+RqRRVwi3y+IBg= Subject key identifier: 32:BE:A9:4E:B5:73:BF:90:FA:C8:87:0B:B3:79:72:D0:25:C8:4C:66 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01A0 Signing time: Sun 19 Oct 2025 05:53:50 +0000 Manifest this update: Sun 19 Oct 2025 05:53:50 +0000 Manifest next update: Sun 26 Oct 2025 05:53:50 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: WrImLugv9pA1b3IwBymYlx7lSc4KtozEBHwRjSfbHhk=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Oct 19 05:53:50 2025 GMT Not After : Oct 26 05:53:50 2025 GMT Subject: CN=68f47cee-a08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:86:9f:0a:77:ef:c0:ce:17:01:47:3f:22: fa:06:74:2e:c0:dd:84:1a:6d:68:c4:29:c1:49:b7: d2:4c:79:01:b9:00:7e:bc:d2:1d:ec:45:91:a6:f0: 87:8e:d3:3d:7e:ad:58:56:50:98:bc:75:b9:ff:3f: 56:65:84:74:9e:bf:49:40:b0:9e:42:5f:7a:e6:3d: 41:0b:13:98:d2:e7:b5:d4:7c:50:63:9f:a0:b9:34: 15:e7:44:66:48:b2:22:19:10:15:a8:f1:41:09:33: b4:f6:bc:1b:16:f8:2c:17:03:55:87:d3:42:19:03: 28:cd:f2:fe:63:fb:da:1e:0d:d4:cf:06:2d:f7:17: cc:d5:28:e0:bd:a8:08:01:2d:cf:13:5a:e8:62:6b: 10:c5:89:98:74:e2:44:a5:e8:f6:9e:8e:af:69:80: 0d:1f:42:80:db:3f:ee:c0:e7:c4:3b:65:7f:7f:93: bf:0d:7e:c4:03:4b:84:ea:7d:73:a0:4b:d8:6e:c9: 57:5f:31:29:de:f4:a7:32:0b:65:a3:68:da:00:bc: d5:a5:da:4c:39:18:1e:ea:0f:3a:07:e2:b9:98:74: 49:08:f8:0b:58:ff:08:27:21:be:5c:52:e5:2e:e8: f6:f8:b7:16:e2:14:fe:70:bb:57:ce:b6:b6:86:a6: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:A9:4E:B5:73:BF:90:FA:C8:87:0B:B3:79:72:D0:25:C8:4C:66 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fc:70:97:08:80:3b:6f:fd:19:34:81:bc:f4:ba:63:bd:fe: ff:59:1c:92:87:ee:98:f3:03:82:0c:8a:e9:03:5a:63:9f:73: 75:15:4a:d3:6f:7d:f0:22:5b:c9:ae:96:48:50:67:fe:cd:d7: 0e:04:33:f0:35:76:cd:5a:6c:84:5c:fa:30:85:76:17:3b:dd: b3:17:7c:1c:f4:ef:c3:f2:cc:b1:67:15:7d:7b:3e:d2:59:03: ab:32:de:bc:16:0b:4e:e6:a0:1d:73:29:71:e8:f6:85:af:9e: 8a:76:87:b5:af:a4:e0:03:ad:26:d4:4f:e9:ab:72:d6:42:9e: 29:fd:f0:e7:94:7b:25:8d:4c:34:bc:b1:6d:d6:38:88:28:77: 18:19:90:89:ca:95:8c:a9:ac:b5:ec:af:75:e3:fd:f6:9c:13: 30:bb:de:28:d2:da:0a:2b:be:8e:82:d2:03:93:92:fd:87:b1: 2b:17:ab:92:31:91:2a:f3:f1:77:fe:db:ac:d3:b8:9f:ae:71: e7:66:93:0b:a3:dd:94:41:13:ac:f6:c6:b0:04:39:38:b1:86: aa:37:5a:87:9a:ef:fa:ba:6f:77:50:34:65:b4:06:d0:57:21: 06:f4:91:bf:62:b8:d5:8f:29:46:58:0a:a4:71:49:2f:18:b1: da:dd:eb:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUxMDE5MDU1MzUwWhcNMjUxMDI2MDU1MzUwWjAYMRYwFAYD VQQDEw02OGY0N2NlZS1hMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl2Gnwp378DOFwFHPyL6BnQuwN2EGm1oxCnBSbfSTHkBuQB+vNId7EWRpvCH jtM9fq1YVlCYvHW5/z9WZYR0nr9JQLCeQl965j1BCxOY0ue11HxQY5+guTQV50Rm SLIiGRAVqPFBCTO09rwbFvgsFwNVh9NCGQMozfL+Y/vaHg3UzwYt9xfM1SjgvagI AS3PE1roYmsQxYmYdOJEpej2no6vaYANH0KA2z/uwOfEO2V/f5O/DX7EA0uE6n1z oEvYbslXXzEp3vSnMgtlo2jaALzVpdpMORge6g86B+K5mHRJCPgLWP8IJyG+XFLl Luj2+LcW4hT+cLtXzra2hqYYkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK+qU61 c7+Q+siHC7N5ctAlyExmMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG/HCXCIA7b/0ZNIG89Lpjvf7/WRySh+6Y8wOCDIrpA1pjn3N1FUrT b33wIlvJrpZIUGf+zdcOBDPwNXbNWmyEXPowhXYXO92zF3wc9O/D8syxZxV9ez7S WQOrMt68FgtO5qAdcylx6PaFr56Kdoe1r6TgA60m1E/pq3LWQp4p/fDnlHsljUw0 vLFt1jiIKHcYGZCJypWMqay17K914/32nBMwu94o0toKK76OgtIDk5L9h7ErF6uS MZEq8/F3/tus07ifrnHnZpMLo92UQROs9sawBDk4sYaqN1qHmu/6um93UDRltAbQ VyEG9JG/YrjVjylGWAqkcUkvGLHa3eu5 -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:05 2025 by rpki-client