$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: paM/4lERnfOUwPwO+3JMKdenmpLegMgIaAu8SvvyKvk= Subject key identifier: A6:5D:7D:7D:D9:62:67:7D:A3:A2:C1:EB:D4:CB:B2:80:CF:B8:7D:2F Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 04 Signing time: Sun 19 Oct 2025 11:41:09 +0000 Manifest this update: Sun 19 Oct 2025 11:41:08 +0000 Manifest next update: Sun 26 Oct 2025 11:41:08 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: lbM9IeWMh9zxDy3zLc+gNfxhhsO0sCgWDB4wv3lOx9E=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: Ws+o5lfxkWBzbjla9ZUB6K0ykZgSsGy7AqspFs8FAvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Oct 19 11:41:08 2025 GMT Not After : Oct 26 11:41:08 2025 GMT Subject: CN=68f4ce55-490c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:9a:5e:6a:a8:3a:13:f5:56:e2:df:a5:08: e8:33:3f:53:9a:2f:ae:af:ab:d6:2b:d8:51:87:da: 90:41:27:73:98:56:8a:e0:ad:47:1d:98:00:ab:e1: 55:d2:a3:5c:2f:c6:5b:5b:41:a5:b1:52:d6:a7:c7: 0a:4b:26:cd:46:97:29:d2:74:f4:c0:c2:92:35:d5: 80:d6:0f:f5:a1:c2:a9:5c:3d:fa:7b:6f:63:df:33: 40:f1:c4:78:6c:8f:a2:1f:cd:3c:94:90:86:46:1e: 2c:17:3a:ba:22:c7:27:a3:d9:0e:1e:5f:f1:9a:3d: 89:3e:2d:fe:35:d2:e2:66:35:af:5c:1b:2e:03:67: f3:a9:60:20:22:0b:75:16:8a:19:13:70:60:75:14: 5d:96:1a:14:24:c0:8c:72:d5:c5:34:f4:b4:87:12: 18:60:71:c3:92:4d:37:5b:c9:11:7f:5c:b1:f9:10: 09:d2:2c:be:5a:0d:ec:fc:c6:11:c1:84:81:c4:7d: 2a:ac:65:bb:45:66:de:fc:aa:f6:b8:77:e4:03:b6: 85:e8:be:0f:6a:ea:1a:97:36:0d:50:86:0f:83:c9: ef:10:48:1f:04:72:13:ef:f0:3f:98:26:6b:40:e2: 68:97:1f:8a:8b:99:81:75:93:0e:f8:11:d1:7c:5c: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5D:7D:7D:D9:62:67:7D:A3:A2:C1:EB:D4:CB:B2:80:CF:B8:7D:2F X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:db:77:17:3b:26:8e:e2:7a:12:12:71:a3:28:e2:9d:36:25: db:ab:e2:5d:b3:06:90:7c:14:97:64:66:a5:ef:e1:1e:9c:c5: 14:5e:9c:21:42:84:63:90:91:35:1c:ff:4c:a1:56:50:32:05: 12:7d:4c:56:00:f8:31:ec:a8:05:27:2d:1b:5d:82:15:f4:59: 95:ee:ee:73:a5:07:0f:30:74:e2:d3:f5:e0:a3:40:94:20:9f: fe:41:77:53:d1:9b:67:76:3f:dd:c2:1b:6d:4e:3f:40:9d:6f: 6a:53:92:84:5f:9d:96:05:5d:e2:78:29:cb:93:8b:5b:d5:d2: f7:db:c8:63:c1:8c:a3:1f:76:23:98:af:59:dc:74:96:07:4d: e9:a7:81:9e:43:67:51:9c:c9:cc:24:8c:07:42:68:ae:23:0b: b0:30:b4:32:f4:c1:5f:f2:1c:a3:8f:02:21:8e:38:d1:41:58: 6a:6f:d1:49:c7:ba:cb:e5:6e:ac:45:04:29:0e:df:76:65:ef: 5e:8e:42:7d:29:c2:cc:e0:75:70:b7:d8:d6:16:f7:bb:f3:31: 3b:56:0c:3d:3f:69:d2:55:0c:b4:df:4d:63:2b:87:4a:f3:98: 98:f4:81:19:c6:21:de:75:0e:a2:cf:0d:e6:10:f1:42:11:c7: 39:8d:d7:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNTEwMTkxMTQxMDhaFw0yNTEwMjYxMTQxMDhaMBgxFjAUBgNV BAMTDTY4ZjRjZTU1LTQ5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCppZpeaqg6E/VW4t+lCOgzP1OaL66vq9Yr2FGH2pBBJ3OYVorgrUcdmACr4VXS o1wvxltbQaWxUtanxwpLJs1GlynSdPTAwpI11YDWD/WhwqlcPfp7b2PfM0DxxHhs j6IfzTyUkIZGHiwXOroixyej2Q4eX/GaPYk+Lf410uJmNa9cGy4DZ/OpYCAiC3UW ihkTcGB1FF2WGhQkwIxy1cU09LSHEhhgccOSTTdbyRF/XLH5EAnSLL5aDez8xhHB hIHEfSqsZbtFZt78qva4d+QDtoXovg9q6hqXNg1Qhg+Dye8QSB8EchPv8D+YJmtA 4miXH4qLmYF1kw74EdF8XGajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpl19fdli Z32josHr1MuygM+4fS8wHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/bdxc7Jo7iehIScaMo4p02Jdur4l2zBpB8FJdkZqXv4R6cxRRenCFC hGOQkTUc/0yhVlAyBRJ9TFYA+DHsqAUnLRtdghX0WZXu7nOlBw8wdOLT9eCjQJQg n/5Bd1PRm2d2P93CG21OP0Cdb2pTkoRfnZYFXeJ4KcuTi1vV0vfbyGPBjKMfdiOY r1ncdJYHTemngZ5DZ1GcycwkjAdCaK4jC7AwtDL0wV/yHKOPAiGOONFBWGpv0UnH usvlbqxFBCkO33Zl716OQn0pwszgdXC32NYW97vzMTtWDD0/adJVDLTfTWMrh0rz mJj0gRnGId51DqLPDeYQ8UIRxzmN13g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:52:59 2025 by rpki-client