$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: bUhmGlkMnPDltM60Db/ozahvXVUIXPVVZ3wo4pzOnG0= Subject key identifier: 3C:C4:AB:35:ED:FB:CD:A0:EA:81:41:F7:72:B4:D8:EE:77:D8:F1:7C Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 01EF Signing time: Sun 19 Oct 2025 05:05:31 +0000 Manifest this update: Sun 19 Oct 2025 05:05:30 +0000 Manifest next update: Sun 26 Oct 2025 05:05:30 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: 00C1sPrEsFyFZDfu4fIQ4DvPg1D6B5YoRzrrMUZ4gMs=) 2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: 57nO5jOvkVp0+vX7iv3bKgXM7+O7quZxwLxBFz3+RLU=) 3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: zTbUbYoqbVGTCB7vV/9Oi8BgtnQrV/KuVcCelWmi5sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: Oct 19 05:05:30 2025 GMT Not After : Oct 26 05:05:30 2025 GMT Subject: CN=68f4719a-35cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:39:10:a1:09:9f:97:ab:92:e3:75:9d:83: 04:57:75:80:cb:9f:35:d3:c1:f0:55:91:2f:b7:cb: a6:88:79:9c:11:77:c2:51:80:fe:2a:96:d4:7d:46: 7d:6e:28:13:bb:49:60:ce:55:20:37:e0:7f:55:51: 89:e9:74:68:32:32:80:09:95:6f:b6:fd:50:05:3e: 4c:fb:09:d9:30:ba:11:df:b6:9a:ec:01:21:c5:6d: b9:69:09:a6:6c:ea:f4:ec:f0:e3:b4:a7:ce:11:b7: 7b:da:95:1e:6b:b4:cd:92:66:e9:d6:72:1e:b5:20: ea:68:68:cf:6e:7a:ad:f7:5d:bf:67:10:59:7c:a5: 7d:58:c3:30:09:b6:10:43:1e:92:98:ea:e5:31:cd: 7f:7a:6a:6b:59:03:65:ff:0a:5d:d1:be:59:ca:c0: 50:39:c9:49:18:81:e4:22:10:43:d3:f3:79:ce:08: 41:bc:00:58:63:d0:33:14:3c:43:51:e2:c7:5e:b1: 88:bd:ab:6f:dd:d0:d4:40:76:35:f0:cd:dc:1a:cb: 57:05:e5:25:87:9d:52:6f:61:01:5c:2c:56:80:42: fa:c9:b1:23:74:77:b1:f8:cf:99:ff:01:15:90:c9: 88:33:cb:58:95:18:cb:e9:fc:0a:75:2d:71:4c:f9: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C4:AB:35:ED:FB:CD:A0:EA:81:41:F7:72:B4:D8:EE:77:D8:F1:7C X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:81:5a:57:6c:37:af:cd:80:b0:dd:a0:d1:db:af:12:df:68: b9:84:b4:f7:4d:05:cd:ca:c3:b9:b1:e4:2d:94:b0:2e:9e:b5: 72:38:2f:09:75:0d:2c:6d:a3:48:87:c6:e6:b1:be:e0:3c:70: 41:84:db:05:8a:e3:3d:07:ab:2e:09:be:cf:af:3b:d2:ed:ab: 77:0b:dd:8f:3a:4f:35:4c:8a:e1:cf:36:70:8f:e9:cc:ea:17: 62:fe:1b:86:ef:a5:35:ac:a3:ad:c5:51:e2:e0:0c:e8:ab:6f: 39:bb:e7:90:49:d4:9c:0a:f9:a1:9a:a1:d0:10:9b:1c:6d:46: 7e:ef:0d:98:e4:85:00:c9:bf:f4:14:c4:27:42:d5:76:86:d3: 64:32:15:fc:81:2d:55:bf:ea:6e:d6:76:4c:da:d3:51:5a:2a: 29:cb:69:11:8d:4e:79:a7:a2:d5:86:d7:82:4f:ed:cb:19:cd: 2f:ff:8b:4f:2f:0d:1d:d2:70:f9:48:fe:13:2d:db:72:cc:42: 9e:4d:d3:8b:36:03:d0:03:68:54:7d:66:55:83:ba:09:cb:1d: e4:cc:01:6d:6d:4b:2a:c3:04:b7:34:59:fb:16:b3:a6:b2:6a: 69:7c:2d:d5:de:fd:70:76:fc:86:fe:32:0c:e5:b1:94:60:43: 59:49:de:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUxMDE5MDUwNTMwWhcNMjUxMDI2MDUwNTMwWjAYMRYwFAYD VQQDEw02OGY0NzE5YS0zNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu005EKEJn5erkuN1nYMEV3WAy58108HwVZEvt8umiHmcEXfCUYD+KpbUfUZ9 bigTu0lgzlUgN+B/VVGJ6XRoMjKACZVvtv1QBT5M+wnZMLoR37aa7AEhxW25aQmm bOr07PDjtKfOEbd72pUea7TNkmbp1nIetSDqaGjPbnqt912/ZxBZfKV9WMMwCbYQ Qx6SmOrlMc1/emprWQNl/wpd0b5ZysBQOclJGIHkIhBD0/N5zghBvABYY9AzFDxD UeLHXrGIvatv3dDUQHY18M3cGstXBeUlh51Sb2EBXCxWgEL6ybEjdHex+M+Z/wEV kMmIM8tYlRjL6fwKdS1xTPke0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzEqzXt +82g6oFB93K02O532PF8MB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3gVpXbDevzYCw3aDR268S32i5hLT3TQXNysO5seQtlLAunrVyOC8J dQ0sbaNIh8bmsb7gPHBBhNsFiuM9B6suCb7PrzvS7at3C92POk81TIrhzzZwj+nM 6hdi/huG76U1rKOtxVHi4Azoq285u+eQSdScCvmhmqHQEJscbUZ+7w2Y5IUAyb/0 FMQnQtV2htNkMhX8gS1Vv+pu1nZM2tNRWiopy2kRjU55p6LVhteCT+3LGc0v/4tP Lw0d0nD5SP4TLdtyzEKeTdOLNgPQA2hUfWZVg7oJyx3kzAFtbUsqwwS3NFn7FrOm smppfC3V3v1wdvyG/jIM5bGUYENZSd4S -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:54 2025 by rpki-client