$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft File: owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json) Hash identifier: Who0I7mMmOC+NfIfkV9zSHLVuPJ/aYmDcCU6h7JbHy4= Subject key identifier: 88:CE:E0:B4:53:95:96:23:0A:C6:17:F2:BB:73:B8:FA:C8:63:CD:C5 Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft Manifest number: 03DF Signing time: Sun 19 Oct 2025 02:30:35 +0000 Manifest this update: Sun 19 Oct 2025 02:30:34 +0000 Manifest next update: Sun 26 Oct 2025 02:30:34 +0000 Files and hashes: 1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: fInqQzQacCuGvEMdaEuYGwtYJ2D1D08lf5I43N57uBw=) 2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: K/6Sxmjn7Y9RMsh3D/CkcDPEvNJggoP2DR+Gq8xtxL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Validity Not Before: Oct 19 02:30:34 2025 GMT Not After : Oct 26 02:30:34 2025 GMT Subject: CN=68f44d4b-9b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d2:12:be:5a:94:ab:63:65:fb:bd:5d:e0:15: ed:fa:ab:63:33:10:33:30:5e:e3:8a:80:5c:c1:5c: 14:58:48:1a:ca:74:33:b8:9e:ff:c9:da:80:ca:68: bd:6b:5d:63:2c:a3:2e:81:25:06:73:a3:58:7e:f0: e1:71:b9:6d:a8:29:2a:32:4e:2a:e6:79:5e:ed:88: 41:de:13:88:53:31:02:e7:17:e1:4f:e4:c4:c8:d9: 16:ad:26:a8:ca:e3:d2:e3:ae:8e:a8:38:5f:54:d3: 1e:a4:ee:75:b7:f2:99:7c:a5:d1:5f:33:c5:6a:8c: 35:3d:1f:02:44:69:d2:48:46:32:e1:52:26:e9:26: 17:57:94:50:51:37:16:31:11:52:c8:a7:7a:e6:c7: 3a:9f:56:cf:70:97:df:b1:a1:da:17:d0:06:d4:c0: 76:da:a0:15:97:8b:da:1b:6c:63:0f:96:b2:5e:c8: f5:91:c7:5f:df:ee:c9:0e:1d:aa:78:08:25:63:05: 50:a1:9d:58:47:99:48:6e:58:bb:78:7b:cc:f3:20: b4:7b:d5:91:75:5e:a9:6d:01:3c:50:bd:1b:bc:45: 83:d4:61:69:0a:29:c9:9e:9a:25:a6:5b:74:64:73: 83:b2:4d:d9:bd:6b:ee:21:e5:fa:88:71:48:2f:ea: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:E0:B4:53:95:96:23:0A:C6:17:F2:BB:73:B8:FA:C8:63:CD:C5 X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:14:47:20:91:e1:2c:05:bf:93:9b:f4:53:49:a9:80:d5: d1:83:46:05:3d:b3:46:72:af:e6:3d:9b:75:8b:db:cf:52:be: 1f:4c:2e:6d:ec:23:6a:17:6a:b4:5b:b5:bb:6e:25:39:dc:a8: 9a:11:86:d5:4b:76:71:a1:df:5d:a7:3d:bb:89:57:2a:1d:86: a2:ad:6a:10:ee:f4:ec:55:a9:62:9c:51:f4:bd:92:84:57:37: 9a:be:61:e7:bc:cf:58:33:3c:f2:76:6f:ed:89:64:1e:0f:80: a3:81:93:33:f1:c3:89:7c:d5:e4:b8:7d:cc:99:bd:6d:b7:db: 65:4c:5d:fd:ca:41:95:e9:40:34:b1:f2:41:75:e9:41:15:e9: b4:fe:f5:fe:d6:d8:2e:e9:6b:b9:1c:7b:9a:2b:3b:86:9b:1c: 9b:1c:65:a8:30:56:ad:9c:6d:39:e4:2c:10:8b:63:f6:37:fa: 44:54:3d:8f:dc:6f:71:01:1c:8e:c8:b5:c0:df:5b:b3:96:a7: 73:93:bf:b6:29:43:30:f9:aa:29:21:52:a9:2d:5a:b7:17:10: f5:be:da:15:e2:bf:49:0d:f2:82:c3:01:a5:13:19:8a:50:a3: d5:d6:47:f3:91:f8:0b:e9:d6:44:5f:cd:09:33:b7:f0:fc:01: 77:fc:cf:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjUxMDE5MDIzMDM0WhcNMjUxMDI2MDIzMDM0WjAYMRYwFAYD VQQDEw02OGY0NGQ0Yi05YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+dISvlqUq2Nl+71d4BXt+qtjMxAzMF7jioBcwVwUWEgaynQzuJ7/ydqAymi9 a11jLKMugSUGc6NYfvDhcbltqCkqMk4q5nle7YhB3hOIUzEC5xfhT+TEyNkWrSao yuPS466OqDhfVNMepO51t/KZfKXRXzPFaow1PR8CRGnSSEYy4VIm6SYXV5RQUTcW MRFSyKd65sc6n1bPcJffsaHaF9AG1MB22qAVl4vaG2xjD5ayXsj1kcdf3+7JDh2q eAglYwVQoZ1YR5lIbli7eHvM8yC0e9WRdV6pbQE8UL0bvEWD1GFpCinJnpolplt0 ZHODsk3ZvWvuIeX6iHFIL+ogxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjO4LRT lZYjCsYX8rtzuPrIY83FMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUUwMy85OTZBN0U4ODlDNTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJV c2NQaFhSbUQxOXZZcDlaSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/jBRHIJHhLAW/k5v0U0mpgNXRg0YFPbNGcq/mPZt1i9vPUr4fTC5t 7CNqF2q0W7W7biU53KiaEYbVS3Zxod9dpz27iVcqHYairWoQ7vTsValinFH0vZKE VzeavmHnvM9YMzzydm/tiWQeD4CjgZMz8cOJfNXkuH3Mmb1tt9tlTF39ykGV6UA0 sfJBdelBFem0/vX+1tgu6Wu5HHuaKzuGmxybHGWoMFatnG055CwQi2P2N/pEVD2P 3G9xARyOyLXA31uzlqdzk7+2KUMw+aopIVKpLVq3FxD1vtoV4r9JDfKCwwGlExmK UKPV1kfzkfgL6dZEX80JM7fw/AF3/M+E -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:45 2025 by rpki-client