$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft File: oAM_SUNjDclOLd9fKmuI6GZGGuc.mft (raw, json) Hash identifier: v/YiXYuRiK7n2jm1lR6dqVWzQ85RhBNkCykRNdgKXkI= Subject key identifier: 33:9D:9F:BD:95:13:F8:3D:10:80:A4:85:6A:AF:4A:14:5A:F2:0E:46 Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 Certificate issuer: /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft Manifest number: 011C Signing time: Sun 19 Oct 2025 07:41:18 +0000 Manifest this update: Sun 19 Oct 2025 07:41:18 +0000 Manifest next update: Sun 26 Oct 2025 07:41:18 +0000 Files and hashes: 1: oAM_SUNjDclOLd9fKmuI6GZGGuc.crl (hash: OdnAK79od75gRg23VF9Tn+odQDr88w86Lx7ZMEYL52o=) 2: EE647C1418A411EFBA690F60C4F9AE02.roa (hash: 1sKQhDe4XE+z/iEwFOdjuVVtLfzSNo7ytvziBnxPEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7 Validity Not Before: Oct 19 07:41:18 2025 GMT Not After : Oct 26 07:41:18 2025 GMT Subject: CN=68f4961e-b237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:07:ef:8a:63:70:e5:c7:94:ba:4f:52:38: fd:a1:99:5f:b1:84:2b:6d:69:9d:cd:ec:ae:46:25: 2d:fe:db:01:e1:2c:83:c6:61:a5:25:6c:d6:ac:7f: f6:32:09:b1:a5:57:c8:88:99:8d:f0:be:a3:74:56: 08:3d:63:82:5e:78:fc:a1:fa:c2:fa:05:9f:18:bc: f3:69:f2:65:30:a5:45:4b:c3:ff:08:83:ff:20:2b: af:a9:89:48:fe:68:92:e0:91:57:3f:1d:86:33:42: b0:48:33:04:ec:7e:58:58:a4:44:52:f9:3b:0c:b3: c2:ef:53:95:ce:b7:f9:76:33:35:3b:52:85:e8:63: 8f:f7:6a:e1:8c:84:99:8b:46:98:a1:fb:ad:73:ed: 16:70:7b:62:ec:d7:66:e3:06:29:d2:3b:1e:f4:60: 0f:9d:4f:a0:61:a7:0c:40:b7:cb:e7:f2:a7:75:fa: c8:fd:82:9d:d7:71:f6:54:48:d2:97:a7:1f:0d:67: 93:85:1b:3d:73:ee:43:1d:bd:d8:4d:ba:1f:b5:65: 16:e3:e1:ca:37:41:cd:73:31:bd:f7:43:3b:bf:29: ac:52:64:09:90:e5:64:0c:9f:22:50:00:0a:85:61: 02:f7:de:00:8c:e7:d1:d9:c2:87:28:a9:5f:9a:d1: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9D:9F:BD:95:13:F8:3D:10:80:A4:85:6A:AF:4A:14:5A:F2:0E:46 X509v3 Authority Key Identifier: keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:8c:45:a1:87:a8:e7:76:b1:c6:93:59:02:93:e6:a9:df: 2c:b8:bb:f3:e7:bf:0d:f6:d8:52:76:d9:ac:f2:ab:93:09:1d: 20:76:90:2f:eb:58:4a:98:b3:e5:1d:03:c4:c7:1c:07:b7:a5: 15:8a:84:0a:f5:f3:7a:4b:49:7a:36:cc:96:a4:82:a0:00:de: d0:34:8d:e9:b8:73:c6:04:46:72:08:28:33:cd:d9:39:b5:f2: 89:eb:e1:e7:a6:a3:1b:4d:96:fc:6d:45:a8:f4:a8:29:6e:80: 0a:f9:31:f9:db:f7:e7:7b:43:86:90:57:f7:7c:83:b4:5b:90: 93:51:c5:35:34:3c:ec:21:cf:04:86:16:d2:17:43:35:8d:ad: 60:62:86:0e:bb:c6:a5:86:3f:ab:f9:4c:1a:ea:10:57:bc:84: 5d:10:f5:ab:01:8c:8a:50:15:fb:89:03:e0:3a:c8:77:97:c9: 8c:88:22:31:bf:06:b2:8a:9b:b9:21:58:92:96:0e:3b:68:14: 1a:0d:09:53:6f:ec:00:65:21:0f:92:ec:82:b5:96:0f:a3:c2: 48:26:e8:81:13:d0:d8:d9:c7:b2:64:54:19:4d:a2:ed:21:02: 44:4b:0e:b3:02:80:07:95:3a:72:18:38:0b:92:a8:6b:88:c2: d8:a9:1b:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwRjIxMTAvBgNVBAUTKEEwMDMzRjQ5NDM2MzBEQzk0RTJEREY1RjJBNkI4OEU4 NjY0NjFBRTcwHhcNMjUxMDE5MDc0MTE4WhcNMjUxMDI2MDc0MTE4WjAYMRYwFAYD VQQDEw02OGY0OTYxZS1iMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve8H74pjcOXHlLpPUjj9oZlfsYQrbWmdzeyuRiUt/tsB4SyDxmGlJWzWrH/2 MgmxpVfIiJmN8L6jdFYIPWOCXnj8ofrC+gWfGLzzafJlMKVFS8P/CIP/ICuvqYlI /miS4JFXPx2GM0KwSDME7H5YWKREUvk7DLPC71OVzrf5djM1O1KF6GOP92rhjISZ i0aYofutc+0WcHti7Ndm4wYp0jse9GAPnU+gYacMQLfL5/KndfrI/YKd13H2VEjS l6cfDWeThRs9c+5DHb3YTboftWUW4+HKN0HNczG990M7vymsUmQJkOVkDJ8iUAAK hWEC994AjOfR2cKHKKlfmtFzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOdn72V E/g9EICkhWqvShRa8g5GMB8GA1UdIwQYMBaAFKADP0lDYw3JTi3fXypriOhmRhrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBGMi83RjMzRUUyNEZE N0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRjbE9MZDlmS211STZHWkdH dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BTV9TVU5qRGNsT0xkOWZLbXVJNkdaR0d1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBGMi83RjMzRUUyNEZEN0UxMUVFQTFCMzUzNUNDNEY5QUUwMi9vQU1fU1VOakRj bE9MZDlmS211STZHWkdHdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaLoxFoYeo53axxpNZApPmqd8suLvz578N9thSdtms8quTCR0gdpAv 61hKmLPlHQPExxwHt6UVioQK9fN6S0l6NsyWpIKgAN7QNI3puHPGBEZyCCgzzdk5 tfKJ6+HnpqMbTZb8bUWo9KgpboAK+TH52/fne0OGkFf3fIO0W5CTUcU1NDzsIc8E hhbSF0M1ja1gYoYOu8alhj+r+Uwa6hBXvIRdEPWrAYyKUBX7iQPgOsh3l8mMiCIx vwayipu5IViSlg47aBQaDQlTb+wAZSEPkuyCtZYPo8JIJuiBE9DY2ceyZFQZTaLt IQJESw6zAoAHlTpyGDgLkqhriMLYqRsN -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:45 2025 by rpki-client