$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: T0MD1VG6UB0lBKO1t9aiU7bzErtiUGPd7c3/P4+nodM= Subject key identifier: E7:B6:9B:90:71:10:33:81:7D:06:70:EC:3A:CA:BB:CB:9A:10:96:9F Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0199 Signing time: Sun 19 Oct 2025 05:56:55 +0000 Manifest this update: Sun 19 Oct 2025 05:56:54 +0000 Manifest next update: Sun 26 Oct 2025 05:56:54 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: J0t0zlUBOVK7fj6lXzc9r+LRJ2vO6GzEmFRNq48HEAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Oct 19 05:56:54 2025 GMT Not After : Oct 26 05:56:54 2025 GMT Subject: CN=68f47da6-ac7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:ce:40:2e:3e:25:f4:42:d7:a1:b6:e0:02: d1:be:32:51:a7:69:52:68:39:8b:36:dd:3d:46:d9: 59:f2:8a:ab:97:b5:90:87:28:6c:7f:a6:da:1a:d3: 91:6c:8c:14:c3:81:84:a1:e4:c8:ea:ab:63:27:90: f7:15:18:ab:34:9c:63:d6:ab:2a:31:f0:b5:28:14: d8:4a:fc:40:47:12:ca:1f:dd:eb:c7:5a:51:41:ec: a6:5e:b5:ab:58:0c:36:c5:59:9d:04:3d:9c:5b:87: f9:d9:69:9f:59:93:dc:79:44:40:19:9e:56:75:a9: fc:55:d0:19:6f:3e:14:00:c1:98:d4:11:40:e7:36: 5a:48:4a:4e:dc:14:0e:26:a5:b0:4f:d9:82:90:3f: ba:8e:7c:71:1f:b4:c7:fa:79:d4:83:76:a9:a4:67: 58:e3:ee:ce:bf:67:d7:47:23:c9:e3:11:64:3f:58: eb:0f:c5:99:5f:bb:a6:ba:a4:6a:41:c4:59:fa:94: 11:c3:b4:60:ed:4c:77:be:1b:8e:f9:31:27:fb:fb: 1a:23:36:e3:bb:39:63:fd:4e:cf:46:21:ef:fe:e0: 10:34:22:46:6c:08:dc:95:fb:86:34:b3:7e:47:ac: 90:a7:f0:26:9b:ee:0f:b1:c9:97:19:20:fa:35:ee: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B6:9B:90:71:10:33:81:7D:06:70:EC:3A:CA:BB:CB:9A:10:96:9F X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:63:75:4a:0a:81:cc:d1:4f:49:8a:2b:ed:1c:cf:57:5a:ef: 09:ab:b5:43:e1:f3:ca:5b:be:ed:43:91:16:dd:0c:46:1f:d1: 6b:dd:a5:cd:02:1d:77:83:f1:ae:2b:02:9f:68:c0:ac:26:cb: a3:b7:4e:04:77:3e:f5:b7:7c:38:7b:c7:4d:54:b8:d9:d1:6f: 4c:d7:f6:73:4b:d8:69:c9:0b:11:52:95:77:8a:14:d0:db:ac: eb:b1:9e:c7:48:df:50:09:b2:6d:87:bc:41:f7:42:2f:46:4a: a7:f2:4d:dc:d5:45:ea:73:63:bd:bc:6d:e1:12:62:94:0c:b1: d4:02:18:9e:83:c6:b0:11:5a:e3:81:da:cc:38:b0:4d:a9:68: ff:9b:64:9e:11:00:9a:90:e0:32:2f:1f:9a:ad:ed:69:ea:84: 93:c4:24:f0:c2:7c:25:6b:fc:4b:c0:2f:ed:7f:2c:4e:91:79: 17:1a:47:f5:95:12:dd:a0:19:77:8a:36:98:cb:6a:90:e5:f7: 94:ed:1c:1e:87:f1:cd:46:02:50:b1:8b:6b:d9:ab:21:a9:8e: f7:59:11:ec:7a:97:c9:16:85:6b:92:27:ba:bc:ef:7a:4e:39: 33:4c:9a:c8:fe:ff:7d:98:4c:55:8a:1f:11:d1:0f:c7:4a:f3: 97:05:1f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUxMDE5MDU1NjU0WhcNMjUxMDI2MDU1NjU0WjAYMRYwFAYD VQQDEw02OGY0N2RhNi1hYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJfOQC4+JfRC16G24ALRvjJRp2lSaDmLNt09RtlZ8oqrl7WQhyhsf6baGtOR bIwUw4GEoeTI6qtjJ5D3FRirNJxj1qsqMfC1KBTYSvxARxLKH93rx1pRQeymXrWr WAw2xVmdBD2cW4f52WmfWZPceURAGZ5Wdan8VdAZbz4UAMGY1BFA5zZaSEpO3BQO JqWwT9mCkD+6jnxxH7TH+nnUg3appGdY4+7Ov2fXRyPJ4xFkP1jrD8WZX7umuqRq QcRZ+pQRw7Rg7Ux3vhuO+TEn+/saIzbjuzlj/U7PRiHv/uAQNCJGbAjclfuGNLN+ R6yQp/Amm+4PscmXGSD6Ne4QAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe2m5Bx EDOBfQZw7DrKu8uaEJafMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdY3VKCoHM0U9JiivtHM9XWu8Jq7VD4fPKW77tQ5EW3QxGH9Fr3aXN Ah13g/GuKwKfaMCsJsujt04Edz71t3w4e8dNVLjZ0W9M1/ZzS9hpyQsRUpV3ihTQ 26zrsZ7HSN9QCbJth7xB90IvRkqn8k3c1UXqc2O9vG3hEmKUDLHUAhieg8awEVrj gdrMOLBNqWj/m2SeEQCakOAyLx+are1p6oSTxCTwwnwla/xLwC/tfyxOkXkXGkf1 lRLdoBl3ijaYy2qQ5feU7Rweh/HNRgJQsYtr2ashqY73WRHsepfJFoVrkie6vO96 TjkzTJrI/v99mExVih8R0Q/HSvOXBR8U -----END CERTIFICATE-----Generated at Mon Oct 20 12:17:25 2025 by rpki-client