$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json) Hash identifier: 90NK6D1sjtzwV0weG1bYs5cCJrb2/JPiLvcQDky8zOU= Subject key identifier: AA:BE:27:5F:7D:54:93:C1:1E:71:83:BC:3D:F7:08:EB:E9:F7:CE:F9 Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft Manifest number: 34D0 Signing time: Mon 20 Oct 2025 14:57:32 +0000 Manifest this update: Mon 20 Oct 2025 14:57:31 +0000 Manifest next update: Mon 27 Oct 2025 14:57:31 +0000 Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: Em3hGI+XAt0+RCpIBOC4d9zoq46J4DMfVBrabWmXmro=) 2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: e40Fx6yfX6nJRx1dMJZUnN8AeYmm3aJoH7MptW5kCWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Validity Not Before: Oct 20 14:57:31 2025 GMT Not After : Oct 27 14:57:31 2025 GMT Subject: CN=68f64ddc-d795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:55:70:83:8a:d4:e0:83:8e:82:46:21:ba: 94:7a:e1:7b:43:01:46:ee:66:cc:95:92:89:3b:b6: 11:92:e7:3f:b1:c4:51:d2:b7:15:08:e2:04:ad:56: 09:4f:c0:41:a5:dc:2d:49:0e:98:60:9e:5e:e6:41: d6:35:69:e0:db:40:2f:8d:08:50:76:b9:4a:ab:1f: b2:d7:9d:96:f4:e2:26:94:f4:e2:76:33:b1:81:94: 96:c9:f3:1e:ea:b0:b2:aa:78:64:ac:31:df:74:f7: 3b:f7:85:56:16:d2:e1:89:d3:0f:d5:f1:5c:93:dd: f5:d1:62:9b:39:46:ea:36:81:4d:7f:da:f4:81:48: 3a:1d:d0:8d:a3:ef:c2:d8:08:58:eb:85:93:fc:f4: 1a:ee:dc:29:2e:14:78:cb:d9:50:13:c1:11:35:86: 9f:46:9a:c5:bc:07:0a:cf:39:4d:68:8f:83:2e:37: 29:a7:dc:df:72:01:c1:7a:a4:f1:57:b8:31:b2:cb: ed:b7:a5:28:b1:ae:49:f2:e0:2e:37:7b:77:1c:c1: 76:53:92:18:e5:41:e3:a1:f0:70:a0:f2:e0:41:60: 05:20:b4:a4:78:8d:27:56:94:73:b3:8f:a6:72:7d: 9a:12:f0:12:8a:e8:e0:0e:b8:70:7c:3c:5c:70:f3: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:27:5F:7D:54:93:C1:1E:71:83:BC:3D:F7:08:EB:E9:F7:CE:F9 X509v3 Authority Key Identifier: keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fa:48:09:ca:2c:d3:a6:46:14:67:91:71:9f:0e:66:54:55: 4b:b0:46:ea:54:ff:94:d3:80:fc:62:79:be:e3:69:77:52:43: 79:46:c9:eb:e0:ef:59:31:56:3f:36:f3:01:41:00:8f:c3:8f: 06:e7:fe:cc:99:59:67:a0:d1:7a:8e:14:3f:66:cc:47:31:b9: 28:1b:56:4e:df:bc:15:cd:f4:2e:8f:a2:71:1f:07:9a:d2:40: 95:2c:fa:70:8e:4d:92:8d:12:ce:e1:f4:fd:5a:99:ea:9f:8a: ac:14:a4:7d:87:9f:42:d3:48:d2:e7:c0:83:a7:3f:b7:a3:65: 63:50:58:f1:b9:2c:cb:1f:d2:69:fd:fe:e6:6f:ec:d9:5c:45: d1:15:0e:06:91:4f:b0:bf:0c:1e:98:d9:01:33:c1:0c:40:03: c4:98:b6:ea:13:5c:bb:73:5e:cd:cd:fb:07:6d:56:98:3c:5b: b1:fb:ce:e3:0c:1f:f8:e0:19:5d:07:05:b8:8b:64:18:a2:5f: 25:9e:80:30:43:df:5d:a6:e9:11:40:89:32:28:51:5c:9b:7e: c2:e1:d2:75:20:0f:e6:23:e9:60:bc:0e:bb:9c:d4:aa:d1:88: 40:2d:32:70:2f:88:66:1e:1d:8a:9d:f4:52:92:3b:be:3f:95: e2:b0:e2:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE RkNEOUUzOTYwHhcNMjUxMDIwMTQ1NzMxWhcNMjUxMDI3MTQ1NzMxWjAYMRYwFAYD VQQDEw02OGY2NGRkYy1kNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfhVcIOK1OCDjoJGIbqUeuF7QwFG7mbMlZKJO7YRkuc/scRR0rcVCOIErVYJ T8BBpdwtSQ6YYJ5e5kHWNWng20AvjQhQdrlKqx+y152W9OImlPTidjOxgZSWyfMe 6rCyqnhkrDHfdPc794VWFtLhidMP1fFck9310WKbOUbqNoFNf9r0gUg6HdCNo+/C 2AhY64WT/PQa7twpLhR4y9lQE8ERNYafRprFvAcKzzlNaI+DLjcpp9zfcgHBeqTx V7gxssvtt6Uosa5J8uAuN3t3HMF2U5IY5UHjofBwoPLgQWAFILSkeI0nVpRzs4+m cn2aEvASiujgDrhwfDxccPPc/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq+J199 VJPBHnGDvD33COvp9875MB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDI2Ny8xOTBFQUI1QzFEOTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196 VTdHTDBZZ29USnJmelo0NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM+kgJyizTpkYUZ5Fxnw5mVFVLsEbqVP+U04D8Ynm+42l3UkN5Rsnr 4O9ZMVY/NvMBQQCPw48G5/7MmVlnoNF6jhQ/ZsxHMbkoG1ZO37wVzfQuj6JxHwea 0kCVLPpwjk2SjRLO4fT9Wpnqn4qsFKR9h59C00jS58CDpz+3o2VjUFjxuSzLH9Jp /f7mb+zZXEXRFQ4GkU+wvwwemNkBM8EMQAPEmLbqE1y7c17NzfsHbVaYPFux+87j DB/44BldBwW4i2QYol8lnoAwQ99dpukRQIkyKFFcm37C4dJ1IA/mI+lgvA67nNSq 0YhALTJwL4hmHh2KnfRSkju+P5XisOJv -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:58 2025 by rpki-client