$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: YnB9pNVQ5e5i2Jw+03tK3EKhspuEtsYGtoORHzcwiUY= Subject key identifier: 6A:C6:14:79:02:4C:D7:4B:8E:F9:41:D4:2E:BA:1A:95:6F:D0:45:FF Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: BA Signing time: Sun 19 Oct 2025 09:08:26 +0000 Manifest this update: Sun 19 Oct 2025 09:08:25 +0000 Manifest next update: Sun 26 Oct 2025 09:08:25 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: tgKjOMLNVtKYavdna+uxcbOkXGB2kx/3N68FmIpRXKc=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Oct 19 09:08:25 2025 GMT Not After : Oct 26 09:08:25 2025 GMT Subject: CN=68f4aa8a-fff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:d3:a8:c3:05:f3:c5:bf:65:38:d9:c4:c0: 5b:87:0b:97:c2:d0:20:2b:db:d4:f2:72:f8:87:ad: 88:48:11:15:af:61:53:e2:d7:3b:1f:3d:25:bb:30: 6b:f0:5b:2b:d5:71:e7:73:3e:aa:96:37:eb:7e:8b: a4:f8:72:4d:87:5b:60:5e:00:40:6e:39:50:7f:59: 0b:8c:9b:59:63:37:d7:d3:0e:c7:36:4d:e2:08:92: 52:73:2c:ce:b7:c5:ae:a2:56:8e:3c:60:f7:1d:ec: 46:52:62:80:86:e3:f7:7b:a6:dc:16:65:09:07:f7: 9a:29:0f:0d:c9:80:a3:19:16:d4:93:a5:9e:d4:2b: eb:69:b2:0b:2f:b8:c4:e3:c2:59:f1:81:28:80:9e: bc:2e:81:72:87:71:9f:44:15:80:49:f6:c7:2d:21: 24:c7:c3:60:76:7a:82:63:28:e8:22:48:11:2b:0f: c7:45:4c:52:4a:ee:d0:1e:dd:ed:b9:8b:32:4a:a8: 30:ac:6f:b6:63:54:27:58:29:e2:10:dc:17:e1:86: fd:ed:98:c6:56:3a:bb:5c:ac:98:c5:ae:1f:3c:ad: 44:75:36:c9:bd:92:47:8c:eb:20:dc:d5:08:fa:fb: c0:0c:08:99:63:80:21:5e:ad:28:f3:99:b0:11:2a: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C6:14:79:02:4C:D7:4B:8E:F9:41:D4:2E:BA:1A:95:6F:D0:45:FF X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6a:46:f7:66:41:d6:81:18:c6:6a:d6:a9:44:a5:ec:a9:8d: 9e:74:20:76:1c:22:13:d6:8e:f7:1d:5a:77:7f:b3:a1:02:e3: da:21:15:e7:d9:d0:f5:78:fd:a8:7c:8c:2b:d0:47:7b:39:ea: 7b:95:55:4b:e8:59:7b:9d:60:75:5f:ed:cc:0f:5b:01:62:8e: 5b:80:b1:d3:d1:55:17:c1:15:c7:bb:6c:a2:d4:db:46:8b:37: 2c:65:fe:6b:79:00:05:f0:80:90:a2:95:96:0d:86:f2:5e:08: 95:13:3b:00:6a:7e:37:cf:1f:0d:c4:fd:89:8a:76:49:45:5c: a1:91:ee:f8:c9:51:15:ed:f9:4c:d1:c5:29:14:bb:ee:bd:cb: 31:d2:d1:6e:e4:38:6e:2f:91:c4:63:47:29:fa:c1:8e:db:f0: bc:6c:52:20:9a:b6:f6:9f:a9:dc:33:a8:4d:0a:52:f5:d0:b1: 65:f7:8b:be:ac:12:3a:34:c9:b8:67:5f:8c:aa:42:38:bf:d5: f6:cc:01:cd:0b:f7:65:af:53:e9:75:59:b6:40:90:9f:17:d3: 8d:ef:82:1d:07:5d:d8:3c:e9:bf:6a:0e:b3:21:5f:4b:60:73: da:3d:80:d6:91:7d:6b:da:d7:f9:35:5a:c8:c3:4d:ab:e7:20: b1:ef:13:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUxMDE5MDkwODI1WhcNMjUxMDI2MDkwODI1WjAYMRYwFAYD VQQDEw02OGY0YWE4YS1mZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxinTqMMF88W/ZTjZxMBbhwuXwtAgK9vU8nL4h62ISBEVr2FT4tc7Hz0luzBr 8Fsr1XHncz6qljfrfouk+HJNh1tgXgBAbjlQf1kLjJtZYzfX0w7HNk3iCJJScyzO t8WuolaOPGD3HexGUmKAhuP3e6bcFmUJB/eaKQ8NyYCjGRbUk6We1CvrabILL7jE 48JZ8YEogJ68LoFyh3GfRBWASfbHLSEkx8NgdnqCYyjoIkgRKw/HRUxSSu7QHt3t uYsySqgwrG+2Y1QnWCniENwX4Yb97ZjGVjq7XKyYxa4fPK1EdTbJvZJHjOsg3NUI +vvADAiZY4AhXq0o85mwESqxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrGFHkC TNdLjvlB1C66GpVv0EX/MB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXakb3ZkHWgRjGatapRKXsqY2edCB2HCIT1o73HVp3f7OhAuPaIRXn 2dD1eP2ofIwr0Ed7Oep7lVVL6Fl7nWB1X+3MD1sBYo5bgLHT0VUXwRXHu2yi1NtG izcsZf5reQAF8ICQopWWDYbyXgiVEzsAan43zx8NxP2JinZJRVyhke74yVEV7flM 0cUpFLvuvcsx0tFu5DhuL5HEY0cp+sGO2/C8bFIgmrb2n6ncM6hNClL10LFl94u+ rBI6NMm4Z1+MqkI4v9X2zAHNC/dlr1PpdVm2QJCfF9ON74IdB13YPOm/ag6zIV9L YHPaPYDWkX1r2tf5NVrIw02r5yCx7xNd -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:04 2025 by rpki-client