$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: CrCFX400zn+yiTlhXHjb4UvPhkYSeH85yXKgt9SUvGk= Subject key identifier: C2:49:22:A7:4C:0F:36:61:19:B0:D7:B8:00:90:76:30:87:D0:F9:27 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 2144 Signing time: Mon 20 Oct 2025 16:09:35 +0000 Manifest this update: Mon 20 Oct 2025 16:09:34 +0000 Manifest next update: Mon 27 Oct 2025 16:09:34 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 0nJq6seioMdLLjSxXFahmgr1lZbvTdue2MR1V2eN25Q=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8528 (0x2150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Oct 20 16:09:34 2025 GMT Not After : Oct 27 16:09:34 2025 GMT Subject: CN=68f65ebe-b3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:a9:ac:2b:09:21:15:4f:53:3a:ca:d1:ca: 61:c5:24:c4:e2:61:3b:64:2c:67:84:33:16:76:62: 5d:bf:2b:62:ba:35:5d:3a:14:d5:71:e5:a4:6c:bf: b8:de:d3:40:5f:c2:59:48:88:34:10:64:a6:1e:a8: e0:d9:23:c1:57:af:41:90:28:e4:4f:79:5c:84:02: 6a:50:c4:a8:22:a1:30:49:f1:dc:0e:28:fa:4a:dc: 24:5c:bd:73:05:9c:1c:74:fc:35:ff:b0:a2:b9:2e: 87:fe:6d:83:f7:7f:fe:ba:b8:57:3f:5b:cd:b5:b5: bf:32:4d:90:7e:55:b3:3f:54:c0:11:8b:66:bb:88: 20:38:2c:cc:31:11:e3:ec:ae:7d:dc:2b:07:ed:d0: 9d:b2:6a:ef:22:f2:67:85:21:88:5e:5e:cc:d9:be: 4e:7c:c3:7b:93:0f:6f:90:7d:92:d3:eb:bc:e4:56: 5f:46:10:ee:34:ee:1e:b6:c1:91:a0:59:bd:55:97: 9a:be:42:42:1a:7e:97:f2:3a:33:12:e3:01:4c:dc: d0:b3:22:78:91:9d:d9:a3:51:44:9c:73:ba:67:4e: 23:03:d5:cc:fe:b2:d9:1d:ed:d2:9e:ef:5e:96:db: 8c:f3:be:db:7d:4b:9f:17:36:14:07:92:b6:ab:a9: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:22:A7:4C:0F:36:61:19:B0:D7:B8:00:90:76:30:87:D0:F9:27 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:95:86:f9:aa:72:2a:e1:f2:c7:99:57:f5:55:5e:6f:13:d1: 3f:2d:65:89:ee:a2:2a:bb:aa:4b:22:f3:cd:8e:68:f5:34:ae: 6e:5d:83:79:99:06:54:5b:18:6f:32:b9:64:be:5d:c8:92:15: 69:64:27:42:4f:1e:ef:6d:16:b6:5b:48:74:ab:16:95:f5:9d: 2e:aa:c3:9e:11:a0:e9:e7:df:e9:47:0b:73:d8:58:09:d4:30: 58:a5:8a:ab:29:c4:f0:a0:6f:87:92:70:b2:30:1b:ff:3b:ff: 62:4d:0e:16:2c:54:a5:a7:53:d5:bc:e3:04:2b:b6:5a:df:3d: 7e:93:83:f6:6f:dd:fa:ba:10:20:62:40:fb:7f:90:10:30:9c: 67:16:94:58:bb:eb:ad:cb:30:79:59:3d:ae:51:0e:04:28:68: 71:fb:63:d1:1f:b1:9b:d4:eb:ab:8b:17:fa:57:fa:ac:b0:d6: 08:c6:2a:0b:97:82:3d:12:3c:0b:21:8d:3d:27:e7:24:aa:0d: 1f:94:fa:d4:56:d5:9d:41:b9:54:61:a4:34:68:7d:e9:e7:79: ae:94:36:8e:5d:5d:97:f5:f2:44:65:66:53:24:3d:eb:cf:7f: 0b:af:bf:dc:b7:0d:ab:ea:0a:ac:32:28:6a:80:26:fb:7c:9a: f2:a3:c8:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUxMDIwMTYwOTM0WhcNMjUxMDI3MTYwOTM0WjAYMRYwFAYD VQQDEw02OGY2NWViZS1iM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNiprCsJIRVPUzrK0cphxSTE4mE7ZCxnhDMWdmJdvytiujVdOhTVceWkbL+4 3tNAX8JZSIg0EGSmHqjg2SPBV69BkCjkT3lchAJqUMSoIqEwSfHcDij6StwkXL1z BZwcdPw1/7CiuS6H/m2D93/+urhXP1vNtbW/Mk2QflWzP1TAEYtmu4ggOCzMMRHj 7K593CsH7dCdsmrvIvJnhSGIXl7M2b5OfMN7kw9vkH2S0+u85FZfRhDuNO4etsGR oFm9VZeavkJCGn6X8jozEuMBTNzQsyJ4kZ3Zo1FEnHO6Z04jA9XM/rLZHe3Snu9e ltuM877bfUufFzYUB5K2q6na4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJJIqdM DzZhGbDXuACQdjCH0PknMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAElYb5qnIq4fLHmVf1VV5vE9E/LWWJ7qIqu6pLIvPNjmj1NK5uXYN5 mQZUWxhvMrlkvl3IkhVpZCdCTx7vbRa2W0h0qxaV9Z0uqsOeEaDp59/pRwtz2FgJ 1DBYpYqrKcTwoG+HknCyMBv/O/9iTQ4WLFSlp1PVvOMEK7Za3z1+k4P2b936uhAg YkD7f5AQMJxnFpRYu+utyzB5WT2uUQ4EKGhx+2PRH7Gb1Ourixf6V/qssNYIxioL l4I9EjwLIY09J+ckqg0flPrUVtWdQblUYaQ0aH3p53mulDaOXV2X9fJEZWZTJD3r z38Lr7/ctw2r6gqsMihqgCb7fJryo8ga -----END CERTIFICATE-----Generated at Tue Oct 21 05:02:15 2025 by rpki-client