$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: df8O+JAAz+hAGETDW6iI4oBIBaRS519l29PwX89dj0U= Subject key identifier: D5:6E:B0:3B:8F:3C:B3:D0:6A:41:1E:C1:96:94:FE:5F:FB:F7:6E:EC Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C59 Signing time: Sat 18 Oct 2025 19:19:11 +0000 Manifest this update: Sat 18 Oct 2025 19:19:10 +0000 Manifest next update: Sat 25 Oct 2025 19:19:10 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: EqiNvfGonS/3PlbPvsH7Cyr1xVsP+mZYii33sKWlUmM=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Oct 18 19:19:10 2025 GMT Not After : Oct 25 19:19:10 2025 GMT Subject: CN=68f3e82e-048b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:2f:e2:3a:ed:be:97:f3:e3:cf:62:08:b9: 9f:94:b8:55:d2:c8:f5:93:5f:60:85:e1:9d:6a:f6: 3f:f2:77:ce:51:48:5e:e2:fc:24:9c:29:69:dc:41: de:0f:c0:22:2b:5d:74:50:19:66:b8:9d:1f:fd:e2: 05:fb:b7:3b:b2:33:65:77:83:f5:5b:6d:2e:c8:99: cb:55:ae:0b:9d:bf:03:3d:25:c3:3a:fb:78:f5:21: 4b:84:8f:71:84:f3:ce:17:eb:b8:d4:94:9e:7f:d3: 51:db:11:27:d6:64:34:81:15:b1:02:2a:fd:15:1a: 18:02:e2:6a:c3:88:6d:11:4a:6c:0a:7f:6b:22:5d: 3a:a4:80:55:1b:f0:d1:8e:66:b3:d4:fd:5f:a4:10: fa:f6:75:d3:cc:d8:29:e9:a8:ea:6d:0f:48:73:4e: 7e:16:af:7c:8d:5a:c9:19:77:1b:2e:37:e7:59:8a: 86:d1:dc:ea:30:6b:a9:62:de:2e:bb:85:b3:8a:fd: 38:ba:52:5f:c7:cb:23:6c:65:91:93:24:ed:53:e1: dd:c3:27:c1:18:50:96:81:a4:f5:f8:46:01:3f:9f: 97:71:e0:08:4e:97:f4:31:d2:8d:32:ce:fc:7c:29: cc:ef:0a:22:3a:2f:2f:47:df:66:43:7c:66:2f:59: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:B0:3B:8F:3C:B3:D0:6A:41:1E:C1:96:94:FE:5F:FB:F7:6E:EC X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:2c:a9:fd:00:d1:b6:64:2b:8b:ee:fd:96:9c:25:7b:4a: 36:e9:92:14:41:e6:5b:c8:8b:58:af:0f:98:9c:07:35:ff:ae: 6a:81:3a:35:aa:a6:87:15:b6:a7:f2:ea:2c:aa:4a:e4:d3:b1: d6:94:ae:08:10:84:72:e6:f1:a4:55:ce:0f:c4:c4:be:a2:3b: ca:d3:73:4a:7b:db:3a:2c:a1:b1:e5:84:c6:cd:56:37:ca:9a: 6b:47:4a:9f:28:d9:38:6c:3c:20:cb:6c:7c:11:cd:59:51:ce: 75:69:95:b4:d8:0a:cf:52:1a:e7:4c:b3:85:0d:1f:fc:94:39: 03:54:42:24:01:fa:80:56:19:50:2a:da:d8:74:26:c8:f7:d8: 36:37:59:66:d3:de:ae:0d:4b:49:87:cb:54:14:39:f6:66:e0: bd:b2:67:1f:00:ab:1a:44:32:8c:3c:c0:db:0e:a2:10:b9:d7: e8:c3:3a:d3:a6:4e:7b:f1:c9:8f:f3:fc:46:f4:91:9c:22:99: 32:e7:06:12:ec:97:2b:bb:12:2c:9a:4c:e9:e4:18:52:89:ca: a9:cd:f2:de:b6:86:41:6b:de:f8:8f:31:9c:fc:40:33:47:f2: 2b:35:14:41:fc:60:ca:b4:46:22:51:08:9a:4b:b5:0b:2c:b2: 5c:b7:ee:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUxMDE4MTkxOTEwWhcNMjUxMDI1MTkxOTEwWjAYMRYwFAYD VQQDEw02OGYzZTgyZS0wNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/Qv4jrtvpfz489iCLmflLhV0sj1k19gheGdavY/8nfOUUhe4vwknClp3EHe D8AiK110UBlmuJ0f/eIF+7c7sjNld4P1W20uyJnLVa4Lnb8DPSXDOvt49SFLhI9x hPPOF+u41JSef9NR2xEn1mQ0gRWxAir9FRoYAuJqw4htEUpsCn9rIl06pIBVG/DR jmaz1P1fpBD69nXTzNgp6ajqbQ9Ic05+Fq98jVrJGXcbLjfnWYqG0dzqMGupYt4u u4Wziv04ulJfx8sjbGWRkyTtU+HdwyfBGFCWgaT1+EYBP5+XceAITpf0MdKNMs78 fCnM7woiOi8vR99mQ3xmL1kLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVusDuP PLPQakEewZaU/l/7927sMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvfCyp/QDRtmQri+79lpwle0o26ZIUQeZbyItYrw+YnAc1/65qgTo1 qqaHFban8uosqkrk07HWlK4IEIRy5vGkVc4PxMS+ojvK03NKe9s6LKGx5YTGzVY3 ypprR0qfKNk4bDwgy2x8Ec1ZUc51aZW02ArPUhrnTLOFDR/8lDkDVEIkAfqAVhlQ KtrYdCbI99g2N1lm096uDUtJh8tUFDn2ZuC9smcfAKsaRDKMPMDbDqIQudfowzrT pk578cmP8/xG9JGcIpky5wYS7JcruxIsmkzp5BhSicqpzfLetoZBa974jzGc/EAz R/IrNRRB/GDKtEYiUQiaS7ULLLJct+41 -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:29 2025 by rpki-client