$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: X9/hDG0Kcyl8yVTCm62JKUewi3k+bH9AWJDQeZ01/hw= Subject key identifier: 1C:09:E8:73:0D:8A:39:5D:7B:AC:41:6A:60:FE:81:2F:EF:42:E6:86 Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 02A6 Signing time: Sun 19 Oct 2025 03:43:35 +0000 Manifest this update: Sun 19 Oct 2025 03:43:34 +0000 Manifest next update: Sun 26 Oct 2025 03:43:34 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: gVgWSeM9UuEe55WnyLcIMMuZO4LqwxuyFwd0LEoTCHA=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Oct 19 03:43:34 2025 GMT Not After : Oct 26 03:43:34 2025 GMT Subject: CN=68f45e67-c3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:64:75:ac:fd:1c:6c:02:64:e4:54:69:6a: af:71:27:83:89:de:95:67:18:13:5a:6b:47:cf:98: bb:26:96:fe:38:72:ff:52:aa:08:19:1f:75:5a:6f: 93:7b:7d:d3:fa:45:5f:f1:78:51:ff:c5:7b:5d:80: 5f:4e:78:35:9a:53:be:7c:fe:a1:fb:c0:c6:fe:b3: 82:c7:56:a1:96:30:13:cb:76:2d:b7:98:db:cb:ef: 1c:88:e7:d4:38:47:23:4b:8f:f1:93:61:d0:1e:e7: c4:db:ec:2c:d5:ef:2d:f3:78:50:ee:6c:2e:b3:14: 97:e7:7c:15:9c:3f:c4:15:84:53:6a:3b:cb:17:33: 0a:06:7e:13:25:3e:f0:b1:e8:e7:72:21:f8:ff:8d: ab:e9:95:08:7f:61:df:84:79:ae:10:f2:35:75:69: a2:cf:f6:d8:81:4c:6b:28:45:49:45:d0:82:99:6f: 5f:04:91:77:27:37:4e:97:fc:e9:81:4b:c2:6d:eb: 9a:bd:df:eb:c2:49:a1:0a:75:12:16:d6:7a:be:92: b7:8e:a9:5a:1f:ae:e3:a0:0a:ec:d4:25:71:91:ed: 38:19:b7:af:35:d7:0e:96:43:9d:10:4f:20:77:ce: 06:a7:f4:31:f2:3e:9e:e9:88:02:e8:75:8d:8a:5e: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:E8:73:0D:8A:39:5D:7B:AC:41:6A:60:FE:81:2F:EF:42:E6:86 X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:79:a8:ee:62:12:28:03:cb:e0:ca:8e:59:e1:7b:94:3c:4a: cb:f9:3c:80:97:81:b1:90:9f:20:91:3d:3d:5d:53:f8:d5:3e: cb:d5:2a:ce:4c:6c:29:d8:c5:44:e8:d1:8c:07:80:a6:29:3e: 93:35:f8:d1:e3:81:8d:a4:9d:36:60:cf:50:7d:fe:4e:aa:fd: 70:1b:26:6e:68:e0:f0:b3:d2:34:f3:5a:a6:b4:d5:7f:be:b0: c8:97:f1:2b:4a:b8:fe:2d:e7:70:76:9e:a3:08:aa:ff:59:9d: 21:02:87:26:2a:cb:d5:00:e0:52:4b:51:63:e2:2d:24:1d:39: 5d:b7:5e:80:df:0d:fb:b8:89:ad:1b:91:f7:f7:50:0c:cc:ac: f2:de:dd:04:ef:e9:21:b4:4e:f4:95:c4:b0:4c:91:22:5d:44: a2:24:99:40:75:aa:a6:4e:51:9f:67:4d:7b:93:53:ce:e7:57: 96:12:93:48:1f:48:92:19:10:59:80:98:ce:24:85:18:69:29: 88:42:94:f9:5e:c8:94:bb:f4:73:f4:83:80:d0:b7:57:0d:85: 33:39:2d:05:02:e6:0f:57:c5:60:bf:67:47:d3:d3:3c:71:07: b1:7d:3e:bc:cf:c2:b4:bc:67:cf:08:11:fd:8f:03:92:04:a5: d6:55:c3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUxMDE5MDM0MzM0WhcNMjUxMDI2MDM0MzM0WjAYMRYwFAYD VQQDEw02OGY0NWU2Ny1jM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAol9kdaz9HGwCZORUaWqvcSeDid6VZxgTWmtHz5i7Jpb+OHL/UqoIGR91Wm+T e33T+kVf8XhR/8V7XYBfTng1mlO+fP6h+8DG/rOCx1ahljATy3Ytt5jby+8ciOfU OEcjS4/xk2HQHufE2+ws1e8t83hQ7mwusxSX53wVnD/EFYRTajvLFzMKBn4TJT7w sejnciH4/42r6ZUIf2HfhHmuEPI1dWmiz/bYgUxrKEVJRdCCmW9fBJF3JzdOl/zp gUvCbeuavd/rwkmhCnUSFtZ6vpK3jqlaH67joArs1CVxke04GbevNdcOlkOdEE8g d84Gp/Qx8j6e6YgC6HWNil4seQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwJ6HMN ijlde6xBamD+gS/vQuaGMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyeajuYhIoA8vgyo5Z4XuUPErL+TyAl4GxkJ8gkT09XVP41T7L1SrO TGwp2MVE6NGMB4CmKT6TNfjR44GNpJ02YM9Qff5Oqv1wGyZuaODws9I081qmtNV/ vrDIl/ErSrj+Ledwdp6jCKr/WZ0hAocmKsvVAOBSS1Fj4i0kHTldt16A3w37uImt G5H391AMzKzy3t0E7+khtE70lcSwTJEiXUSiJJlAdaqmTlGfZ017k1PO51eWEpNI H0iSGRBZgJjOJIUYaSmIQpT5XsiUu/Rz9IOA0LdXDYUzOS0FAuYPV8Vgv2dH09M8 cQexfT68z8K0vGfPCBH9jwOSBKXWVcPR -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:45 2025 by rpki-client