$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: frc3Shd4twPD4A9VBU5ZYcvWg5MiPA5KSa3nQE/Gdr4= Subject key identifier: 69:EE:7B:D9:B4:7C:65:84:1A:25:BD:ED:32:1A:84:63:4C:73:52:82 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 10AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 10A5 Signing time: Mon 20 Oct 2025 17:47:48 +0000 Manifest this update: Mon 20 Oct 2025 17:47:48 +0000 Manifest next update: Mon 27 Oct 2025 17:47:48 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: xPzAV0rId9hUhbDNOkSSaB6YPaSmZq0vGK1nzDaVfaA=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: zsPveXQ2Zd6a9Te4YhLc43ZEsJlTYYnv+fpeJR8IN2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Oct 20 17:47:48 2025 GMT Not After : Oct 27 17:47:48 2025 GMT Subject: CN=68f675c4-23af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:28:d5:35:0c:c3:8e:11:c2:e8:c0:a3:d4: 49:a4:01:6e:1c:ce:94:f8:65:2b:69:4b:50:b8:d2: 8f:72:91:6f:d7:ba:51:2e:32:af:74:48:87:82:fd: d3:2b:0a:aa:32:aa:32:23:88:47:b3:7f:71:9d:eb: 38:8d:1a:e0:a4:11:be:09:15:05:51:c0:3c:66:cc: 47:4e:5e:f4:40:6f:fb:01:7d:e8:13:c7:3f:68:af: 6c:b6:d1:91:fe:a5:f7:27:2d:5b:c0:3a:e0:7e:9b: 9f:70:55:f8:39:79:2a:2a:ff:dd:a0:f7:9a:6e:46: 4c:75:3d:27:0d:40:7f:7c:2e:d9:f2:d0:60:d4:75: 6f:0b:e2:e6:da:37:cc:7b:b2:e1:e9:67:b1:ee:5c: 77:60:ad:02:39:e9:c7:e8:a7:d5:26:24:c0:a4:47: cd:c0:25:32:70:1d:5a:fc:9e:44:a9:b8:08:e7:26: f7:c5:5f:bb:67:af:1e:76:b9:b5:5a:4d:bd:dd:aa: 03:5c:34:00:03:25:8b:b3:2a:dd:80:72:da:80:54: 7b:70:4b:43:84:ae:37:8d:5a:10:1f:54:a0:c0:0a: 5d:0e:5c:9f:17:6f:8d:d6:96:ce:37:08:93:d1:11: 2f:8c:e6:f5:14:c5:92:a8:ee:e1:b8:de:e1:e9:c9: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EE:7B:D9:B4:7C:65:84:1A:25:BD:ED:32:1A:84:63:4C:73:52:82 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:f0:70:b6:3e:d7:01:23:32:47:a1:f6:ea:61:48:27:ca: 32:d2:e8:e4:13:03:b5:39:b3:d5:8e:f2:8b:88:ea:ba:98:0b: bf:02:be:62:2e:41:47:43:4b:64:ba:08:e0:aa:29:19:42:16: 93:d5:b9:14:1d:45:fa:b4:ed:1a:dc:69:33:be:5b:45:8b:0c: d7:ae:52:68:14:3b:8e:6f:20:51:cf:df:fd:ba:8f:5a:44:2f: 62:f4:c1:20:0c:f0:6d:31:ed:b7:64:1b:73:1d:ac:c8:3a:b5: 33:50:8b:fc:bc:e9:e4:e7:5e:06:33:e0:a2:30:af:22:15:7b: 41:e3:99:c9:fa:79:d7:1b:e7:6a:d4:e0:4e:60:6c:c0:f6:80: 33:4a:23:11:76:b5:56:70:7c:c5:62:15:e9:a3:2c:23:35:35: 00:00:48:57:2b:5f:7e:32:7c:5f:58:7e:f7:d5:dd:da:fe:39: 65:18:e2:ea:68:6a:69:85:fe:28:58:06:98:a5:a5:a7:2b:b1: 32:ff:a2:e7:ad:a9:fc:03:c1:fb:07:11:42:f2:ce:16:72:28: eb:39:f6:6a:45:81:7a:45:33:82:5d:a5:98:cb:bb:26:73:1a: 09:48:31:d4:4a:b2:79:b8:cc:d9:02:79:4f:9a:44:0d:c1:6a: 6e:95:dd:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUxMDIwMTc0NzQ4WhcNMjUxMDI3MTc0NzQ4WjAYMRYwFAYD VQQDEw02OGY2NzVjNC0yM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dAo1TUMw44RwujAo9RJpAFuHM6U+GUraUtQuNKPcpFv17pRLjKvdEiHgv3T KwqqMqoyI4hHs39xnes4jRrgpBG+CRUFUcA8ZsxHTl70QG/7AX3oE8c/aK9sttGR /qX3Jy1bwDrgfpufcFX4OXkqKv/doPeabkZMdT0nDUB/fC7Z8tBg1HVvC+Lm2jfM e7Lh6Wex7lx3YK0COenH6KfVJiTApEfNwCUycB1a/J5EqbgI5yb3xV+7Z68edrm1 Wk293aoDXDQAAyWLsyrdgHLagFR7cEtDhK43jVoQH1SgwApdDlyfF2+N1pbONwiT 0REvjOb1FMWSqO7huN7h6ckGVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnue9m0 fGWEGiW97TIahGNMc1KCMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysvBwtj7XASMyR6H26mFIJ8oy0ujkEwO1ObPVjvKLiOq6mAu/Ar5i LkFHQ0tkugjgqikZQhaT1bkUHUX6tO0a3GkzvltFiwzXrlJoFDuObyBRz9/9uo9a RC9i9MEgDPBtMe23ZBtzHazIOrUzUIv8vOnk514GM+CiMK8iFXtB45nJ+nnXG+dq 1OBOYGzA9oAzSiMRdrVWcHzFYhXpoywjNTUAAEhXK19+MnxfWH731d3a/jllGOLq aGpphf4oWAaYpaWnK7Ey/6Lnran8A8H7BxFC8s4WcijrOfZqRYF6RTOCXaWYy7sm cxoJSDHUSrJ5uMzZAnlPmkQNwWpuld01 -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:09 2025 by rpki-client