$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: B+sq7am2QHFouitpC4rT3XslCLV4jkdNTSagEQoLcU8= Subject key identifier: 42:B2:7C:EE:D7:BE:B5:56:25:12:93:52:1B:C8:DF:B7:AD:E0:FD:AF Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E95 Signing time: Mon 20 Oct 2025 18:11:22 +0000 Manifest this update: Mon 20 Oct 2025 18:11:22 +0000 Manifest next update: Mon 27 Oct 2025 18:11:22 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: 4VMKef+aoP5lIOUUBFEw+hb6iXehZiNfmT0uBBv41+k=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3740 (0xe9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Oct 20 18:11:22 2025 GMT Not After : Oct 27 18:11:22 2025 GMT Subject: CN=68f67b4a-d8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:d4:4c:43:9a:8e:a7:d9:ac:69:fe:47:d5: 77:bf:c7:87:b9:c5:39:7e:9d:fd:a4:c0:99:5b:ec: 55:8a:7a:63:82:5d:9c:e9:b4:30:4f:65:bf:06:af: 04:bc:6a:5b:e2:47:e7:d9:1c:12:6c:81:8a:bf:e2: 27:03:0b:ff:0e:a4:6e:c2:c5:cb:19:17:b7:f9:ab: d5:25:f1:b8:c4:33:76:eb:e1:cd:22:17:47:f5:c5: ce:89:b1:fe:50:81:65:98:dd:44:c1:41:d2:fa:25: 57:55:a5:d2:80:24:c9:2e:d4:62:ed:b0:5f:5a:45: c8:0e:a9:7b:0a:8e:d4:79:71:6d:87:0d:aa:f1:be: 5b:73:e0:db:0a:33:fb:16:06:6a:f9:06:71:62:2a: f2:13:43:56:fe:35:52:6f:34:77:27:38:2b:21:82: 8a:5b:58:a2:9c:02:80:6f:23:87:e5:36:bf:16:86: 0f:96:7d:e2:65:01:48:93:4d:9e:d7:7a:d6:13:b2: bd:2d:62:78:0c:1f:14:9a:fb:45:73:66:8e:fc:a8: 07:b8:83:96:5a:95:2b:6f:e0:ff:b5:c5:80:b1:22: a3:83:bb:a9:34:87:9c:a5:bf:8d:47:d4:a6:0c:9a: e4:be:dc:b2:13:8d:22:d5:bd:29:b9:c2:f6:3a:a6: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B2:7C:EE:D7:BE:B5:56:25:12:93:52:1B:C8:DF:B7:AD:E0:FD:AF X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:7c:26:d4:02:b6:c0:5d:85:6f:06:7b:94:a0:1f:81:fa: 73:d9:74:d9:bd:f5:58:95:5a:66:d5:09:7c:1b:9a:72:77:f2: 78:61:d0:60:c4:b8:9d:d8:74:47:9b:f4:30:e4:ef:39:0d:a0: b0:ed:a2:ab:4b:a7:c7:1f:2f:6c:85:dd:0b:fc:69:f0:7c:09: 06:42:2b:c8:db:46:1f:f0:a9:15:3e:d1:20:c0:e8:39:96:55: 2d:00:70:2e:ae:80:b1:02:c2:3d:f8:d9:b8:58:35:ea:61:43: af:14:9f:28:b0:0e:73:9c:8c:d4:2c:ee:a8:32:c6:f9:e6:86: ae:53:43:8f:61:99:e9:8f:06:07:6d:cd:3b:7d:d8:97:79:47: ae:8d:84:26:e2:a8:4d:b9:3e:c9:ba:0a:42:2b:7e:01:1c:f2: 17:44:a7:11:ad:ba:7b:27:1b:0b:cf:f1:de:03:56:25:6c:2f: d3:e5:bf:7d:bc:4d:b9:fd:5d:7e:ba:66:0d:54:0e:63:5d:2f: 7b:2a:ac:b5:e0:9f:ce:94:31:52:05:e5:5a:90:99:fa:3d:08: 79:4b:e6:04:e2:8c:3c:be:5e:cb:59:42:06:21:88:7c:33:13: a6:c5:05:c5:8f:b8:4a:d8:e4:b0:ac:f6:2b:92:27:85:9d:41: df:73:c2:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUxMDIwMTgxMTIyWhcNMjUxMDI3MTgxMTIyWjAYMRYwFAYD VQQDEw02OGY2N2I0YS1kOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4znUTEOajqfZrGn+R9V3v8eHucU5fp39pMCZW+xVinpjgl2c6bQwT2W/Bq8E vGpb4kfn2RwSbIGKv+InAwv/DqRuwsXLGRe3+avVJfG4xDN26+HNIhdH9cXOibH+ UIFlmN1EwUHS+iVXVaXSgCTJLtRi7bBfWkXIDql7Co7UeXFthw2q8b5bc+DbCjP7 FgZq+QZxYiryE0NW/jVSbzR3JzgrIYKKW1iinAKAbyOH5Ta/FoYPln3iZQFIk02e 13rWE7K9LWJ4DB8UmvtFc2aO/KgHuIOWWpUrb+D/tcWAsSKjg7upNIecpb+NR9Sm DJrkvtyyE40i1b0pucL2Oqa9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKyfO7X vrVWJRKTUhvI37et4P2vMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4s3wm1AK2wF2FbwZ7lKAfgfpz2XTZvfVYlVpm1Ql8G5pyd/J4YdBg xLid2HRHm/Qw5O85DaCw7aKrS6fHHy9shd0L/GnwfAkGQivI20Yf8KkVPtEgwOg5 llUtAHAuroCxAsI9+Nm4WDXqYUOvFJ8osA5znIzULO6oMsb55oauU0OPYZnpjwYH bc07fdiXeUeujYQm4qhNuT7JugpCK34BHPIXRKcRrbp7JxsLz/HeA1YlbC/T5b99 vE25/V1+umYNVA5jXS97Kqy14J/OlDFSBeVakJn6PQh5S+YE4ow8vl7LWUIGIYh8 MxOmxQXFj7hK2OSwrPYrkieFnUHfc8IO -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:18 2025 by rpki-client