$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: mvwLFYLZIIymc09s85D4a6hHDX/vrUIDvRw3PdhstMM= Subject key identifier: E1:64:9F:97:6C:4E:FF:DE:F6:9F:23:C8:8C:82:2F:D7:B2:7B:8B:04 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 17DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 17D2 Signing time: Sat 18 Oct 2025 16:57:31 +0000 Manifest this update: Sat 18 Oct 2025 16:57:31 +0000 Manifest next update: Sat 25 Oct 2025 16:57:31 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: eFZjj70TpD9+ulYTGx/eWREfsrlZ6IDQOKJRip0c4kY=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6107 (0x17db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Oct 18 16:57:31 2025 GMT Not After : Oct 25 16:57:31 2025 GMT Subject: CN=68f3c6fb-63ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:e8:9a:65:93:23:23:8d:1d:ea:e2:fc:6e: 42:d4:41:32:a1:9e:ba:20:0c:aa:5b:68:5d:44:96: e0:dd:98:58:99:7e:ef:8f:4a:3c:d9:74:7a:b9:11: ad:c9:b5:1d:9e:db:3c:0e:ae:e2:00:08:6f:d1:c8: 78:b7:5b:91:fc:20:7d:f4:37:2f:0b:1c:4a:5c:ba: e9:47:d6:85:56:1a:41:db:34:d4:4a:ea:e5:79:d4: 15:0e:06:cb:2b:06:15:b7:23:a4:c9:7b:a4:1c:59: bd:7f:47:69:9c:a7:54:00:89:18:bd:b0:48:53:75: 69:b4:43:51:1d:fe:e7:ef:03:9c:02:3d:80:bd:f3: e3:12:47:57:b8:09:2d:7f:e7:4c:33:ab:58:f1:0e: 8b:58:69:a8:44:5e:b1:15:3d:29:82:f5:a6:3c:1e: 19:e9:3e:a6:1d:35:fa:7d:98:5c:00:88:f2:7c:bb: b3:73:c9:92:8b:fc:63:71:16:ba:a3:93:ee:c1:6a: 51:7c:46:0e:57:c8:a4:6f:50:07:5b:84:cf:67:18: 15:6f:ae:a7:db:1f:11:2f:8f:72:83:d0:f5:0b:f1: c7:55:86:d1:37:18:17:3e:69:98:0e:b7:f4:2c:14: ae:29:46:ee:73:e7:f1:b7:72:4c:5b:60:c1:80:3d: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:9F:97:6C:4E:FF:DE:F6:9F:23:C8:8C:82:2F:D7:B2:7B:8B:04 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:58:c0:a4:ec:56:73:aa:79:dc:57:7b:11:d2:87:5d:f9:70: a4:ec:d7:7f:ed:32:4f:b1:94:65:9b:ce:72:74:1d:44:1d:98: c7:3d:f2:10:15:f5:91:5b:a8:32:15:b3:8c:85:bd:89:2a:10: 92:3d:dc:58:b3:eb:e3:21:7c:2a:5f:74:9a:fe:f1:49:41:9a: bf:39:be:6c:85:81:f4:8b:df:a7:57:10:23:87:7b:49:9f:f2: 73:69:67:46:c6:76:a2:84:de:b1:eb:ae:23:70:a6:c7:af:ba: d0:e3:4d:56:33:e5:33:e0:e8:64:2f:b4:f0:9d:dd:36:65:7a: a1:9d:e2:a6:8a:14:28:f7:bd:96:94:9c:a5:0d:56:b0:05:9a: f7:4c:d3:0c:e4:fa:fb:a2:98:15:08:bc:fa:5d:7e:a5:f4:58: b4:9a:ee:be:9a:60:50:cf:c8:0a:bd:66:70:6f:97:2c:4d:8b: 44:9a:b6:2b:fc:db:f5:55:b7:a9:3d:8f:fe:15:a3:8a:e8:e7: 7c:ea:79:e8:d9:db:8c:c5:d4:0c:ee:97:3d:7c:2d:5f:3f:65: 37:ce:b5:e6:68:d6:5e:45:62:c8:1d:50:e0:b0:9a:e4:77:16: b3:0d:5f:c3:54:d4:a5:05:95:b7:25:0e:e1:5c:7b:c2:a2:4c: 39:9c:a6:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUxMDE4MTY1NzMxWhcNMjUxMDI1MTY1NzMxWjAYMRYwFAYD VQQDEw02OGYzYzZmYi02M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkO3ommWTIyONHeri/G5C1EEyoZ66IAyqW2hdRJbg3ZhYmX7vj0o82XR6uRGt ybUdnts8Dq7iAAhv0ch4t1uR/CB99DcvCxxKXLrpR9aFVhpB2zTUSurledQVDgbL KwYVtyOkyXukHFm9f0dpnKdUAIkYvbBIU3VptENRHf7n7wOcAj2AvfPjEkdXuAkt f+dMM6tY8Q6LWGmoRF6xFT0pgvWmPB4Z6T6mHTX6fZhcAIjyfLuzc8mSi/xjcRa6 o5PuwWpRfEYOV8ikb1AHW4TPZxgVb66n2x8RL49yg9D1C/HHVYbRNxgXPmmYDrf0 LBSuKUbuc+fxt3JMW2DBgD1kZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFkn5ds Tv/e9p8jyIyCL9eye4sEMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLWMCk7FZzqnncV3sR0odd+XCk7Nd/7TJPsZRlm85ydB1EHZjHPfIQ FfWRW6gyFbOMhb2JKhCSPdxYs+vjIXwqX3Sa/vFJQZq/Ob5shYH0i9+nVxAjh3tJ n/JzaWdGxnaihN6x664jcKbHr7rQ401WM+Uz4OhkL7Twnd02ZXqhneKmihQo972W lJylDVawBZr3TNMM5Pr7opgVCLz6XX6l9Fi0mu6+mmBQz8gKvWZwb5csTYtEmrYr /Nv1VbepPY/+FaOK6Od86nno2duMxdQM7pc9fC1fP2U3zrXmaNZeRWLIHVDgsJrk dxazDV/DVNSlBZW3JQ7hXHvCokw5nKYV -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:17 2025 by rpki-client