$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: YyecI9aaQuNUYmBMebpDnept3+Ou6HklFQpaUIQA7cs= Subject key identifier: BB:AA:2E:90:EE:B7:86:80:AD:B1:53:00:B0:FA:B4:3D:11:81:F0:BC Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 3C Signing time: Tue 07 Oct 2025 07:53:06 +0000 Manifest this update: Tue 07 Oct 2025 07:53:05 +0000 Manifest next update: Tue 14 Oct 2025 07:53:05 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: D0oV0zyHkJw6/DP48WKaeiUxf4OpATFDCqox0okiPag=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 07:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Oct 7 07:53:05 2025 GMT Not After : Oct 14 07:53:05 2025 GMT Subject: CN=68e4c6e2-8469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:39:1a:25:e9:2c:07:62:b8:9a:65:7f:0c:66: 39:10:e6:0b:2d:b6:2b:dc:d5:a5:7d:7c:ca:83:44: ed:7b:89:64:06:fb:76:f0:7d:4d:af:50:bf:ed:37: e3:be:d6:25:68:60:0f:e1:b5:55:95:5f:5e:0a:6b: 90:d0:ea:51:d2:93:a6:69:ef:71:3d:1b:89:8c:d1: 9e:82:15:b1:fd:92:9c:48:23:cf:43:4d:d5:d1:3a: 0a:93:7a:36:2e:d5:ef:52:6c:d5:bc:60:f2:cb:d0: 73:2b:d8:e0:0a:13:88:a9:54:76:4f:8c:ba:3a:3a: c9:94:03:30:48:d6:28:8d:96:20:9e:85:fa:bb:68: ea:3b:9b:0f:ac:77:7a:bb:e1:89:55:93:84:0d:37: e4:d7:63:3f:8a:6a:d6:f9:4b:e5:94:87:db:f1:9b: 52:1a:3f:1d:ec:cc:33:f5:15:a2:f3:3f:b9:81:90: 44:95:24:c8:33:95:73:34:97:b1:ba:3d:12:70:6a: 9c:69:de:12:27:4c:61:86:1d:ff:21:52:ac:3c:eb: c4:5d:50:a7:7b:2b:02:30:f0:3c:6b:b7:74:ee:92: dd:08:4c:32:82:73:a0:83:82:b0:f9:f6:28:38:5e: 5d:ca:7f:ca:13:ab:fa:b8:b4:00:86:ad:28:d2:7d: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:2E:90:EE:B7:86:80:AD:B1:53:00:B0:FA:B4:3D:11:81:F0:BC X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:11:81:08:2e:ce:b5:5b:ad:0c:55:0d:9c:b7:7f:df:ce:2b: 22:4d:54:dd:98:d1:7c:a0:f5:59:9b:27:65:7d:b9:81:e6:89: 86:7a:8e:fe:69:33:71:68:44:a6:69:c4:fd:b6:5e:38:cc:19: 6d:61:2c:b2:84:44:e5:0d:e1:61:6b:8c:61:93:53:7d:9b:a6: 66:f4:c7:27:6e:4d:14:12:17:cf:f1:fd:25:65:55:9b:bb:9c: 58:77:54:5f:9e:b8:2d:df:24:6d:48:f4:72:b9:79:7c:66:1f: c6:6b:ea:ef:db:4f:09:e2:9f:ec:e5:ac:8b:bc:c5:41:97:20: a2:9a:c8:98:68:b1:24:e4:9b:bb:66:28:d8:9b:86:4b:a7:3c: b6:36:81:0f:7c:0c:7f:9b:d3:90:5f:2b:73:6a:b6:53:d6:6d: 93:b8:1e:e5:4c:d7:fc:27:6d:0d:52:ce:d2:67:0f:8a:ff:66: 82:89:d8:31:64:47:f6:c4:d2:02:34:2b:85:b7:cb:0c:70:dd: ea:0e:33:01:43:88:3f:17:7d:1f:b9:a2:0c:69:54:8b:bc:d0: 2e:26:72:5a:b0:fc:b9:06:34:e0:da:24:ae:57:9a:ac:37:a8: d2:05:ee:0d:86:ca:0d:33:14:b0:74:72:9c:32:c2:64:be:4b: 1c:e2:3b:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTEwMDcwNzUzMDVaFw0yNTEwMTQwNzUzMDVaMBgxFjAUBgNV BAMTDTY4ZTRjNmUyLTg0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyORol6SwHYriaZX8MZjkQ5gsttivc1aV9fMqDRO17iWQG+3bwfU2vUL/tN+O+ 1iVoYA/htVWVX14Ka5DQ6lHSk6Zp73E9G4mM0Z6CFbH9kpxII89DTdXROgqTejYu 1e9SbNW8YPLL0HMr2OAKE4ipVHZPjLo6OsmUAzBI1iiNliCehfq7aOo7mw+sd3q7 4YlVk4QNN+TXYz+Katb5S+WUh9vxm1IaPx3szDP1FaLzP7mBkESVJMgzlXM0l7G6 PRJwapxp3hInTGGGHf8hUqw868RdUKd7KwIw8Dxrt3Tukt0ITDKCc6CDgrD59ig4 Xl3Kf8oTq/q4tACGrSjSffx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu6oukO63 hoCtsVMAsPq0PRGB8LwwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwRgQguzrVbrQxVDZy3f9/OKyJNVN2Y0Xyg9VmbJ2V9uYHmiYZ6jv5p M3FoRKZpxP22XjjMGW1hLLKEROUN4WFrjGGTU32bpmb0xyduTRQSF8/x/SVlVZu7 nFh3VF+euC3fJG1I9HK5eXxmH8Zr6u/bTwnin+zlrIu8xUGXIKKayJhosSTkm7tm KNibhkunPLY2gQ98DH+b05BfK3NqtlPWbZO4HuVM1/wnbQ1SztJnD4r/ZoKJ2DFk R/bE0gI0K4W3ywxw3eoOMwFDiD8XfR+5ogxpVIu80C4mclqw/LkGNODaJK5Xmqw3 qNIF7g2Gyg0zFLB0cpwywmS+SxziO/A= -----END CERTIFICATE-----Generated at Thu Oct 9 01:26:59 2025 by rpki-client