$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: FAkwn0jlDXaX5trugaRGO/ivJRTD7x0FoISzkIBcBk8= Subject key identifier: 6C:59:E1:DF:A6:59:03:65:BD:D8:AD:E6:3B:EF:16:C4:78:43:3D:96 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0128 Signing time: Thu 23 Oct 2025 06:40:11 +0000 Manifest this update: Thu 23 Oct 2025 06:40:10 +0000 Manifest next update: Thu 30 Oct 2025 06:40:10 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: hkVCHzJV1I1JTMeXLSSBgr7D8zEKPbu45A/VjnQYVKQ=) 2: E5DC3D66AC3C11F0AF4DFB70C4F9AE02.roa (hash: FVDCMag4J1uJE0A0oc/vIJIcosf8yzOA+QG0TVai6Ag=) 3: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: UMBCus9VAbAkM2YZxZd1UFTLKpMxYrragyckv395K7k=) 4: A599C6EAAA8B11F0931AEF0BC4F9AE02.roa (hash: cWNOjERH+tIUCM/LUhr9jnmxguxwJ/tso6U0YSzxViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Oct 23 06:40:10 2025 GMT Not After : Oct 30 06:40:10 2025 GMT Subject: CN=68f9cdcb-b5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:49:76:09:2a:af:5e:61:0e:c6:97:63:0f: 87:58:16:68:58:62:f3:ba:cd:68:09:56:6a:e9:9a: cf:a7:8e:51:b9:dd:74:c9:40:9e:36:3f:e9:db:d2: fb:5c:59:f6:d7:83:83:b5:ac:47:45:19:1e:22:2c: a4:c1:a0:08:a8:11:d9:01:9b:ee:85:c5:8b:17:98: fd:d9:c8:c6:d4:73:2e:86:4b:f8:27:68:22:7d:8e: 2e:ec:f1:52:f6:42:f0:c5:84:ce:51:11:de:bb:55: 20:1a:8e:c9:ad:c0:09:99:41:86:8c:3b:97:44:a7: 4b:ef:f6:58:56:08:be:5e:1a:a2:f9:7b:6c:42:87: 76:14:5c:96:73:35:f5:40:c3:07:17:b9:4e:c0:46: a4:6f:be:2d:0b:10:5f:95:c0:25:3a:ca:9d:31:99: bf:79:be:90:14:5b:7a:0c:aa:ba:50:de:c1:c6:25: 2a:58:fa:b8:b0:11:ff:3c:1c:f2:0b:06:c5:19:4c: 8c:08:82:b7:ca:26:ae:ee:7c:b5:4d:d3:fd:6f:91: b1:28:13:c8:91:2d:4c:ed:d2:4e:4d:16:44:77:49: e1:89:51:ef:89:78:46:c0:67:d3:41:c7:6e:6a:bd: 0b:d7:6b:8f:2b:42:81:6a:44:e2:84:f6:03:61:14: f4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:E1:DF:A6:59:03:65:BD:D8:AD:E6:3B:EF:16:C4:78:43:3D:96 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:92:f6:3f:56:11:d7:c7:74:65:67:db:f0:9d:38:d0:bb:c2: 96:ca:03:4c:89:b8:d8:10:b7:ed:cc:7a:39:05:eb:07:65:e7: ce:33:6d:30:2d:e7:6a:1c:b6:13:dd:21:2d:08:a2:dd:4b:2e: 2d:78:6d:9b:c3:03:50:bf:a3:77:bf:29:26:98:71:95:73:84: 49:69:ef:3f:9a:2f:d0:0f:fc:7a:ed:6c:d0:64:b4:02:e2:ff: 46:fe:39:db:98:05:54:b0:86:25:36:d1:44:a0:0c:cb:e7:f6: 1b:50:ff:90:f3:6e:b9:72:83:61:fe:1b:9f:7f:66:e4:59:1f: ff:c6:b3:48:a6:6e:8e:11:40:6c:8e:ab:70:c0:3c:2b:7d:bd: ed:56:85:3d:e5:82:48:e5:47:31:e6:0c:54:7d:6c:b4:20:5c: 19:30:f9:d0:d7:0d:02:99:62:9e:fb:99:dd:21:c5:25:1a:c5: 0c:7a:d6:4b:9f:62:79:92:2e:bb:5b:e1:15:60:a6:c6:16:ac: 3f:35:da:0e:db:8b:47:ff:17:c3:37:e3:15:ce:c8:e9:a0:36: d7:e4:e1:01:94:ee:8c:34:c3:2e:d0:e3:62:fb:c6:e2:2b:b1: 33:f7:2f:d5:63:d5:2d:14:cd:e8:a6:66:70:cc:91:97:90:29: f2:16:9a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjUxMDIzMDY0MDEwWhcNMjUxMDMwMDY0MDEwWjAYMRYwFAYD VQQDEw02OGY5Y2RjYi1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17BJdgkqr15hDsaXYw+HWBZoWGLzus1oCVZq6ZrPp45Rud10yUCeNj/p29L7 XFn214ODtaxHRRkeIiykwaAIqBHZAZvuhcWLF5j92cjG1HMuhkv4J2gifY4u7PFS 9kLwxYTOURHeu1UgGo7JrcAJmUGGjDuXRKdL7/ZYVgi+Xhqi+XtsQod2FFyWczX1 QMMHF7lOwEakb74tCxBflcAlOsqdMZm/eb6QFFt6DKq6UN7BxiUqWPq4sBH/PBzy CwbFGUyMCIK3yiau7ny1TdP9b5GxKBPIkS1M7dJOTRZEd0nhiVHviXhGwGfTQcdu ar0L12uPK0KBakTihPYDYRT06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxZ4d+m WQNlvdit5jvvFsR4Qz2WMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAokvY/VhHXx3RlZ9vwnTjQu8KWygNMibjYELftzHo5BesHZefOM20w LedqHLYT3SEtCKLdSy4teG2bwwNQv6N3vykmmHGVc4RJae8/mi/QD/x67WzQZLQC 4v9G/jnbmAVUsIYlNtFEoAzL5/YbUP+Q8265coNh/huff2bkWR//xrNIpm6OEUBs jqtwwDwrfb3tVoU95YJI5Ucx5gxUfWy0IFwZMPnQ1w0CmWKe+5ndIcUlGsUMetZL n2J5ki67W+EVYKbGFqw/NdoO24tH/xfDN+MVzsjpoDbX5OEBlO6MNMMu0ONi+8bi K7Ez9y/VY9UtFM3opmZwzJGXkCnyFpr5 -----END CERTIFICATE-----Generated at Fri Oct 24 13:32:10 2025 by rpki-client