$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: htwdkDP5DX5zYBmv1cpmgMEAzfDjJl8WZan2TfWk2FQ= Subject key identifier: 07:37:AA:9A:33:B1:2D:4D:41:84:BB:76:B4:09:22:C2:24:E7:7C:32 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0228 Signing time: Thu 23 Oct 2025 03:34:25 +0000 Manifest this update: Thu 23 Oct 2025 03:34:24 +0000 Manifest next update: Thu 30 Oct 2025 03:34:24 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: FDYJCqLKQ5ZUmPPFeGxT0h13Vl8YPJxNNNjXSs8LPSc=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Oct 23 03:34:24 2025 GMT Not After : Oct 30 03:34:24 2025 GMT Subject: CN=68f9a240-040a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:25:c0:3e:80:c8:b7:b7:c9:f3:98:3c:37: b7:93:7a:7a:03:ea:1b:d3:25:f0:85:c3:9a:0e:bb: 65:35:da:0e:df:be:2c:75:32:15:8d:8f:06:a5:34: 6d:67:38:d1:26:6c:e6:7d:b1:b8:72:99:9d:18:d3: 89:a8:2d:75:d7:06:84:90:a1:e0:76:1d:a6:8f:4f: 0d:08:f9:2a:d5:9c:71:b6:91:16:d8:22:30:f6:2d: 9f:f0:ee:5e:8e:24:86:47:9c:c6:4e:26:b2:31:37: a9:71:5d:60:8e:52:a6:f0:26:2c:5c:3c:a5:21:a7: 5a:8e:dd:7d:58:13:6d:cd:73:fb:4a:a6:09:7a:99: a1:70:76:3a:f7:ce:8f:b9:61:e1:b6:45:e6:35:dd: 8c:cd:a1:7b:f2:d4:84:b0:8e:c5:8b:24:45:99:98: 84:70:d7:ae:77:d7:e6:ec:ed:cf:31:ac:78:ba:a8: c1:4d:18:63:fc:0f:39:28:e2:0c:9e:c5:7c:d4:5c: 21:51:17:bf:12:7a:42:55:f6:90:c1:7f:d9:e6:7b: 12:cb:11:5b:80:40:f7:21:b3:37:36:88:14:1c:07: 20:fb:e7:39:5d:53:f3:d1:a7:ed:40:33:d6:3c:c1: 67:66:30:da:91:ba:45:42:70:ce:f8:bb:8d:e7:c4: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:37:AA:9A:33:B1:2D:4D:41:84:BB:76:B4:09:22:C2:24:E7:7C:32 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cf:9f:01:6e:ad:d0:21:e0:e4:d0:ef:b3:b7:4f:d3:04:70: 9b:21:0b:08:77:2b:e8:1c:b0:19:cb:b2:be:90:93:d1:cb:21: 88:57:8d:3d:0d:f9:98:d5:6f:03:ee:cf:5c:73:61:79:63:7f: b6:b4:49:0f:a2:fd:f2:52:74:ed:06:fc:05:8b:bd:b8:cc:b8: fc:f5:87:c8:c4:37:db:c3:30:dc:63:ee:27:2e:90:47:d5:14: 86:fc:bc:8d:66:ff:a2:9e:1f:7d:56:30:ce:6f:7a:57:8e:64: 55:16:fd:d5:01:ed:75:e4:14:45:ae:8c:26:2c:45:2f:66:41: 68:b9:ab:3d:46:aa:a2:ab:a9:2b:19:0d:55:b6:a0:ae:2e:cf: 4e:b0:82:d1:85:7f:a0:53:0f:a4:f3:a6:e1:cd:2e:08:3a:06: de:f9:bc:b1:6a:47:a9:8d:ea:42:7b:09:f4:ad:f8:29:f2:87: 9b:46:97:46:bd:c6:82:99:05:64:2a:5b:d9:6e:0f:d9:5c:81: 1d:eb:f1:02:09:0f:a9:8c:bb:0b:71:a3:88:95:64:25:64:dc: cc:9a:83:72:1e:73:06:a7:10:d8:c3:ad:0d:8b:28:0b:67:c7: 99:64:a3:70:ca:f0:b8:cc:28:59:87:6e:37:11:8a:4e:da:fc: 7e:5e:dc:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUxMDIzMDMzNDI0WhcNMjUxMDMwMDMzNDI0WjAYMRYwFAYD VQQDEw02OGY5YTI0MC0wNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz8lwD6AyLe3yfOYPDe3k3p6A+ob0yXwhcOaDrtlNdoO374sdTIVjY8GpTRt ZzjRJmzmfbG4cpmdGNOJqC111waEkKHgdh2mj08NCPkq1ZxxtpEW2CIw9i2f8O5e jiSGR5zGTiayMTepcV1gjlKm8CYsXDylIadajt19WBNtzXP7SqYJepmhcHY6986P uWHhtkXmNd2MzaF78tSEsI7FiyRFmZiEcNeud9fm7O3PMax4uqjBTRhj/A85KOIM nsV81FwhURe/EnpCVfaQwX/Z5nsSyxFbgED3IbM3NogUHAcg++c5XVPz0aftQDPW PMFnZjDakbpFQnDO+LuN58TuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc3qpoz sS1NQYS7drQJIsIk53wyMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLz58Bbq3QIeDk0O+zt0/TBHCbIQsIdyvoHLAZy7K+kJPRyyGIV409 DfmY1W8D7s9cc2F5Y3+2tEkPov3yUnTtBvwFi724zLj89YfIxDfbwzDcY+4nLpBH 1RSG/LyNZv+inh99VjDOb3pXjmRVFv3VAe115BRFrowmLEUvZkFouas9Rqqiq6kr GQ1VtqCuLs9OsILRhX+gUw+k86bhzS4IOgbe+byxakepjepCewn0rfgp8oebRpdG vcaCmQVkKlvZbg/ZXIEd6/ECCQ+pjLsLcaOIlWQlZNzMmoNyHnMGpxDYw60NiygL Z8eZZKNwyvC4zChZh243EYpO2vx+XtwK -----END CERTIFICATE-----Generated at Fri Oct 24 21:42:13 2025 by rpki-client