$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json) Hash identifier: G/lAal74zIShO6nf7PMq15RRm0k8jQ1B86vrwzZBQb8= Subject key identifier: 5D:87:AF:BE:EB:B9:B5:84:24:89:41:50:B8:22:E7:C8:AD:76:A3:78 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft Manifest number: 05D6 Signing time: Tue 28 Oct 2025 22:55:40 +0000 Manifest this update: Tue 28 Oct 2025 22:55:39 +0000 Manifest next update: Tue 04 Nov 2025 22:55:39 +0000 Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: 3v7Wjg/A44xUiz8ryzB/yve7uQ0cSoyJPP/XHDaaZHE=) 2: 774D2C8A895911F082979238C4F9AE02.roa (hash: MNGV40v8PxwIzKP/YcpeveDanhXceoP8ufn50nFL4nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 22:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Oct 28 22:55:39 2025 GMT Not After : Nov 4 22:55:39 2025 GMT Subject: CN=690149ec-6ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:0f:3e:ed:c3:0f:7c:de:06:7f:74:cf:8e: 33:ff:05:47:71:4f:3d:c3:85:bf:26:c0:43:b2:83: 16:6d:e4:b5:c8:c8:67:d3:4d:bf:df:41:25:b2:5a: 33:1f:26:0a:6d:68:c9:80:23:fb:9c:59:22:57:f6: 0c:78:bd:54:c4:2a:41:44:d9:3f:05:f1:88:a0:ca: 8e:b4:ff:3d:22:c6:8f:7e:d6:59:51:6d:14:4d:23: d8:58:2f:1d:da:88:a5:9c:05:6b:a1:fa:5b:21:66: c5:89:da:14:4a:cd:7b:ff:72:15:53:4a:02:c1:85: 6e:c1:b2:d5:8f:b8:16:6e:ad:db:c8:66:8f:aa:b0: bb:36:21:37:39:65:bf:3d:46:9f:9c:3d:8d:03:8f: 52:1a:cf:0a:7e:7a:b3:90:88:65:f0:19:50:64:a5: 59:e4:53:c0:30:5b:f8:78:d5:f3:5a:21:0a:e7:97: c2:9a:74:80:4d:a6:a6:74:89:7d:8f:1c:0b:e1:62: 24:a0:e0:ee:1f:7a:fa:41:88:8c:45:bb:6b:36:c2: 5e:6e:d5:d1:45:5a:6a:5e:8f:65:7c:a5:87:22:b1: 64:1e:7b:61:9c:c6:ee:14:f5:24:5a:0f:d3:8e:bd: b2:33:5f:b7:62:d1:f5:db:12:29:48:8c:41:3f:de: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:87:AF:BE:EB:B9:B5:84:24:89:41:50:B8:22:E7:C8:AD:76:A3:78 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:fa:9d:cc:6c:75:d7:1d:bc:24:36:71:0d:8b:e1:02:ad: 56:94:83:f3:aa:87:76:6e:cc:52:a6:8a:f2:87:5f:07:ac:1f: 78:f7:1b:55:0d:10:6f:e8:e8:d4:70:19:c4:56:e8:f2:94:5b: ec:9b:07:83:b9:f7:b5:e5:6a:7e:8b:31:6c:aa:03:ed:e3:04: 48:fc:05:12:87:f8:a0:e0:8a:60:6a:d3:23:c9:e7:a0:08:d4: 7c:e6:d3:19:79:ed:68:50:5b:a5:58:72:e4:b6:00:fc:dd:d3: c5:e8:c2:6e:49:3b:98:01:fc:af:24:27:dd:65:94:08:ca:eb: 2a:a4:b1:65:9b:dd:05:19:80:88:57:b4:86:76:3b:a4:45:8d: c0:ad:c9:64:76:18:ed:8e:e6:c8:f8:a8:f2:74:8a:7a:18:af: f4:b1:93:73:0c:c5:5e:7f:9f:8a:07:69:9d:76:37:02:7a:9a: 14:b6:45:a4:af:51:36:98:08:db:6c:fa:a9:fd:48:ee:9c:a3: cf:de:c3:c3:1e:c4:8b:c4:96:82:65:f5:45:79:7d:b7:a5:57: 4c:3d:25:d1:58:6b:23:23:7b:47:1e:83:05:00:08:1b:b2:a4: 98:14:6c:3f:fc:11:20:3e:3b:c6:f7:fe:d8:13:f1:b4:fb:b2: dc:73:62:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTBBRjExMC8GA1UEBRMoNjhFRTg1RjRDMjdENEJBOTNFMEQ2QjZBM0U5MjY1OUUx MEQ2ODk1RTAeFw0yNTEwMjgyMjU1MzlaFw0yNTExMDQyMjU1MzlaMBgxFjAUBgNV BAMTDTY5MDE0OWVjLTZjZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnZA8+7cMPfN4Gf3TPjjP/BUdxTz3Dhb8mwEOygxZt5LXIyGfTTb/fQSWyWjMf JgptaMmAI/ucWSJX9gx4vVTEKkFE2T8F8Yigyo60/z0ixo9+1llRbRRNI9hYLx3a iKWcBWuh+lshZsWJ2hRKzXv/chVTSgLBhW7BstWPuBZurdvIZo+qsLs2ITc5Zb89 Rp+cPY0Dj1Iazwp+erOQiGXwGVBkpVnkU8AwW/h41fNaIQrnl8KadIBNpqZ0iX2P HAvhYiSg4O4fevpBiIxFu2s2wl5u1dFFWmpej2V8pYcisWQee2Gcxu4U9SRaD9OO vbIzX7di0fXbEilIjEE/3mSXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXYevvuu5 tYQkiUFQuCLnyK12o3gwHwYDVR0jBBgwFoAUaO6F9MJ9S6k+DWtqPpJlnhDWiV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMEFGL0ZENjVCNEQ4RTRB NjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU82RjlNSjlTNmstRFd0cVBwSmxuaERXaVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MEFGL0ZENjVCNEQ4RTRBNjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZr LURXdHFQcEpsbmhEV2lWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFhr+p3MbHXXHbwkNnENi+ECrVaUg/Oqh3ZuzFKmivKHXwesH3j3G1UN EG/o6NRwGcRW6PKUW+ybB4O597Xlan6LMWyqA+3jBEj8BRKH+KDgimBq0yPJ56AI 1Hzm0xl57WhQW6VYcuS2APzd08Xowm5JO5gB/K8kJ91llAjK6yqksWWb3QUZgIhX tIZ2O6RFjcCtyWR2GO2O5sj4qPJ0inoYr/Sxk3MMxV5/n4oHaZ12NwJ6mhS2RaSv UTaYCNts+qn9SO6co8/ew8MexIvEloJl9UV5fbelV0w9JdFYayMje0cegwUACBuy pJgUbD/8ESA+O8b3/tgT8bT7stxzYkk= -----END CERTIFICATE-----Generated at Thu Oct 30 15:00:31 2025 by rpki-client