$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: 5eIkxvEeqm/T6nmiV2oYgSXpOnnmn8qmBNvjvlf9OAM= Subject key identifier: 9A:FF:BF:BC:E5:CC:A3:2D:E5:1D:DD:F4:A8:41:51:F6:17:00:F3:7D Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:37:43 +0000 Manifest this update: Mon 27 Oct 2025 07:37:43 +0000 Manifest next update: Mon 03 Nov 2025 07:37:43 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: n+SELCsAcgmDq1rKCgJP/0vZEai+4HHB6j/h0YM0PIA=) 2: 6BC308A4ABD111F0A03CFC15C4F9AE02.roa (hash: KXJnMGfGJ3kG3e40pHo+x5iAcN5v1yBqTBZ04eTSA8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Oct 27 07:37:43 2025 GMT Not After : Nov 3 07:37:43 2025 GMT Subject: CN=68ff2147-b191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:dc:76:73:30:26:4d:d0:39:9e:08:ee:21: 0b:64:f8:89:2a:4d:24:03:55:18:ab:d8:17:3e:b0: 6d:b1:37:c6:2b:27:73:c5:58:0a:d5:66:9b:63:03: b5:88:6e:3f:7b:c1:81:81:e7:18:86:73:0a:b4:19: 5e:1f:03:fa:63:b6:3c:e7:30:e6:7b:7b:bc:eb:4a: 8f:69:30:62:d7:ef:64:4b:08:79:c4:e6:51:95:66: d0:7b:42:23:c3:21:8d:76:41:f5:a4:7c:59:22:f9: 67:29:17:c5:94:b3:af:b1:ef:3b:4d:f6:b5:3c:75: 34:98:26:e9:ca:67:24:c8:ea:a0:ca:f0:1c:13:0d: e9:78:a1:cc:a2:4b:dd:91:c5:39:81:e2:ec:9d:30: b7:ed:e3:e3:4b:18:3d:9a:01:7f:96:b7:96:8e:cb: 92:4a:44:71:b4:d5:7e:20:2b:b0:e7:48:7f:4d:1a: ed:8d:59:4c:7d:a1:9a:1b:9b:e9:8f:c6:31:dd:79: a4:62:98:57:6c:3f:47:3e:a6:c3:e2:f3:d8:ec:ba: c1:b4:a0:97:4d:1f:16:43:bb:c8:a5:36:d7:75:07: 54:42:88:1b:a3:36:00:d1:3b:d9:ef:b1:e9:65:39: fc:18:c8:d8:b4:b9:36:35:c0:02:72:69:e8:83:f0: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FF:BF:BC:E5:CC:A3:2D:E5:1D:DD:F4:A8:41:51:F6:17:00:F3:7D X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b6:14:47:a1:d5:fa:95:0a:57:b3:e4:8e:02:29:17:02:cc: 97:18:b2:a2:ea:1a:ee:ff:09:aa:ca:af:b0:ff:85:4e:84:d0: 02:65:12:6a:2b:be:03:7c:09:8e:ed:17:77:70:c0:98:54:d9: 70:00:6e:be:0d:5e:ad:92:bd:5d:8e:33:4d:e3:48:55:07:89: 0e:73:74:24:be:12:06:9b:53:56:a3:d8:f6:d2:5d:b8:a6:5a: 6c:2f:4f:80:4b:68:08:e2:fa:c4:f5:0e:1d:c2:3c:1e:e3:3e: 64:df:28:cd:af:bd:61:c3:00:61:8b:36:39:58:41:ea:da:e9: 13:f4:a4:81:f2:d1:e7:fe:14:b1:8b:25:28:ff:1b:6f:48:ba: 5f:7a:4a:6f:49:6b:b3:53:6e:84:d6:e1:f7:9e:59:5d:12:41: e1:9c:49:2d:ab:9a:31:3d:b6:3f:0f:1a:c8:03:7e:61:c1:f9: 5a:66:48:24:8e:5e:77:38:fc:5d:75:ce:e2:74:9a:5c:c3:a3: 78:8d:c4:ec:c2:dd:c7:75:c3:e8:cc:70:98:c3:7f:f2:e8:1a: 49:d6:0d:1e:a1:55:4d:df:ff:91:d6:ab:33:1b:56:19:54:7f: c9:29:84:d6:27:25:61:74:7c:7a:5f:26:af:1d:8f:e2:67:4d: 26:bf:d7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3NzIxMTAvBgNVBAUTKDk4RTFFOUIwNDNFNjhEMzc2OUU5QTY4REIxQzI2RDcx NTEwOEY3ODcwHhcNMjUxMDI3MDczNzQzWhcNMjUxMTAzMDczNzQzWjAYMRYwFAYD VQQDEw02OGZmMjE0Ny1iMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+fcdnMwJk3QOZ4I7iELZPiJKk0kA1UYq9gXPrBtsTfGKydzxVgK1WabYwO1 iG4/e8GBgecYhnMKtBleHwP6Y7Y85zDme3u860qPaTBi1+9kSwh5xOZRlWbQe0Ij wyGNdkH1pHxZIvlnKRfFlLOvse87Tfa1PHU0mCbpymckyOqgyvAcEw3peKHMokvd kcU5geLsnTC37ePjSxg9mgF/lreWjsuSSkRxtNV+ICuw50h/TRrtjVlMfaGaG5vp j8Yx3XmkYphXbD9HPqbD4vPY7LrBtKCXTR8WQ7vIpTbXdQdUQogbozYA0TvZ77Hp ZTn8GMjYtLk2NcACcmnog/DNoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr/v7zl zKMt5R3d9KhBUfYXAPN9MB8GA1UdIwQYMBaAFJjh6bBD5o03aemmjbHCbXFRCPeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzc3Mi85MUZGMEQ5MjVC OUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpUZHA2YWFOc2NKdGNWRUk5 NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpU ZHA2YWFOc2NKdGNWRUk5NGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxthRHodX6lQpXs+SOAikXAsyXGLKi6hru/wmqyq+w/4VOhNACZRJq K74DfAmO7Rd3cMCYVNlwAG6+DV6tkr1djjNN40hVB4kOc3QkvhIGm1NWo9j20l24 plpsL0+AS2gI4vrE9Q4dwjwe4z5k3yjNr71hwwBhizY5WEHq2ukT9KSB8tHn/hSx iyUo/xtvSLpfekpvSWuzU26E1uH3nlldEkHhnEktq5oxPbY/DxrIA35hwflaZkgk jl53OPxddc7idJpcw6N4jcTswt3HdcPozHCYw3/y6BpJ1g0eoVVN3/+R1qszG1YZ VH/JKYTWJyVhdHx6XyavHY/iZ00mv9fe -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:47 2025 by rpki-client