$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: /ss47/1OWkvbSEHDum+zw6XDrMEA6JQnj5MsLtlN18k= Subject key identifier: 65:F7:56:2B:87:42:0A:D2:DA:E3:4F:15:F7:82:F8:76:96:7B:77:9A Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:07:57 +0000 Manifest this update: Mon 03 Nov 2025 07:07:56 +0000 Manifest next update: Mon 10 Nov 2025 07:07:56 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: W4eQDQSfyHNMLZgrOzJImrVUj3hj+gDkANIvUkBSUH0=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: YjLtFlGgcNbwn9rRIgf5MeQrG8tFe9vr3RMokUM4ipM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Nov 3 07:07:56 2025 GMT Not After : Nov 10 07:07:56 2025 GMT Subject: CN=690854cd-a19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:10:ae:34:bd:b2:ac:9d:84:d1:d2:87:eb: a6:76:d4:0c:b1:14:49:95:5b:b5:3d:b4:ce:ef:91: df:30:79:7e:c9:54:7b:10:f2:05:8a:19:91:52:7c: 0d:b9:fd:ef:4e:48:70:11:65:dd:ed:86:e3:b1:df: a0:a3:62:f2:37:eb:5f:53:30:9f:e9:cd:b6:ac:59: 55:c1:cb:37:9b:72:a5:f3:a8:09:ca:ea:2f:a8:f7: 68:d6:fa:18:3e:e7:0e:8c:24:13:df:07:85:ea:12: 11:74:51:3f:9f:16:a0:e2:c8:a5:13:47:62:84:07: 64:fd:c8:8d:a4:9f:c3:95:4a:18:e3:61:10:f0:e4: eb:35:ba:1a:49:dd:e8:8e:05:aa:53:41:f8:96:d8: b1:1f:1c:6a:e9:50:52:d6:a5:8f:80:71:04:15:22: e7:38:87:b7:35:01:65:64:22:61:a1:1f:b4:e4:c4: fc:be:af:f2:73:ee:41:a2:d6:70:0e:ac:a8:e0:b4: 5b:9a:c7:34:d4:07:3b:dd:64:3b:43:9c:ad:1c:f0: fb:4c:b4:4c:51:32:1d:c0:43:84:06:f9:bc:fd:2a: 90:fb:7a:2e:f3:9d:e7:bf:0e:36:95:bb:05:cf:d9: 53:2b:a2:ae:e8:1a:b4:bb:92:e9:50:8c:32:95:ab: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:56:2B:87:42:0A:D2:DA:E3:4F:15:F7:82:F8:76:96:7B:77:9A X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:88:5a:a6:1e:f6:59:22:1e:fb:2d:b0:31:9f:c2:77:0c:5a: 77:14:b6:59:3e:8d:85:6b:df:68:6b:c8:54:fe:f8:a4:49:2a: f5:e3:1e:34:d6:69:93:32:48:45:d8:85:c9:39:0a:f4:92:b4: a9:1b:3c:d1:6f:6c:1e:8d:70:98:7f:d7:f3:b0:e5:43:96:b7: 03:7c:0d:fe:48:a0:51:f4:7f:ea:1f:c5:6a:7b:3e:b6:86:74: 71:e2:1e:2b:d8:b4:3f:8e:50:61:19:04:a3:2f:7a:5c:7a:82: a9:3b:f9:85:8c:d6:c2:f8:3f:d0:e4:93:d5:0d:2f:28:49:34: 58:4b:71:a0:af:9f:eb:a2:6a:17:2c:2f:cf:95:01:c0:b1:9f: 68:b0:36:33:91:34:96:9a:51:6a:68:fd:69:7b:93:e9:f6:99: 6a:7b:26:d0:bd:6b:50:8d:f7:02:0b:38:45:02:81:cb:7e:81: f6:a7:b7:f7:53:e0:7a:58:fe:03:a5:d8:08:db:be:f4:3d:ae: 05:d3:95:fb:06:1c:07:14:ed:a8:36:fb:fa:77:85:aa:03:4b: 89:a5:c6:bb:23:a1:2e:21:36:83:41:c7:20:7d:ec:25:9d:15: 32:bc:3f:24:0a:78:66:ba:19:a4:3a:fd:e7:40:60:09:0c:1c: 5f:15:d3:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTExMDMwNzA3NTZaFw0yNTExMTAwNzA3NTZaMBgxFjAUBgNV BAMTDTY5MDg1NGNkLWExOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHkxCuNL2yrJ2E0dKH66Z21AyxFEmVW7U9tM7vkd8weX7JVHsQ8gWKGZFSfA25 /e9OSHARZd3thuOx36CjYvI3619TMJ/pzbasWVXByzebcqXzqAnK6i+o92jW+hg+ 5w6MJBPfB4XqEhF0UT+fFqDiyKUTR2KEB2T9yI2kn8OVShjjYRDw5Os1uhpJ3eiO BapTQfiW2LEfHGrpUFLWpY+AcQQVIuc4h7c1AWVkImGhH7TkxPy+r/Jz7kGi1nAO rKjgtFuaxzTUBzvdZDtDnK0c8PtMtExRMh3AQ4QG+bz9KpD7ei7znee/DjaVuwXP 2VMroq7oGrS7kulQjDKVq9kZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZfdWK4dC CtLa408V94L4dpZ7d5owHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUEwLzlDNTM3MTc4MkY2NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FK NHNZVW9tUWJCNFJ3TE5mRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSIWqYe9lkiHvstsDGfwncMWncUtlk+jYVr32hryFT++KRJKvXjHjTW aZMySEXYhck5CvSStKkbPNFvbB6NcJh/1/Ow5UOWtwN8Df5IoFH0f+ofxWp7PraG dHHiHivYtD+OUGEZBKMvelx6gqk7+YWM1sL4P9Dkk9UNLyhJNFhLcaCvn+uiahcs L8+VAcCxn2iwNjORNJaaUWpo/Wl7k+n2mWp7JtC9a1CN9wILOEUCgct+gfant/dT 4HpY/gOl2AjbvvQ9rgXTlfsGHAcU7ag2+/p3haoDS4mlxrsjoS4hNoNBxyB97CWd FTK8PyQKeGa6GaQ6/edAYAkMHF8V0/A= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:42 2025 by rpki-client