$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: sJRe75BHNZkh5e2T+sZG8/MDAwg//TPQJiJxMMZCQns= Subject key identifier: C2:E0:FC:4E:87:C1:DD:E9:00:24:0A:C1:87:60:E9:4D:5F:4C:1B:85 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0549 Signing time: Tue 04 Nov 2025 23:30:38 +0000 Manifest this update: Tue 04 Nov 2025 23:30:37 +0000 Manifest next update: Tue 11 Nov 2025 23:30:37 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: mM5GUGKrzAeVm298GXz0T9cghU06SGdcLaHewC0NOcU=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Nov 4 23:30:37 2025 GMT Not After : Nov 11 23:30:37 2025 GMT Subject: CN=690a8c9e-60c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:df:29:e6:b2:dd:d2:b2:a9:ff:3d:06:27: 33:94:a5:2e:34:6f:de:55:dc:f4:0b:2f:0c:0b:d9: 17:2d:56:a1:3e:0d:fa:51:66:42:d1:07:d9:cc:e4: 1a:94:49:0d:e6:e9:bc:95:ec:f6:c7:c5:01:b9:ce: 64:dc:fc:42:21:a5:4b:17:38:82:b9:7d:f5:a0:24: 8a:9c:62:a3:c7:25:24:34:42:45:20:df:00:26:e0: cd:02:5c:bb:61:bb:3f:cc:48:81:28:10:d9:a9:94: 78:4d:7a:57:8f:a0:c3:bf:fa:29:0c:ed:50:5d:6e: 9d:93:dd:cb:90:99:cf:65:54:dd:a7:38:93:d9:bb: de:a5:ea:e2:e5:c4:d6:fb:91:62:38:56:cc:2f:b5: f4:8b:f2:64:1a:99:e5:4d:46:2e:e4:4c:99:df:8d: 14:65:fe:cd:61:4d:cd:26:ce:e3:92:52:e8:11:fe: 86:8e:85:a0:2a:e0:4a:b8:cb:57:ef:ae:56:28:f5: d0:92:27:f7:8d:eb:ec:68:ce:ec:e4:e6:71:eb:a3: 0a:cb:30:82:2f:5c:58:4f:0a:9c:2b:35:5a:03:37: 40:02:51:ed:96:9b:7e:bb:d5:c0:4c:21:f1:29:16: f1:d5:c6:3a:31:c4:d0:6d:65:be:94:f7:39:91:43: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:FC:4E:87:C1:DD:E9:00:24:0A:C1:87:60:E9:4D:5F:4C:1B:85 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:79:d8:6d:f6:67:90:09:b4:b2:c2:6c:9d:3b:7c:7e:ad: ad:95:80:c0:9d:f0:b2:54:0e:92:87:3d:08:ee:42:d7:8f:36: fa:19:8d:12:30:28:2d:14:10:00:23:b1:a1:99:0f:a9:66:a8: a2:96:3a:20:18:25:89:86:3c:04:52:ce:89:e2:6c:4e:b3:71: 03:22:dc:c8:b0:4c:91:d0:9b:2c:7e:b0:27:63:a1:9c:a6:ba: 92:4b:33:11:bb:e3:86:0c:1f:dc:88:d1:8d:34:ca:1b:76:ac: f9:28:65:6e:2e:0a:9d:fa:60:b7:3f:59:cb:f9:77:29:ac:0f: 16:13:43:3b:2d:94:bb:db:31:67:ba:c6:dc:91:e2:50:23:6d: fe:94:17:f3:6d:7f:63:82:0b:91:d2:d8:04:3c:6e:09:ed:f6: 82:12:6a:2d:11:d1:8c:7e:c6:6f:b5:53:85:9d:da:2a:12:ef: a9:0f:96:32:8c:79:ab:e1:db:f6:11:0c:16:ab:68:eb:13:d8: c6:0b:44:a9:0d:d2:c9:d3:55:b6:d5:b3:46:54:c0:45:1c:14: 03:a0:13:f5:a1:28:75:ea:51:37:fe:c3:ef:88:e9:2a:7b:b7: 36:7c:c3:8d:6e:ec:eb:7d:19:5a:af:17:e3:2b:c7:70:a1:b7: 80:5e:2c:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUxMTA0MjMzMDM3WhcNMjUxMTExMjMzMDM3WjAYMRYwFAYD VQQDEw02OTBhOGM5ZS02MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkHfKeay3dKyqf89BiczlKUuNG/eVdz0Cy8MC9kXLVahPg36UWZC0QfZzOQa lEkN5um8lez2x8UBuc5k3PxCIaVLFziCuX31oCSKnGKjxyUkNEJFIN8AJuDNAly7 Ybs/zEiBKBDZqZR4TXpXj6DDv/opDO1QXW6dk93LkJnPZVTdpziT2bveperi5cTW +5FiOFbML7X0i/JkGpnlTUYu5EyZ340UZf7NYU3NJs7jklLoEf6GjoWgKuBKuMtX 765WKPXQkif3jevsaM7s5OZx66MKyzCCL1xYTwqcKzVaAzdAAlHtlpt+u9XATCHx KRbx1cY6McTQbWW+lPc5kUNQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLg/E6H wd3pACQKwYdg6U1fTBuFMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMx3nYbfZnkAm0ssJsnTt8fq2tlYDAnfCyVA6Shz0I7kLXjzb6GY0S MCgtFBAAI7GhmQ+pZqiiljogGCWJhjwEUs6J4mxOs3EDItzIsEyR0JssfrAnY6Gc prqSSzMRu+OGDB/ciNGNNMobdqz5KGVuLgqd+mC3P1nL+XcprA8WE0M7LZS72zFn usbckeJQI23+lBfzbX9jgguR0tgEPG4J7faCEmotEdGMfsZvtVOFndoqEu+pD5Yy jHmr4dv2EQwWq2jrE9jGC0SpDdLJ01W21bNGVMBFHBQDoBP1oSh16lE3/sPviOkq e7c2fMONbuzrfRlarxfjK8dwobeAXizK -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:34 2025 by rpki-client