$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: G59Zywpq6UueeeR1H9FsGGInNW5CA/51Afy1eyfq6F4= Subject key identifier: 20:17:C5:5F:B8:48:78:6A:93:14:6E:8B:A2:70:3F:11:33:3B:53:98 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FFE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0FF5 Signing time: Sun 02 Nov 2025 17:29:27 +0000 Manifest this update: Sun 02 Nov 2025 17:29:26 +0000 Manifest next update: Sun 09 Nov 2025 17:29:26 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: /cWPzWO1pLOCa+ELwEnUiWbHFuqcLyeV5A05vqN9Icw=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4094 (0xffe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Nov 2 17:29:26 2025 GMT Not After : Nov 9 17:29:26 2025 GMT Subject: CN=690794f6-59b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:36:26:32:56:bd:b3:85:1b:b8:c2:98:67: 02:e3:d0:e7:24:e5:04:41:b6:c8:aa:18:ab:2a:fa: 0a:ed:18:a0:71:03:e5:bd:c2:09:13:55:a1:90:1a: e1:40:3d:df:ae:6f:1f:be:6c:93:80:16:7e:2e:3d: f3:29:ad:ba:6f:73:51:ca:3f:21:24:86:c2:45:bf: f0:5e:9c:bc:79:64:e0:4c:ee:ad:2e:54:a3:c4:13: df:1b:95:28:27:65:20:e7:f6:61:86:75:7c:54:1e: cc:46:bb:2c:5e:a1:e9:49:0d:34:90:f9:af:1a:8e: 10:08:a6:04:6c:4e:9b:b8:67:75:67:10:9d:17:e7: b1:87:9b:22:f4:99:ae:5d:b3:ac:ad:66:d9:23:6f: 42:74:6e:6c:16:80:a4:55:4b:d5:70:57:e5:13:db: 1a:a5:1a:12:69:5d:f1:1a:a6:2b:9a:a4:ac:10:94: 06:9b:50:5e:ab:2a:35:20:24:f5:76:7d:a2:c1:b5: 37:20:e6:9e:11:a8:69:79:72:d5:1e:f7:33:5a:58: 29:68:80:54:3b:c6:bc:f2:9d:ac:f7:f0:a5:8d:cb: a1:5f:8c:f9:a6:44:6b:f4:bf:ff:7a:97:34:f6:29: 20:d4:3d:44:08:1d:b5:09:6a:67:e3:99:86:f0:2a: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:17:C5:5F:B8:48:78:6A:93:14:6E:8B:A2:70:3F:11:33:3B:53:98 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:83:36:80:7f:f1:35:51:33:ab:e6:d5:bd:8d:8f:ad:70:a7: dc:57:ec:e6:33:1e:a6:9d:e4:d3:14:38:52:aa:11:1b:2a:1d: ca:c6:56:ca:c6:ec:fd:40:ec:ba:87:c6:fb:95:7d:07:c3:7d: 15:31:b2:e5:f9:08:0e:b5:83:bc:d4:20:8d:02:70:39:2e:1f: 0c:8e:90:ed:c6:55:68:5d:0e:9d:11:78:56:5d:86:c7:c1:7b: 8e:16:e8:87:ef:6e:a0:2a:6b:d5:06:dc:4d:87:5f:35:ee:dc: fa:12:5e:42:4c:9b:3b:98:da:16:c6:15:54:07:c3:17:a2:bb: 8f:4b:03:0b:c0:fc:04:b8:73:ec:33:fe:86:23:ad:da:bb:78: a9:4d:98:d7:87:01:a8:ed:69:3b:2e:a4:d4:a1:a0:f4:6d:1e: 5f:7b:04:b0:33:ac:37:13:d4:83:45:67:61:ab:bc:98:1b:fd: c2:4d:8c:a5:70:f8:b3:d4:82:fb:3f:5f:98:a1:43:2f:67:77: 4e:6a:91:8c:d9:52:e5:f0:24:26:aa:62:1d:ec:fd:a3:ee:42: 17:d3:84:87:5a:26:0a:1f:1b:0e:21:a7:20:98:b5:17:7c:97: c4:7c:c6:fa:2b:b0:58:ba:20:d3:d4:32:f8:dd:0f:90:49:f1: a9:c6:91:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUxMTAyMTcyOTI2WhcNMjUxMTA5MTcyOTI2WjAYMRYwFAYD VQQDEw02OTA3OTRmNi01OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+w2JjJWvbOFG7jCmGcC49DnJOUEQbbIqhirKvoK7RigcQPlvcIJE1WhkBrh QD3frm8fvmyTgBZ+Lj3zKa26b3NRyj8hJIbCRb/wXpy8eWTgTO6tLlSjxBPfG5Uo J2Ug5/ZhhnV8VB7MRrssXqHpSQ00kPmvGo4QCKYEbE6buGd1ZxCdF+exh5si9Jmu XbOsrWbZI29CdG5sFoCkVUvVcFflE9sapRoSaV3xGqYrmqSsEJQGm1Beqyo1ICT1 dn2iwbU3IOaeEahpeXLVHvczWlgpaIBUO8a88p2s9/CljcuhX4z5pkRr9L//epc0 9ikg1D1ECB21CWpn45mG8Co1wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAXxV+4 SHhqkxRui6JwPxEzO1OYMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+gzaAf/E1UTOr5tW9jY+tcKfcV+zmMx6mneTTFDhSqhEbKh3KxlbK xuz9QOy6h8b7lX0Hw30VMbLl+QgOtYO81CCNAnA5Lh8MjpDtxlVoXQ6dEXhWXYbH wXuOFuiH726gKmvVBtxNh1817tz6El5CTJs7mNoWxhVUB8MXoruPSwMLwPwEuHPs M/6GI63au3ipTZjXhwGo7Wk7LqTUoaD0bR5fewSwM6w3E9SDRWdhq7yYG/3CTYyl cPiz1IL7P1+YoUMvZ3dOapGM2VLl8CQmqmId7P2j7kIX04SHWiYKHxsOIacgmLUX fJfEfMb6K7BYuiDT1DL43Q+QSfGpxpE6 -----END CERTIFICATE-----Generated at Tue Nov 4 18:06:01 2025 by rpki-client