$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json) Hash identifier: u+Vtc5F6i0BE+FIii+9BFCGUu2KIT++kPjsHWnZ1S6A= Subject key identifier: 46:E9:EA:69:91:71:CB:19:BD:41:0D:35:96:16:EE:59:F3:F1:10:3E Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 07:59:18 +0000 Manifest this update: Mon 03 Nov 2025 07:59:17 +0000 Manifest next update: Mon 10 Nov 2025 07:59:17 +0000 Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: hH2itqHuYP3fxDGT7Qwkl6OTFzht7QdyQbXMJewFH+8=) 2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: tb9Z/1utdPuZydG4QyPURJ2Dph5uJmmV+jlmkscDXF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Validity Not Before: Nov 3 07:59:17 2025 GMT Not After : Nov 10 07:59:17 2025 GMT Subject: CN=690860d5-194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:02:dc:b6:3d:08:34:25:86:51:c2:df:0d: d0:ff:80:1c:53:45:97:32:95:9a:d2:bf:72:b7:6a: ed:c8:44:5b:db:63:bd:5e:70:87:2c:2e:2c:20:8a: 39:97:1d:2d:60:b2:c0:5a:5a:92:72:43:65:4a:a7: a3:ea:a9:d7:3a:ea:4a:6f:70:7c:e3:de:4c:e6:60: ab:42:b7:d2:ae:67:89:1c:77:6f:d4:69:a2:3a:1d: aa:97:e4:47:cd:dc:13:22:44:66:88:a0:8f:47:1a: a5:e4:ce:b2:78:3d:cc:aa:e7:18:93:5e:e0:c7:cc: a9:e5:58:67:18:70:3b:48:5e:d1:f4:42:36:a2:75: 41:a4:a9:b4:9d:12:92:2d:7a:ec:ff:9a:89:a2:16: 45:b0:bc:ea:6e:49:61:2d:b7:0d:f6:62:19:b1:cc: 12:b4:9c:f9:a4:d1:b7:a6:a8:ba:e0:d6:80:24:75: f2:d6:17:9d:47:78:19:75:d0:ca:6f:50:52:84:f4: c0:35:f3:c3:1e:23:b2:df:53:b1:44:97:f4:04:bf: a9:72:0e:04:ab:5f:57:2f:00:f5:06:bc:fb:6c:c0: 12:6b:48:b1:3c:40:a8:85:cb:77:7d:87:4b:f1:48: a2:e4:6f:72:d2:64:08:ba:23:1b:48:4b:87:08:ef: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:EA:69:91:71:CB:19:BD:41:0D:35:96:16:EE:59:F3:F1:10:3E X509v3 Authority Key Identifier: keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9b:2d:54:52:12:54:f2:13:52:f6:79:e9:34:3e:d0:9b:2f: 93:9d:9a:63:a9:76:4d:89:99:07:c6:65:e9:13:f2:28:5a:f6: 10:90:4e:89:fd:a6:29:a3:4a:8f:56:f2:f1:3c:94:e6:25:6f: 0b:e0:15:b6:a8:c6:64:75:78:91:cc:d4:99:1a:b1:f9:b9:b0: 64:c8:78:26:8e:9e:31:f9:f7:f8:6b:b2:a3:94:13:68:21:b6: 56:cb:32:a1:fe:4b:15:09:1a:2a:ec:d0:cf:9f:38:81:94:f5: 1d:9a:79:72:06:57:3b:dc:66:2b:6d:07:df:9a:ad:50:c1:d5: 3d:e9:a4:a5:15:e2:3c:10:25:bb:01:6c:b5:c7:35:81:9c:6c: a9:c9:58:43:9a:0f:dd:88:42:a6:7a:01:69:57:2c:ea:fd:47: d2:c4:77:df:72:68:f4:d0:b0:2f:b6:b9:31:a4:60:d1:eb:17: a3:3c:17:01:12:b6:e9:a8:aa:b0:f0:f2:e9:4c:96:b5:ca:f9: 30:64:2b:43:38:ce:3a:a3:d1:e4:b3:53:42:05:3b:dc:51:d8: 0a:46:de:39:b0:0b:b4:6f:34:2d:a5:60:51:5f:bf:68:c9:1e: 55:23:2d:78:9d:75:aa:db:ca:b0:51:a7:32:a4:36:90:8b:1b: 0b:11:35:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDQwMTExMC8GA1UEBRMoQTM5OUExMkM0OEMwMEU0MjYxRDI4RTBDNTdGRDRFM0U0 NzBEMkVCNzAeFw0yNTExMDMwNzU5MTdaFw0yNTExMTAwNzU5MTdaMBgxFjAUBgNV BAMTDTY5MDg2MGQ1LTE5NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZmwLctj0INCWGUcLfDdD/gBxTRZcylZrSv3K3au3IRFvbY71ecIcsLiwgijmX HS1gssBaWpJyQ2VKp6Pqqdc66kpvcHzj3kzmYKtCt9KuZ4kcd2/UaaI6HaqX5EfN 3BMiRGaIoI9HGqXkzrJ4Pcyq5xiTXuDHzKnlWGcYcDtIXtH0QjaidUGkqbSdEpIt euz/momiFkWwvOpuSWEttw32YhmxzBK0nPmk0bemqLrg1oAkdfLWF51HeBl10Mpv UFKE9MA188MeI7LfU7FEl/QEv6lyDgSrX1cvAPUGvPtswBJrSLE8QKiFy3d9h0vx SKLkb3LSZAi6IxtIS4cI7wuBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURunqaZFx yxm9QQ01lhbuWfPxED4wHwYDVR0jBBgwFoAUo5mhLEjADkJh0o4MV/1OPkcNLrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0NDAxLzFCODgyMTYwQUE3 MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVtaExFakFEa0poMG80TVZfMU9Qa2NOTHJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 NDAxLzFCODgyMTYwQUE3MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtK aDBvNE1WXzFPUGtjTkxyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2bLVRSElTyE1L2eek0PtCbL5OdmmOpdk2JmQfGZekT8iha9hCQTon9 pimjSo9W8vE8lOYlbwvgFbaoxmR1eJHM1Jkasfm5sGTIeCaOnjH59/hrsqOUE2gh tlbLMqH+SxUJGirs0M+fOIGU9R2aeXIGVzvcZittB9+arVDB1T3ppKUV4jwQJbsB bLXHNYGcbKnJWEOaD92IQqZ6AWlXLOr9R9LEd99yaPTQsC+2uTGkYNHrF6M8FwES tumoqrDw8ulMlrXK+TBkK0M4zjqj0eSzU0IFO9xR2ApG3jmwC7RvNC2lYFFfv2jJ HlUjLXiddarbyrBRpzKkNpCLGwsRNXc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:43 2025 by rpki-client