$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: h/Q06c+QyKMGjFdMvh87Qm922PQ6lIAdLMN7c3ZByVw= Subject key identifier: CA:34:AB:6F:66:0D:FD:B9:31:20:C1:25:86:14:DC:15:28:98:FE:D3 Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0256 Signing time: Mon 03 Nov 2025 01:40:42 +0000 Manifest this update: Mon 03 Nov 2025 01:40:41 +0000 Manifest next update: Mon 10 Nov 2025 01:40:41 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: ZjCEOHpOvjJCZo2xIoGLo3yWYo8IPRpSmAmycVi+vDg=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Nov 3 01:40:41 2025 GMT Not After : Nov 10 01:40:41 2025 GMT Subject: CN=69080819-0609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:fd:fb:84:0b:74:be:5b:1c:61:5c:9d:31: dd:72:9a:ed:95:e8:d0:a1:9e:b4:be:d7:64:2a:42: d0:94:e2:57:14:88:b0:7e:e3:e7:ec:6b:24:7f:d3: b6:c5:da:a1:65:7d:99:95:54:36:40:d3:0b:bb:cb: 6a:07:4a:a0:11:08:6a:d7:cf:49:3c:57:f5:f7:33: c8:b9:4b:61:a8:b0:3d:53:f7:01:95:51:50:05:f5: 39:e4:ad:f1:d1:83:2d:a0:a7:36:10:7d:6a:b9:bb: e9:40:41:91:7a:d0:c8:8b:87:de:66:ae:fa:1f:f5: db:e8:e7:b2:4b:38:f4:71:70:19:47:07:0d:d2:58: 76:ae:3a:2b:00:8d:41:6d:da:92:b5:df:84:2c:a7: 41:a1:f0:01:2c:09:a3:d4:09:c6:08:31:32:72:dd: 78:27:44:2e:73:1b:6a:8d:1a:60:35:4f:df:63:43: 33:ea:84:ac:a1:3f:b3:07:68:ec:dd:14:76:1a:f8: 92:97:6f:c2:3e:b4:a6:d4:c7:4b:14:16:75:4d:02: 3a:87:63:d4:a1:d5:c8:90:50:ac:28:29:e7:5c:3c: 2b:35:fc:a2:35:eb:bd:93:e5:5f:92:27:ab:90:b2: 95:26:2c:72:30:12:de:7a:1d:b3:71:9b:d7:3f:86: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:AB:6F:66:0D:FD:B9:31:20:C1:25:86:14:DC:15:28:98:FE:D3 X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:18:2b:c7:bb:20:48:8d:e6:04:cb:5b:ab:9f:da:90:18:6c: 64:4e:12:be:2a:cf:2b:31:97:b7:94:b4:1d:5c:76:1a:87:d4: 43:32:90:c5:31:9e:9a:67:ac:09:dc:f4:77:d3:2d:0b:4c:f9: f5:c3:c4:6e:36:1e:4a:c8:bb:92:50:6d:07:41:35:bf:93:83: 9a:76:71:75:20:08:73:b1:8a:9b:52:b8:86:0e:34:d7:f0:26: 4d:0f:84:01:fa:53:1d:6f:df:07:be:74:0f:47:41:6a:f2:3d: a6:f1:e8:d6:0f:40:66:5c:9c:13:1a:e7:09:33:01:c4:87:c8: f6:e4:53:3f:9f:9a:f8:49:d4:a0:6c:8b:d1:18:1b:18:5c:b8: bc:73:48:4f:c2:5a:74:55:02:c3:ad:cd:86:1f:16:d0:5e:e5: d8:55:18:99:f5:82:89:02:d9:d1:cb:fc:86:4e:44:20:42:30: 66:b8:78:07:04:1f:a3:f8:89:87:f3:07:b0:4f:35:f9:a2:85: eb:9c:40:19:83:5c:3c:21:b3:ac:7a:5a:b8:a2:56:f9:e2:de: 5e:ae:13:fa:f9:84:04:2c:a7:ad:ae:e4:00:e6:66:ce:dd:6e: ac:d1:50:21:78:94:a9:2b:90:0b:39:4b:39:60:d2:1b:a6:de: 12:c5:e4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUxMTAzMDE0MDQxWhcNMjUxMTEwMDE0MDQxWjAYMRYwFAYD VQQDEw02OTA4MDgxOS0wNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g39+4QLdL5bHGFcnTHdcprtlejQoZ60vtdkKkLQlOJXFIiwfuPn7Gskf9O2 xdqhZX2ZlVQ2QNMLu8tqB0qgEQhq189JPFf19zPIuUthqLA9U/cBlVFQBfU55K3x 0YMtoKc2EH1qubvpQEGRetDIi4feZq76H/Xb6OeySzj0cXAZRwcN0lh2rjorAI1B bdqStd+ELKdBofABLAmj1AnGCDEyct14J0QucxtqjRpgNU/fY0Mz6oSsoT+zB2js 3RR2GviSl2/CPrSm1MdLFBZ1TQI6h2PUodXIkFCsKCnnXDwrNfyiNeu9k+Vfkier kLKVJixyMBLeeh2zcZvXP4YMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo0q29m Df25MSDBJYYU3BUomP7TMB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzGCvHuyBIjeYEy1urn9qQGGxkThK+Ks8rMZe3lLQdXHYah9RDMpDF MZ6aZ6wJ3PR30y0LTPn1w8RuNh5KyLuSUG0HQTW/k4OadnF1IAhzsYqbUriGDjTX 8CZND4QB+lMdb98HvnQPR0Fq8j2m8ejWD0BmXJwTGucJMwHEh8j25FM/n5r4SdSg bIvRGBsYXLi8c0hPwlp0VQLDrc2GHxbQXuXYVRiZ9YKJAtnRy/yGTkQgQjBmuHgH BB+j+ImH8wewTzX5ooXrnEAZg1w8IbOselq4olb54t5erhP6+YQELKetruQA5mbO 3W6s0VAheJSpK5ALOUs5YNIbpt4SxeQk -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:49 2025 by rpki-client