$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: dNhg3PoiZtnApWAY5yicCfizbYVqxG07VjKkUrBDSU0= Subject key identifier: 54:A0:EF:E4:EE:8E:9A:C6:AA:40:FF:79:6D:E4:23:26:41:B1:0E:3F Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: C2 Signing time: Wed 05 Nov 2025 06:05:17 +0000 Manifest this update: Wed 05 Nov 2025 06:05:17 +0000 Manifest next update: Wed 12 Nov 2025 06:05:17 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: Jhn4GD2SbVCtXtPbBdpWeTcxY35HcSevdRFVEkeplSs=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Nov 5 06:05:17 2025 GMT Not After : Nov 12 06:05:17 2025 GMT Subject: CN=690ae91d-9ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:d5:51:33:fb:76:4e:dd:b7:fb:fa:56:4f: b1:fb:b4:57:5e:4b:f4:f6:02:51:cb:c8:2a:4c:ad: 9b:d8:34:d5:44:44:b4:4a:a2:eb:7d:c8:fe:f3:9b: 48:02:b8:4c:3f:03:c3:28:97:e4:e0:7f:c5:e0:84: 85:c6:38:21:56:e8:51:3e:a3:14:73:f7:b5:7f:ed: e9:07:d5:85:95:45:2b:80:60:09:31:7d:02:59:b9: 72:0a:58:63:f1:03:37:e0:66:8e:52:65:47:c3:28: 64:50:56:18:c9:d6:4b:19:e0:5d:fd:9b:55:62:d4: b6:a0:93:2f:8f:80:ad:62:4e:24:2c:72:d5:19:f3: 61:23:37:06:b6:d1:a8:ba:ff:03:5c:e1:07:08:bf: 93:68:9f:18:6d:13:64:39:9e:0f:8c:11:ca:62:fb: 8a:3e:c8:21:c3:d4:8d:d5:cd:df:1e:0b:2a:e0:a0: f1:b2:e6:e9:60:40:f1:96:b0:4d:48:ef:b6:c3:ef: 90:fb:19:f7:5c:7b:5a:d3:a5:c0:d4:94:d7:40:d8: da:07:86:f3:31:b6:6f:70:0d:67:c4:4f:79:bb:83: 38:d5:9b:3c:d1:14:c3:64:49:90:3f:da:bb:aa:e0: 8b:b5:5d:9e:fa:6f:09:f3:ba:0a:75:7e:eb:93:48: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:EF:E4:EE:8E:9A:C6:AA:40:FF:79:6D:E4:23:26:41:B1:0E:3F X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a8:2e:58:00:09:a4:e0:56:c1:3a:56:71:d8:a0:09:4c:72: ec:96:d4:9f:3c:0a:18:02:d2:8d:f1:ca:d2:38:c4:aa:e5:25: eb:72:f6:5b:d5:c3:40:2b:01:d0:46:35:0c:fc:e4:3c:d7:ad: 82:d8:bb:91:52:ad:08:20:42:74:e7:67:9b:0c:13:4b:eb:70: d3:ee:00:c0:40:b0:46:ce:9e:c8:c6:32:05:c2:00:27:4a:2e: f7:15:7f:f1:d0:c0:33:98:4d:59:92:d1:08:73:8c:2a:e6:40: 6b:d3:e2:c2:16:db:b0:29:f8:96:48:1f:a5:17:ff:02:36:08: 9e:35:21:36:63:e8:c4:89:4f:bb:98:31:95:37:98:ec:95:8c: 95:76:48:6e:0d:49:fa:f0:f0:4a:d4:a9:5e:86:0b:da:46:bd: b9:2a:8a:11:07:4e:34:53:f6:05:f5:99:55:27:98:e3:ca:de: 75:b5:8a:80:9a:c8:af:75:a3:ec:79:3c:97:13:ef:33:f0:33: 2b:08:c6:e1:2c:e5:c1:bc:64:00:2f:67:85:9e:bb:dc:92:6a: 4e:c4:1e:2b:6b:d1:a4:97:94:7e:b6:da:b9:8c:a7:bb:b9:dd: dc:89:84:fc:9c:6e:4a:b5:11:87:3e:0b:95:a2:04:f3:e8:d3: bc:1f:f1:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUxMTA1MDYwNTE3WhcNMjUxMTEyMDYwNTE3WjAYMRYwFAYD VQQDEw02OTBhZTkxZC05ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7bVUTP7dk7dt/v6Vk+x+7RXXkv09gJRy8gqTK2b2DTVRES0SqLrfcj+85tI ArhMPwPDKJfk4H/F4ISFxjghVuhRPqMUc/e1f+3pB9WFlUUrgGAJMX0CWblyClhj 8QM34GaOUmVHwyhkUFYYydZLGeBd/ZtVYtS2oJMvj4CtYk4kLHLVGfNhIzcGttGo uv8DXOEHCL+TaJ8YbRNkOZ4PjBHKYvuKPsghw9SN1c3fHgsq4KDxsubpYEDxlrBN SO+2w++Q+xn3XHta06XA1JTXQNjaB4bzMbZvcA1nxE95u4M41Zs80RTDZEmQP9q7 quCLtV2e+m8J87oKdX7rk0gRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSg7+Tu jprGqkD/eW3kIyZBsQ4/MB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsqC5YAAmk4FbBOlZx2KAJTHLsltSfPAoYAtKN8crSOMSq5SXrcvZb 1cNAKwHQRjUM/OQ8162C2LuRUq0IIEJ052ebDBNL63DT7gDAQLBGzp7IxjIFwgAn Si73FX/x0MAzmE1ZktEIc4wq5kBr0+LCFtuwKfiWSB+lF/8CNgieNSE2Y+jEiU+7 mDGVN5jslYyVdkhuDUn68PBK1KlehgvaRr25KooRB040U/YF9ZlVJ5jjyt51tYqA msivdaPseTyXE+8z8DMrCMbhLOXBvGQAL2eFnrvckmpOxB4ra9Gkl5R+ttq5jKe7 ud3ciYT8nG5KtRGHPguVogTz6NO8H/GT -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:33 2025 by rpki-client