$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft File: oUDUgGrgz2DnP-FYvyQvOag60AU.mft (raw, json) Hash identifier: YvpLuvlIaLRVlaDOaM+xpSm2EyFpwRi9kJKzIvEdFjA= Subject key identifier: D4:D3:A8:B4:23:AE:78:94:8C:3C:15:72:68:3E:1D:0C:DD:9F:1D:26 Authority key identifier: A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05 Certificate issuer: /CN=A91E1B78/serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft Manifest number: 6E Signing time: Mon 03 Nov 2025 06:57:51 +0000 Manifest this update: Mon 03 Nov 2025 06:57:51 +0000 Manifest next update: Mon 10 Nov 2025 06:57:51 +0000 Files and hashes: 1: oUDUgGrgz2DnP-FYvyQvOag60AU.crl (hash: e8OZmno0XbYFGp+jxvT8kaNhJLabptUTPjacEH6/s6k=) 2: 47131A44145511F082FDAA7AC4F9AE02.roa (hash: btGSbXlYPwUm6r4aT9dqMB2WqeFs4xBX2s74blUbTR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B78, serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005 Validity Not Before: Nov 3 06:57:51 2025 GMT Not After : Nov 10 06:57:51 2025 GMT Subject: CN=6908526f-67dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:3a:c4:35:98:08:9d:7f:2f:0c:2e:63:78: 64:00:18:9e:a4:08:da:13:ae:ee:1f:08:39:69:78: e1:e3:fc:68:c2:87:8d:ae:3d:34:49:7a:8d:85:de: 87:de:bb:92:e0:2c:19:08:99:60:81:0b:11:50:83: 43:b1:61:dd:e9:90:03:86:5c:8b:b2:7d:23:fd:71: 60:ce:09:6e:90:9d:07:62:fd:eb:be:37:c3:e5:63: 32:21:3c:7f:2f:67:65:93:3c:67:d9:8f:36:c5:9f: 82:d4:d8:47:95:1f:f5:7e:ab:8e:ad:1d:3d:d3:4a: 41:81:68:2f:4c:6f:9a:e5:7f:cc:24:98:7b:5b:21: fb:fc:4f:c2:72:bc:0f:31:ce:31:97:a4:d6:14:8e: 14:9e:d3:da:23:35:e5:d1:b9:5e:b2:5a:43:5b:af: b7:3e:77:d2:e9:e4:8d:33:e4:9e:b2:ac:b7:9c:00: df:11:1d:58:ab:04:af:07:11:e9:25:09:85:a0:08: d8:f6:77:6b:82:18:c3:f8:3a:3f:f2:c0:b9:6e:99: cc:fe:11:9a:c9:29:42:ea:cd:6e:22:e4:77:e4:3b: 43:b7:09:0f:d3:a1:e5:3d:d4:c6:f1:88:e3:60:78: 0f:0a:68:e4:b9:e2:09:c6:01:07:f3:16:52:fa:86: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D3:A8:B4:23:AE:78:94:8C:3C:15:72:68:3E:1D:0C:DD:9F:1D:26 X509v3 Authority Key Identifier: keyid:A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:50:68:62:d9:dc:17:cd:b3:c6:9e:ff:d0:e7:c0:e1:be: 4d:4c:b6:52:e2:a1:c9:5c:6a:fe:da:7f:f5:59:b1:05:03:04: 0b:7f:40:0e:e4:c3:5a:ec:5b:f5:24:62:3d:8d:4f:4e:80:7c: c7:19:f0:92:a1:43:2c:73:2f:5e:74:e0:c3:3f:7c:c0:57:65: 2a:10:91:a3:11:1e:54:65:e9:a9:e7:28:98:d2:b8:3e:92:96: 0a:17:4a:3e:fc:c6:f9:76:6f:43:32:8e:34:f5:a6:dd:a3:72: 75:61:65:04:bb:46:22:ac:a6:c4:62:f0:c7:9b:5f:9a:3c:66: e6:7d:2f:17:7f:08:15:c0:59:c1:a5:58:9b:09:7f:98:fc:a5: 7c:c1:59:7a:1c:73:07:54:67:b1:56:14:ad:d6:2c:40:ed:35: 58:01:0c:2b:eb:aa:3a:e7:39:dc:90:db:db:9d:43:42:65:c4: 9e:a5:65:70:fd:6d:a1:96:f1:f9:e0:5b:05:d9:cc:4b:e8:eb: e4:8b:7d:6d:85:c3:00:c5:87:6a:3b:6a:c7:7f:a0:16:92:bc: 6f:ea:74:ef:95:24:15:76:4f:f3:82:12:4c:09:00:cc:a0:49: fa:ba:98:52:22:ea:bc:1f:af:e0:8b:6a:ce:4b:80:61:97:92: bf:cd:a5:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI3ODExMC8GA1UEBRMoQTE0MEQ0ODA2QUUwQ0Y2MEU3M0ZFMTU4QkYyNDJGMzlB ODNBRDAwNTAeFw0yNTExMDMwNjU3NTFaFw0yNTExMTAwNjU3NTFaMBgxFjAUBgNV BAMTDTY5MDg1MjZmLTY3ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf+jrENZgInX8vDC5jeGQAGJ6kCNoTru4fCDlpeOHj/GjCh42uPTRJeo2F3ofe u5LgLBkImWCBCxFQg0OxYd3pkAOGXIuyfSP9cWDOCW6QnQdi/eu+N8PlYzIhPH8v Z2WTPGfZjzbFn4LU2EeVH/V+q46tHT3TSkGBaC9Mb5rlf8wkmHtbIfv8T8JyvA8x zjGXpNYUjhSe09ojNeXRuV6yWkNbr7c+d9Lp5I0z5J6yrLecAN8RHVirBK8HEekl CYWgCNj2d2uCGMP4Oj/ywLlumcz+EZrJKULqzW4i5HfkO0O3CQ/ToeU91MbxiONg eA8KaOS54gnGAQfzFlL6hiUtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NOotCOu eJSMPBVyaD4dDN2fHSYwHwYDVR0jBBgwFoAUoUDUgGrgz2DnP+FYvyQvOag60AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjc4L0M4REY0MUFDMTQ1 NDExRjBCM0I3QzY3OUM0RjlBRTAyL29VRFVnR3JnejJEblAtRll2eVF2T2FnNjBB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VEVWdHcmd6MkRuUC1GWXZ5UXZPYWc2MEFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx Qjc4L0M4REY0MUFDMTQ1NDExRjBCM0I3QzY3OUM0RjlBRTAyL29VRFVnR3JnejJE blAtRll2eVF2T2FnNjBBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACB4UGhi2dwXzbPGnv/Q58Dhvk1MtlLioclcav7af/VZsQUDBAt/QA7k w1rsW/UkYj2NT06AfMcZ8JKhQyxzL1504MM/fMBXZSoQkaMRHlRl6annKJjSuD6S lgoXSj78xvl2b0MyjjT1pt2jcnVhZQS7RiKspsRi8MebX5o8ZuZ9Lxd/CBXAWcGl WJsJf5j8pXzBWXoccwdUZ7FWFK3WLEDtNVgBDCvrqjrnOdyQ29udQ0JlxJ6lZXD9 baGW8fngWwXZzEvo6+SLfW2FwwDFh2o7asd/oBaSvG/qdO+VJBV2T/OCEkwJAMyg Sfq6mFIi6rwfr+CLas5LgGGXkr/NpdE= -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:33 2025 by rpki-client