$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: /V0IfzQ4/YHSWsDe2Qzna6DUCqFhlfny627WcYWhlJc= Subject key identifier: ED:13:76:6F:88:EE:25:6A:3B:0F:FB:5F:F5:EC:42:17:4F:F7:77:A1 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0C62 Signing time: Tue 04 Nov 2025 18:38:23 +0000 Manifest this update: Tue 04 Nov 2025 18:38:22 +0000 Manifest next update: Tue 11 Nov 2025 18:38:22 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: i7oeNrX5veIwC4uDh8dPr/WO5tv0Z2H6ojIXO2vGbfY=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: 6z4IvdKelJy7fw7SK3RJpHNkKU/zaX8zdMWrochmqvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Nov 4 18:38:22 2025 GMT Not After : Nov 11 18:38:22 2025 GMT Subject: CN=690a481e-9cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:51:a5:b1:70:8e:f2:56:d1:a5:28:f8:16: 87:fe:1d:0e:85:60:13:52:50:62:ab:45:6a:22:05: 8d:88:eb:46:8c:2f:b4:de:64:c9:c0:eb:74:27:28: a0:82:cc:35:14:16:3e:1d:90:2c:6c:5f:27:f0:04: ad:b6:60:ce:ff:d8:a8:bf:59:b8:a2:88:7a:a7:4f: 5b:d2:68:02:4f:b0:87:42:06:dc:8f:73:db:13:e5: 20:54:22:c3:94:2f:bf:bb:79:03:44:14:7e:9e:a4: 7b:d9:ce:f4:01:00:72:30:29:9d:b2:ea:db:0b:60: 9f:88:e7:ea:03:31:7b:69:85:65:1b:6d:3c:41:44: d4:55:43:6c:dc:b6:a3:3b:59:2e:45:ba:fb:81:a4: 40:c8:a0:aa:50:08:5b:31:c4:e5:a4:87:06:4b:1c: d1:48:40:05:4c:41:46:00:4a:64:30:e0:84:dd:7c: 9a:8e:c9:51:a1:39:c5:ea:cc:2e:ec:17:b8:f8:f7: 78:aa:56:b0:c7:bd:06:e6:98:9f:cb:23:46:e2:4a: d7:83:ba:1c:85:2f:ea:32:41:e2:6e:a0:d4:62:1e: a6:d9:71:dc:9a:b0:d8:d0:85:6b:ed:5a:12:e2:62: 1a:6d:50:22:ba:fd:bc:39:47:ff:a1:71:a1:de:10: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:13:76:6F:88:EE:25:6A:3B:0F:FB:5F:F5:EC:42:17:4F:F7:77:A1 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:19:ba:9f:26:2a:7f:42:11:32:f4:f6:01:69:ee:e7:d4:0d: a6:e6:9c:f0:c4:b9:f5:ff:35:7d:69:b0:e8:b7:59:48:5b:ab: 16:79:2a:3d:c3:44:df:1b:2a:af:55:76:22:0d:c3:f8:60:01: 80:da:ec:f5:c7:d1:86:0a:07:8d:7b:46:56:ad:34:68:33:7c: 8b:a3:4a:1c:13:6f:7b:13:98:02:3e:d6:7a:98:fb:79:12:26: c8:e9:0d:db:07:52:7b:89:39:26:af:7d:39:dc:31:26:fc:a1: 17:69:c8:46:70:5c:52:60:55:df:f2:11:1d:d8:c5:7b:68:0a: b5:e3:66:bf:ac:f9:c9:2f:e1:dd:9e:d8:ef:61:0c:3a:1a:25: eb:97:92:e4:57:b6:a3:99:6d:7a:98:3e:94:8b:81:e1:c5:5d: cc:19:7f:a1:e3:dd:f6:6f:d9:8c:75:2f:53:9c:a1:f9:a3:b7: 69:55:a4:81:72:d1:1c:2b:58:57:ba:ca:53:d2:85:85:45:93: 45:0d:5d:dd:a9:41:3e:f2:65:2f:f4:e3:d7:bb:81:b1:14:46: 42:a8:0e:bb:1a:cb:c5:17:21:ea:86:dc:bb:03:57:7b:5f:eb: c3:b4:d6:07:f6:9f:9c:61:56:ed:61:c4:27:c2:df:2f:bc:2c: a2:22:56:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjUxMTA0MTgzODIyWhcNMjUxMTExMTgzODIyWjAYMRYwFAYD VQQDEw02OTBhNDgxZS05Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWxRpbFwjvJW0aUo+BaH/h0OhWATUlBiq0VqIgWNiOtGjC+03mTJwOt0Jyig gsw1FBY+HZAsbF8n8ASttmDO/9iov1m4ooh6p09b0mgCT7CHQgbcj3PbE+UgVCLD lC+/u3kDRBR+nqR72c70AQByMCmdsurbC2CfiOfqAzF7aYVlG208QUTUVUNs3Laj O1kuRbr7gaRAyKCqUAhbMcTlpIcGSxzRSEAFTEFGAEpkMOCE3XyajslRoTnF6swu 7Be4+Pd4qlawx70G5pifyyNG4krXg7ochS/qMkHibqDUYh6m2XHcmrDY0IVr7VoS 4mIabVAiuv28OUf/oXGh3hBwSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0Tdm+I 7iVqOw/7X/XsQhdP93ehMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGbqfJip/QhEy9PYBae7n1A2m5pzwxLn1/zV9abDot1lIW6sWeSo9 w0TfGyqvVXYiDcP4YAGA2uz1x9GGCgeNe0ZWrTRoM3yLo0ocE297E5gCPtZ6mPt5 EibI6Q3bB1J7iTkmr3053DEm/KEXachGcFxSYFXf8hEd2MV7aAq142a/rPnJL+Hd ntjvYQw6GiXrl5LkV7ajmW16mD6Ui4HhxV3MGX+h4932b9mMdS9TnKH5o7dpVaSB ctEcK1hXuspT0oWFRZNFDV3dqUE+8mUv9OPXu4GxFEZCqA67GsvFFyHqhty7A1d7 X+vDtNYH9p+cYVbtYcQnwt8vvCyiIlaR -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:34 2025 by rpki-client