$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: hOA9gNeMz+RxmQD3GtGOY93hWqO25BIlHLhM0Om5/Yk= Subject key identifier: DE:3E:3E:29:98:A9:F8:3B:ED:69:ED:88:13:0C:1E:97:3A:88:79:29 Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 0411 Signing time: Mon 03 Nov 2025 00:21:53 +0000 Manifest this update: Mon 03 Nov 2025 00:21:52 +0000 Manifest next update: Mon 10 Nov 2025 00:21:52 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: 5WZNcAiVDVlI9qbLBPRgxT133VZsb1BXv1La350wi7I=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: Nov 3 00:21:52 2025 GMT Not After : Nov 10 00:21:52 2025 GMT Subject: CN=6907f5a0-0033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:51:c4:e9:40:18:9e:a4:a9:42:c4:21:96: b9:ad:d5:44:7f:c0:5e:64:08:ed:04:48:ff:4b:c1: 77:f3:c6:76:8a:cd:7f:ea:85:46:19:ae:f3:ad:e4: 7a:b0:4a:aa:2e:22:1f:65:85:8e:1f:b3:3e:74:1e: 17:2d:3e:f4:e5:ca:41:c6:89:ba:f4:3e:23:ac:d0: 9f:82:60:f1:79:8a:76:fd:0a:6f:a5:2c:80:85:bf: 39:c8:a3:12:5e:c9:3e:a4:48:91:1a:e1:e2:a2:82: cd:d9:47:7a:9b:40:47:63:4d:cd:e7:88:3c:51:71: f5:1f:7c:a3:59:f3:01:52:f1:cc:46:98:f9:70:aa: 4d:66:e4:5d:55:8f:f5:19:5e:cf:b4:c1:3a:06:b3: 64:7c:bb:fe:2b:96:98:93:1c:44:7d:ab:3d:5f:ce: e9:a9:65:4d:06:f7:d7:c0:55:e6:84:c7:eb:ab:25: 75:c4:05:d1:43:40:81:e9:e3:ae:60:22:40:b2:62: ac:6b:a2:c2:c4:21:fa:04:39:0a:72:fa:d4:05:0a: b0:ff:f8:22:b9:84:52:0c:4d:8f:e6:48:5b:d5:96: d5:ec:31:54:91:4c:b5:e4:0b:4b:0c:52:cd:26:58: 4c:ce:a2:53:bd:ac:bb:15:ac:ec:60:e7:f3:7c:50: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:3E:29:98:A9:F8:3B:ED:69:ED:88:13:0C:1E:97:3A:88:79:29 X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:52:a9:d7:41:f8:53:c8:09:06:09:ce:17:81:a6:10:b5:e5: 20:2a:2a:ff:73:f3:e7:39:c5:d5:2c:47:7e:85:cb:dc:21:ff: 61:5c:54:65:db:c9:d1:98:21:71:c2:d9:f9:3e:5e:73:ce:a0: 69:ab:bf:72:63:e2:69:d5:45:48:a6:99:31:50:fb:bf:8a:d8: b7:dc:6f:09:34:cd:09:3c:d1:67:c6:8d:f6:de:98:26:99:c1: e3:4f:b6:81:69:86:cb:ce:0b:af:0b:5d:01:b4:7b:3e:b2:b7: d7:a7:26:05:c3:82:69:05:6c:6f:7d:61:5b:e1:02:63:6d:a7: b1:3f:a2:85:d8:ce:38:7e:2d:8b:f3:7a:1c:64:e6:43:7c:d6: d3:76:77:0c:fb:32:01:22:94:6d:3b:0d:93:56:b3:81:4b:c6: d0:aa:79:d3:4d:e5:39:5e:d3:5d:2f:a5:c3:0b:04:30:a0:d7: 79:23:0e:c1:98:19:fe:23:77:7e:1a:7f:68:18:27:92:01:8d: 0a:39:a6:32:a7:9d:59:94:ef:f6:a6:bb:1f:38:b7:d6:39:30: 35:8a:3d:44:3d:c6:c1:16:14:4b:9d:9c:01:4a:a2:18:99:53: c0:8a:51:d6:1d:f3:e7:1a:6e:d5:20:f4:29:0c:aa:7a:5d:86: ea:2b:76:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjUxMTAzMDAyMTUyWhcNMjUxMTEwMDAyMTUyWjAYMRYwFAYD VQQDEw02OTA3ZjVhMC0wMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9FRxOlAGJ6kqULEIZa5rdVEf8BeZAjtBEj/S8F388Z2is1/6oVGGa7zreR6 sEqqLiIfZYWOH7M+dB4XLT705cpBxom69D4jrNCfgmDxeYp2/QpvpSyAhb85yKMS Xsk+pEiRGuHiooLN2Ud6m0BHY03N54g8UXH1H3yjWfMBUvHMRpj5cKpNZuRdVY/1 GV7PtME6BrNkfLv+K5aYkxxEfas9X87pqWVNBvfXwFXmhMfrqyV1xAXRQ0CB6eOu YCJAsmKsa6LCxCH6BDkKcvrUBQqw//giuYRSDE2P5khb1ZbV7DFUkUy15AtLDFLN JlhMzqJTvay7FazsYOfzfFAmrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4+PimY qfg77WntiBMMHpc6iHkpMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGUqnXQfhTyAkGCc4XgaYQteUgKir/c/PnOcXVLEd+hcvcIf9hXFRl 28nRmCFxwtn5Pl5zzqBpq79yY+Jp1UVIppkxUPu/iti33G8JNM0JPNFnxo323pgm mcHjT7aBaYbLzguvC10BtHs+srfXpyYFw4JpBWxvfWFb4QJjbaexP6KF2M44fi2L 83ocZOZDfNbTdncM+zIBIpRtOw2TVrOBS8bQqnnTTeU5XtNdL6XDCwQwoNd5Iw7B mBn+I3d+Gn9oGCeSAY0KOaYyp51ZlO/2prsfOLfWOTA1ij1EPcbBFhRLnZwBSqIY mVPAilHWHfPnGm7VIPQpDKp6XYbqK3b9 -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:42 2025 by rpki-client