$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json) Hash identifier: drStKOI5qNDLy+CgfbvrM3ibLvIfQoZKj1H/RekVvsE= Subject key identifier: CB:1F:E4:77:05:E6:53:D5:06:25:B3:DC:5C:24:86:CD:4A:3F:12:17 Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Certificate serial: 1495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft Manifest number: 1479 Signing time: Sun 02 Nov 2025 16:53:34 +0000 Manifest this update: Sun 02 Nov 2025 16:53:34 +0000 Manifest next update: Sun 09 Nov 2025 16:53:34 +0000 Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: K3guD7t9/pznpJ8dcD3Y52vYBEl4WZEoO5UkV0AYfPo=) 2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5269 (0x1495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Validity Not Before: Nov 2 16:53:34 2025 GMT Not After : Nov 9 16:53:34 2025 GMT Subject: CN=69078c8e-f680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:be:2e:50:6c:0e:b3:14:65:9c:d1:33:8e: 73:22:da:60:0e:a3:fe:f3:9e:16:2a:af:46:00:c5: 79:76:46:67:85:81:ac:9f:9b:45:44:5a:61:0f:8c: 5e:7e:7e:c4:96:1e:27:2e:0c:83:b4:28:22:ae:70: e4:0d:f7:50:4f:53:8b:14:d2:e5:06:98:b8:de:cf: f4:a5:42:53:b6:34:03:3d:de:9a:4e:bf:70:c2:75: 5a:af:c2:fb:2a:85:22:82:bc:ed:c2:47:f2:69:e9: dd:6d:9f:cf:bc:74:3d:7b:86:a6:e8:68:02:0f:c6: 07:68:17:d3:ec:c0:a5:fa:78:c1:0b:e5:4a:2b:a5: f5:af:f7:09:a4:44:a0:43:00:e3:ea:3d:2e:42:77: b5:19:7b:88:5b:6d:b2:1c:80:59:a2:12:5d:09:29: 4b:30:4c:e2:87:93:f3:bf:e5:60:06:c7:31:7c:08: b0:83:3c:5c:d8:28:d5:d5:67:e3:e8:2e:62:5c:f3: 86:b4:42:1f:df:a9:7c:2d:77:ad:63:84:83:1e:c0: 39:5a:da:8e:a2:66:25:a0:9b:ae:53:b9:05:26:4e: 3f:85:e8:47:cb:70:2d:13:f4:ba:0b:49:47:54:e8: 52:45:cc:29:9d:ed:b1:3d:a9:80:6e:e5:47:2c:16: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:E4:77:05:E6:53:D5:06:25:B3:DC:5C:24:86:CD:4A:3F:12:17 X509v3 Authority Key Identifier: keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3b:e3:83:df:ae:2a:66:ba:d0:8f:b2:fe:97:d8:91:02:29: 80:28:78:56:99:36:71:45:fd:ba:f0:fc:c5:f6:6b:ad:5b:d0: 84:52:91:a8:75:39:d5:4d:83:c3:ae:6f:8c:f2:af:07:c6:57: 3a:79:df:6a:b1:3b:e5:84:cb:1c:9f:22:fc:30:f6:15:36:ec: 30:e1:e1:32:a2:8f:ba:ff:2d:56:f7:2c:91:e8:40:ad:50:90: 35:7f:f0:86:43:f8:db:9e:e7:82:b3:50:f1:6c:bc:46:23:a7: 58:bb:b6:49:79:14:70:65:d4:3a:ff:f7:82:18:ec:d4:8f:cd: 1d:c0:de:41:8e:f8:4b:9b:50:aa:64:95:5f:89:b4:7a:96:66: b3:30:fb:0b:23:7f:36:af:df:d4:78:5e:4c:65:d3:0e:15:1b: 46:e3:59:32:f5:75:71:05:7f:57:99:08:67:e7:82:94:99:e2: c1:0f:44:10:b0:b0:c1:52:29:17:8b:56:cc:83:bc:55:cc:9f: 3a:a8:e7:97:5e:5f:16:aa:7b:8e:af:bf:f5:cd:cc:57:8c:32: e4:9d:46:8f:36:fe:22:d8:62:17:bf:90:5c:85:6e:a6:a7:f8: 8d:24:cf:35:16:3c:d4:41:aa:79:1d:67:d3:89:4e:fa:dc:2e: 3e:e8:73:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz Q0EwMDBFMTgwHhcNMjUxMTAyMTY1MzM0WhcNMjUxMTA5MTY1MzM0WjAYMRYwFAYD VQQDEw02OTA3OGM4ZS1mNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60W+LlBsDrMUZZzRM45zItpgDqP+854WKq9GAMV5dkZnhYGsn5tFRFphD4xe fn7Elh4nLgyDtCgirnDkDfdQT1OLFNLlBpi43s/0pUJTtjQDPd6aTr9wwnVar8L7 KoUigrztwkfyaendbZ/PvHQ9e4am6GgCD8YHaBfT7MCl+njBC+VKK6X1r/cJpESg QwDj6j0uQne1GXuIW22yHIBZohJdCSlLMEzih5Pzv+VgBscxfAiwgzxc2CjV1Wfj 6C5iXPOGtEIf36l8LXetY4SDHsA5WtqOomYloJuuU7kFJk4/hehHy3AtE/S6C0lH VOhSRcwpne2xPamAbuVHLBbO7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsf5HcF 5lPVBiWz3Fwkhs1KPxIXMB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZCOC9GRjE1MDhFRTdFOUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1 RlpoWksyUlRDSVk4b0FEaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeO+OD364qZrrQj7L+l9iRAimAKHhWmTZxRf268PzF9mutW9CEUpGo dTnVTYPDrm+M8q8Hxlc6ed9qsTvlhMscnyL8MPYVNuww4eEyoo+6/y1W9yyR6ECt UJA1f/CGQ/jbnueCs1DxbLxGI6dYu7ZJeRRwZdQ6//eCGOzUj80dwN5BjvhLm1Cq ZJVfibR6lmazMPsLI382r9/UeF5MZdMOFRtG41ky9XVxBX9XmQhn54KUmeLBD0QQ sLDBUikXi1bMg7xVzJ86qOeXXl8WqnuOr7/1zcxXjDLknUaPNv4i2GIXv5BchW6m p/iNJM81FjzUQap5HWfTiU763C4+6HO+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:25 2025 by rpki-client