$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: SoZkE5l2Ng246pZbaMyYWYkkJO5pG4zOaMADnkTRygE= Subject key identifier: FA:45:E9:AD:0A:07:42:32:85:40:FA:EF:A0:80:91:58:E8:F8:5F:D0 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 76 Signing time: Fri 07 Nov 2025 02:13:50 +0000 Manifest this update: Fri 07 Nov 2025 02:13:50 +0000 Manifest next update: Fri 14 Nov 2025 02:13:49 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: SkN62iGOid+58HE3f9gZc6PEiQ+KHk2z5W4kpTlIgPE=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: dDhbAceYPTZoJoEOB7Q4AGN3lBigI7VE7UVJ4rk45bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Nov 7 02:13:50 2025 GMT Not After : Nov 14 02:13:49 2025 GMT Subject: CN=690d55de-8efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:cb:16:f1:a0:58:5a:f7:10:31:b2:76:94: 69:94:5d:21:8f:ac:da:c4:04:95:5e:66:7e:b0:56: 16:df:98:6b:85:91:6a:23:b9:ea:13:84:ba:9f:28: 40:18:20:a1:a1:67:2c:d7:5f:2f:b3:c2:fe:62:44: ee:74:4d:97:67:9e:82:26:ef:3a:19:74:6f:bf:01: bb:bc:30:28:32:4b:27:e3:94:af:6b:18:d4:fb:8f: 77:ff:7f:48:ac:a8:28:3d:5a:3d:fa:7a:43:5a:c4: 94:41:fc:41:9f:28:b5:65:c5:96:2a:4b:be:52:a1: e9:50:ec:86:08:04:a0:79:30:f9:cc:f6:ff:39:6d: 7b:16:94:f2:e3:3d:82:ba:f6:5e:85:b9:74:73:00: 39:3e:99:b5:94:87:ed:db:b1:99:13:0f:15:5b:98: 94:2d:cb:7b:51:3b:e5:31:95:f0:12:e9:9b:9c:1b: 66:49:3c:8b:5b:7b:16:0c:e9:13:72:72:5e:7c:42: 40:80:65:eb:ef:a6:2a:00:b0:24:75:a4:da:2c:b2: fb:e1:e0:63:c1:07:ed:fb:df:08:ed:e9:fb:6d:6a: 5f:ab:44:c8:42:8b:ac:2e:5a:97:0e:28:17:de:9b: c2:18:b5:74:83:6e:e7:1d:17:fe:f0:b5:1d:25:16: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:E9:AD:0A:07:42:32:85:40:FA:EF:A0:80:91:58:E8:F8:5F:D0 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5c:ca:81:17:82:8a:86:0e:88:7d:55:01:c6:9b:8c:47:6e: d4:41:8b:5b:90:e5:61:88:af:f6:ee:f4:57:8f:60:9a:dc:53: 22:b9:29:f4:f8:9b:61:fd:8d:a3:34:d3:79:a6:de:17:1d:e1: 88:94:99:96:70:2c:d2:21:b8:71:a0:3d:b0:90:2d:a1:2a:50: 85:00:22:0b:ab:ef:b0:71:2e:fc:33:54:db:23:f7:72:36:17: d2:b4:9f:bb:84:34:f1:a4:17:59:4e:cc:f0:eb:28:94:c7:04: eb:29:5c:58:5c:10:97:8d:94:4e:ac:c6:1b:27:3e:92:8b:19: e6:f2:f5:e1:8c:94:8f:e6:db:72:9a:c4:35:eb:5b:dc:6a:32: 87:5a:97:51:5f:ee:98:c4:8c:cd:dc:01:e8:60:2c:ae:1e:46: fb:fd:54:b6:5e:3d:bd:4d:85:a6:0e:88:fa:2b:5a:0e:0e:51: fa:0c:21:73:2b:8c:f5:b1:32:a9:c9:2a:0e:15:86:f1:e7:e3: 78:43:da:c1:18:5c:3c:37:3a:10:5f:b7:67:11:c2:e4:3a:d9: cb:36:48:91:ff:d0:72:87:ce:26:68:e4:af:54:37:88:64:ed: 0c:2a:cc:3f:4d:89:b7:81:f1:50:10:af:e1:81:ef:0c:60:30: df:15:32:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTExMDcwMjEzNTBaFw0yNTExMTQwMjEzNDlaMBgxFjAUBgNV BAMTDTY5MGQ1NWRlLThlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKt8sW8aBYWvcQMbJ2lGmUXSGPrNrEBJVeZn6wVhbfmGuFkWojueoThLqfKEAY IKGhZyzXXy+zwv5iRO50TZdnnoIm7zoZdG+/Abu8MCgySyfjlK9rGNT7j3f/f0is qCg9Wj36ekNaxJRB/EGfKLVlxZYqS75SoelQ7IYIBKB5MPnM9v85bXsWlPLjPYK6 9l6FuXRzADk+mbWUh+3bsZkTDxVbmJQty3tRO+UxlfAS6ZucG2ZJPItbexYM6RNy cl58QkCAZevvpioAsCR1pNossvvh4GPBB+373wjt6fttal+rRMhCi6wuWpcOKBfe m8IYtXSDbucdF/7wtR0lFg/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+kXprQoH QjKFQPrvoICRWOj4X9AwHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NUYxLzYyMjA2MzNDMERGQzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERR djgxa0g5LUVjU3JzNWk0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5cyoEXgoqGDoh9VQHGm4xHbtRBi1uQ5WGIr/bu9FePYJrcUyK5KfT4 m2H9jaM003mm3hcd4YiUmZZwLNIhuHGgPbCQLaEqUIUAIgur77BxLvwzVNsj93I2 F9K0n7uENPGkF1lOzPDrKJTHBOspXFhcEJeNlE6sxhsnPpKLGeby9eGMlI/m23Ka xDXrW9xqModal1Ff7pjEjM3cAehgLK4eRvv9VLZePb1NhaYOiPorWg4OUfoMIXMr jPWxMqnJKg4VhvHn43hD2sEYXDw3OhBft2cRwuQ62cs2SJH/0HKHziZo5K9UN4hk 7QwqzD9NibeB8VAQr+GB7wxgMN8VMu0= -----END CERTIFICATE-----Generated at Fri Nov 7 12:59:19 2025 by rpki-client