$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json) Hash identifier: NockNnymtAoZkRDII4Eg016kn9aA9jGHq1CWtwq8Ryg= Subject key identifier: 5B:FF:AA:3E:12:28:90:DC:1A:C1:94:A8:3C:EB:7E:2C:E0:73:A4:0C Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:35:00 +0000 Manifest this update: Mon 03 Nov 2025 07:34:59 +0000 Manifest next update: Mon 10 Nov 2025 07:34:59 +0000 Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: bqBaSYNqJSbmQi0oNqusjKkpc9KdewTEOkC4n9VQT4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Validity Not Before: Nov 3 07:34:59 2025 GMT Not After : Nov 10 07:34:59 2025 GMT Subject: CN=69085b24-147b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:5c:17:e4:25:5a:9b:ca:03:87:64:22:1d: 4f:42:36:3a:30:ad:d6:df:00:77:85:c6:77:0e:d7: fb:b4:d7:02:da:77:31:af:03:ca:32:9c:1b:89:d9: 08:71:e4:c3:82:c3:3a:9b:d1:e2:11:14:f1:63:56: 21:70:1e:31:a1:e8:ac:43:55:0b:8d:aa:de:8c:fc: f0:6c:5d:c5:0c:81:0f:c3:90:e3:36:a5:ae:f9:bd: 3a:18:89:75:eb:cf:66:a3:e2:6a:bf:12:56:55:64: d4:ac:2b:ac:89:72:96:d0:fe:3a:1d:3c:55:8e:13: a0:e5:e1:0b:32:8a:3b:3f:0d:80:58:5b:8d:99:ea: a4:3c:99:af:d1:e0:66:c1:aa:eb:9b:98:5a:df:63: 62:42:5f:cb:00:5a:b3:88:c0:3a:24:60:bb:df:b8: 79:3f:4e:84:39:91:69:c7:01:e4:cb:77:35:15:c6: fb:91:73:67:ee:96:5c:4c:4a:8e:98:ae:3d:ad:6a: 5b:73:b0:b9:5e:2f:9c:a1:ed:87:02:c4:af:61:6f: 7d:a9:4d:e1:25:cb:f7:eb:24:d2:50:10:9c:bc:60: 4f:28:47:fa:e9:8e:30:62:ab:0d:3a:68:b5:3f:e0: 4d:91:60:64:60:b3:8c:e1:ca:2f:17:f3:90:de:29: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:AA:3E:12:28:90:DC:1A:C1:94:A8:3C:EB:7E:2C:E0:73:A4:0C X509v3 Authority Key Identifier: keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7a:d2:1a:a0:80:3f:01:26:6f:72:40:66:6b:49:8c:3a:0d: 81:c5:89:4f:fb:5a:05:f7:54:5d:80:97:97:59:b6:dc:4f:4a: 7a:7c:7e:80:2d:12:1f:63:04:5b:9f:2b:f7:fe:5f:bd:17:a4: d1:97:9e:e2:29:f8:53:2e:d4:ca:5c:db:5d:5a:e8:f2:50:58: 3b:65:7e:7f:74:cf:1e:4c:12:d1:12:82:fb:2b:a8:81:2a:9c: f6:f6:dd:d2:dd:75:e3:61:0b:80:0c:13:be:7e:99:1c:1b:67: 03:d7:1f:b5:22:66:21:d3:c1:6a:d7:ee:d2:d1:ee:a4:b1:b0: 4f:56:32:d8:94:5a:8f:f2:99:79:ae:8e:12:ba:9b:34:7b:1a: 44:4a:1c:de:f7:13:7a:84:b8:a1:a6:84:c8:2a:11:f1:be:eb: b0:83:dc:8e:11:94:ba:88:e0:37:20:7e:3d:ab:9e:72:34:76: c9:db:10:54:6f:f4:28:1f:67:4d:7f:95:0a:49:41:ff:7d:1b: 8e:78:39:f3:d8:64:1f:e7:9c:c3:60:bc:da:7d:7d:78:8b:dc: 74:3b:d7:4d:aa:0b:86:f8:b7:9d:47:be:10:fb:92:17:14:9b: d3:2a:3a:2b:d8:4d:0e:8e:81:1d:ca:69:36:27:e1:b1:bf:44: 11:ce:04:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRDBFMDNBQzA5N0RDMDAxMjlEMDMyNTNGMUM5REQ3NkQy QTcxRDhGNDAeFw0yNTExMDMwNzM0NTlaFw0yNTExMTAwNzM0NTlaMBgxFjAUBgNV BAMTDTY5MDg1YjI0LTE0N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrxFwX5CVam8oDh2QiHU9CNjowrdbfAHeFxncO1/u01wLadzGvA8oynBuJ2Qhx 5MOCwzqb0eIRFPFjViFwHjGh6KxDVQuNqt6M/PBsXcUMgQ/DkOM2pa75vToYiXXr z2aj4mq/ElZVZNSsK6yJcpbQ/jodPFWOE6Dl4Qsyijs/DYBYW42Z6qQ8ma/R4GbB quubmFrfY2JCX8sAWrOIwDokYLvfuHk/ToQ5kWnHAeTLdzUVxvuRc2fullxMSo6Y rj2taltzsLleL5yh7YcCxK9hb32pTeEly/frJNJQEJy8YE8oR/rpjjBiqw06aLU/ 4E2RYGRgs4zhyi8X85DeKWR3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW/+qPhIo kNwawZSoPOt+LOBzpAwwHwYDVR0jBBgwFoAU0OA6wJfcABKdAyU/HJ3XbSpx2PQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzlBMjJERUM0Njg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyLzBPQTZ3SmZjQUJLZEF5VV9ISjNYYlNweDJQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvME9BNndKZmNBQktkQXlVX0hKM1hiU3B4MlBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzlBMjJERUM0Njg0MDExRjBBOTQwNDc2QkM0RjlBRTAyLzBPQTZ3SmZjQUJL ZEF5VV9ISjNYYlNweDJQUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFl60hqggD8BJm9yQGZrSYw6DYHFiU/7WgX3VF2Al5dZttxPSnp8foAt Eh9jBFufK/f+X70XpNGXnuIp+FMu1Mpc211a6PJQWDtlfn90zx5MEtESgvsrqIEq nPb23dLddeNhC4AME75+mRwbZwPXH7UiZiHTwWrX7tLR7qSxsE9WMtiUWo/ymXmu jhK6mzR7GkRKHN73E3qEuKGmhMgqEfG+67CD3I4RlLqI4Dcgfj2rnnI0dsnbEFRv 9CgfZ01/lQpJQf99G454OfPYZB/nnMNgvNp9fXiL3HQ7102qC4b4t51HvhD7khcU m9MqOivYTQ6OgR3KaTYn4bG/RBHOBB8= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:15 2025 by rpki-client