$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json) Hash identifier: pIaCPs55ztpUJVsa5+3KJUtk9W31TYh4RK3w5UifXx0= Subject key identifier: 3E:8B:95:87:7C:4C:A9:6E:9E:F5:FC:D7:29:9B:B7:3E:2B:27:DA:64 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft Manifest number: 014E Signing time: Wed 29 Oct 2025 04:12:25 +0000 Manifest this update: Wed 29 Oct 2025 04:12:25 +0000 Manifest next update: Wed 05 Nov 2025 04:12:25 +0000 Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: k7kVASFnb0q8UDxZ9ujldr6g2V/e0+YWXh01vqsLL4E=) 2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: 29v8ayhOME61rr4geagSM3a8sHvyVhtwUdXNMoV9ZDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: Oct 29 04:12:25 2025 GMT Not After : Nov 5 04:12:25 2025 GMT Subject: CN=69019429-8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:99:3b:d8:c3:87:a4:82:68:62:3b:c3:c5: 4c:83:4b:8c:78:bc:fd:94:d5:7a:c7:b3:9b:01:5e: b9:44:83:d4:93:c8:1b:ac:1a:9c:2e:23:cd:0c:9c: 47:6e:31:5c:19:9f:b1:e3:2a:6a:4a:d3:01:4a:ae: 4b:0a:24:d7:ea:c9:90:ac:6c:cf:59:68:49:61:1a: b2:aa:e3:81:47:90:a0:c1:8f:b8:5f:16:65:08:8e: 71:1f:e1:18:b2:83:56:6c:54:11:a0:dd:80:6d:09: 38:63:ce:8d:f6:10:f8:77:68:f6:e6:e3:df:f2:92: c3:cd:09:54:f4:0c:e9:2f:97:07:2e:0b:b9:da:8a: fe:09:3e:d0:8e:29:1a:1c:41:10:76:5e:d4:4d:82: 93:a4:2b:14:d7:19:42:b4:07:45:20:75:39:cb:07: 8f:6e:34:2e:de:df:70:a6:70:ee:af:aa:60:e0:da: ee:a4:e0:36:1b:41:b4:44:b8:b6:a1:7d:08:f4:22: a3:15:f2:81:d3:d8:db:78:1f:21:02:e8:ed:37:5a: 9b:ae:71:2e:21:e3:e9:66:e6:ec:9b:45:9e:8f:ae: 30:93:3d:2c:b8:ce:f0:84:60:49:10:97:82:74:e1: a6:1f:86:77:f6:23:25:93:81:5b:f9:a9:74:ec:83: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8B:95:87:7C:4C:A9:6E:9E:F5:FC:D7:29:9B:B7:3E:2B:27:DA:64 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:20:a6:03:9e:40:fb:63:9e:ac:cf:75:e0:37:c8:db:c0: 07:f3:d1:d4:58:a8:d3:6c:2d:63:9c:e8:89:e9:2b:b4:ee:38: b5:47:20:9b:7e:5f:33:09:fb:04:90:c8:c1:aa:9d:c9:02:4e: 09:2b:c1:f9:45:82:66:19:f8:5f:83:28:31:f8:23:02:d7:97: 0c:7b:87:43:1e:fa:fb:b8:4d:2d:23:c4:11:d1:dd:c2:5a:2d: 5b:bd:40:01:43:88:30:f5:95:49:b2:5f:4b:ae:7c:10:22:29: d4:49:db:e9:2a:af:e0:11:55:9f:cf:44:b2:39:e9:6b:59:a9: 33:86:30:c5:5a:a3:b1:4e:ef:92:37:d9:5b:24:b7:6e:f4:28: 06:b6:f3:a2:1f:4a:35:30:ee:5d:50:fd:81:e4:51:8a:c4:c9: ff:3e:3e:81:8d:e2:59:5f:91:e4:b6:fa:2f:ee:ad:9a:ee:51: ed:2d:cb:39:e9:75:54:ae:a5:95:f9:f5:26:dc:cf:a7:f4:dd: 68:e0:7e:51:ae:1c:fa:4b:54:d3:90:b6:6f:2a:06:2b:bf:76: e6:97:61:cf:f5:fa:9f:58:56:ee:4b:c2:3f:a1:ed:ee:60:c1: 60:10:ca:92:8a:5f:28:e2:58:df:9d:28:48:aa:a7:40:e4:20: 10:45:b7:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4 QTMxNzFBNDcwHhcNMjUxMDI5MDQxMjI1WhcNMjUxMTA1MDQxMjI1WjAYMRYwFAYD VQQDEw02OTAxOTQyOS04MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP+ZO9jDh6SCaGI7w8VMg0uMeLz9lNV6x7ObAV65RIPUk8gbrBqcLiPNDJxH bjFcGZ+x4ypqStMBSq5LCiTX6smQrGzPWWhJYRqyquOBR5CgwY+4XxZlCI5xH+EY soNWbFQRoN2AbQk4Y86N9hD4d2j25uPf8pLDzQlU9AzpL5cHLgu52or+CT7Qjika HEEQdl7UTYKTpCsU1xlCtAdFIHU5ywePbjQu3t9wpnDur6pg4NrupOA2G0G0RLi2 oX0I9CKjFfKB09jbeB8hAujtN1qbrnEuIePpZubsm0Wej64wkz0suM7whGBJEJeC dOGmH4Z39iMlk4Fb+al07INmuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6LlYd8 TKlunvX81ymbtz4rJ9pkMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9DOTJCMzIzMkNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0 cWFoNlpQOEFsRUtLTVhHa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb1iCmA55A+2OerM914DfI28AH89HUWKjTbC1jnOiJ6Su07ji1RyCb fl8zCfsEkMjBqp3JAk4JK8H5RYJmGfhfgygx+CMC15cMe4dDHvr7uE0tI8QR0d3C Wi1bvUABQ4gw9ZVJsl9LrnwQIinUSdvpKq/gEVWfz0SyOelrWakzhjDFWqOxTu+S N9lbJLdu9CgGtvOiH0o1MO5dUP2B5FGKxMn/Pj6BjeJZX5Hktvov7q2a7lHtLcs5 6XVUrqWV+fUm3M+n9N1o4H5Rrhz6S1TTkLZvKgYrv3bml2HP9fqfWFbuS8I/oe3u YMFgEMqSil8o4ljfnShIqqdA5CAQRbdq -----END CERTIFICATE-----Generated at Wed Oct 29 11:13:19 2025 by rpki-client