$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: /O0vJvbmbx8Z7t2aCqIoMUDlomqX8V9SWH5/HLMUaf8= Subject key identifier: 49:99:38:B9:6F:0A:2E:1D:CD:37:90:8F:F5:D3:82:C3:A8:E9:25:B9 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0EA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E9C Signing time: Sun 02 Nov 2025 17:41:33 +0000 Manifest this update: Sun 02 Nov 2025 17:41:32 +0000 Manifest next update: Sun 09 Nov 2025 17:41:32 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: bb77N25BvbAPHNsDHv15sDCZQWoYRFeS4O0e34mJQds=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Nov 2 17:41:32 2025 GMT Not After : Nov 9 17:41:32 2025 GMT Subject: CN=690797cc-9065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:21:d4:3b:ed:60:d7:bf:b4:28:bd:64:91: ef:68:e2:cf:52:b7:59:6f:21:b1:9d:d9:01:5c:bc: 99:57:3a:e7:87:c9:30:8e:a0:8c:f0:44:db:ae:75: db:ff:89:ce:57:9b:27:f9:c1:4d:19:69:48:6f:58: d9:b0:a0:b3:9d:ce:2c:bf:b1:53:7e:3d:30:7b:b2: a9:25:b8:21:ac:5e:66:14:fb:d5:34:54:9c:25:e8: ab:b2:49:20:54:f3:4b:00:05:d5:fd:9f:8c:b1:04: c5:67:39:9b:7e:b5:a7:ad:0d:94:5b:64:8f:b6:ee: b9:44:68:a6:02:00:42:70:b7:90:70:68:4d:d4:79: 31:cb:fc:e1:32:ab:ac:30:39:b5:59:04:41:55:e9: 54:e2:31:b8:11:40:4c:c6:d3:22:0c:5d:3a:17:f1: 2f:48:0e:48:f2:ca:3e:78:ca:5e:b1:ee:4b:9d:2b: 1f:9d:b0:4a:b2:c6:b1:e8:ac:e7:11:a4:51:d5:ee: 0d:e3:46:db:20:84:43:e7:50:6d:24:22:f5:01:68: ce:3d:c2:e0:96:27:7a:5f:7d:16:95:34:bb:24:20: a8:61:d5:e1:51:47:e6:ad:13:e9:c0:f1:36:b4:e6: ee:29:00:1f:01:bb:06:0c:a0:6c:dc:0c:8b:18:69: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:38:B9:6F:0A:2E:1D:CD:37:90:8F:F5:D3:82:C3:A8:E9:25:B9 X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:24:fc:62:16:41:bb:33:a0:22:a6:92:ac:46:26:80:ab:c8: 17:e3:3a:2b:e3:b7:48:ab:5a:0c:4a:65:15:8e:86:fc:bd:5a: eb:46:ec:a6:44:e2:fa:f0:f8:88:a3:e4:e6:6f:94:9d:5e:00: ac:47:04:cf:96:c4:db:f5:6a:ff:9c:e4:15:76:70:a6:86:73: df:c1:a5:0d:4b:74:c0:84:05:a8:d6:b0:f3:e1:0b:70:c6:90: 63:30:74:da:1f:c5:20:ec:1e:86:38:f8:97:3d:74:ae:f6:07: ae:cb:4a:8a:91:43:3a:3c:cb:94:da:6e:ff:29:eb:38:e7:cd: 7a:46:fb:ae:c7:ac:f1:72:2e:f9:00:72:f8:1a:fb:cf:c5:31: ad:ed:27:27:e3:d8:40:06:68:c6:c3:3f:a7:48:a4:35:bf:60: 9a:95:f9:49:58:3e:8b:7a:90:a3:f8:e4:2b:f4:dd:76:ad:21: 40:8d:27:6c:fd:66:c3:d3:63:7c:f6:b3:cc:1c:82:bb:68:7e: fa:9c:39:a2:18:06:dc:64:9d:b0:2d:fb:15:cd:9b:19:18:ad: 84:f2:2f:8a:f6:82:b2:67:38:db:4e:2e:37:06:d3:8d:07:90: aa:73:58:61:d8:e8:62:a1:db:80:81:c8:9f:e4:4c:71:cf:40: 57:30:b9:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUxMTAyMTc0MTMyWhcNMjUxMTA5MTc0MTMyWjAYMRYwFAYD VQQDEw02OTA3OTdjYy05MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27oh1DvtYNe/tCi9ZJHvaOLPUrdZbyGxndkBXLyZVzrnh8kwjqCM8ETbrnXb /4nOV5sn+cFNGWlIb1jZsKCznc4sv7FTfj0we7KpJbghrF5mFPvVNFScJeirskkg VPNLAAXV/Z+MsQTFZzmbfrWnrQ2UW2SPtu65RGimAgBCcLeQcGhN1Hkxy/zhMqus MDm1WQRBVelU4jG4EUBMxtMiDF06F/EvSA5I8so+eMpese5LnSsfnbBKssax6Kzn EaRR1e4N40bbIIRD51BtJCL1AWjOPcLglid6X30WlTS7JCCoYdXhUUfmrRPpwPE2 tObuKQAfAbsGDKBs3AyLGGmeUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmZOLlv Ci4dzTeQj/XTgsOo6SW5MB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJPxiFkG7M6AippKsRiaAq8gX4zor47dIq1oMSmUVjob8vVrrRuym ROL68PiIo+Tmb5SdXgCsRwTPlsTb9Wr/nOQVdnCmhnPfwaUNS3TAhAWo1rDz4Qtw xpBjMHTaH8Ug7B6GOPiXPXSu9geuy0qKkUM6PMuU2m7/Kes45816Rvuux6zxci75 AHL4GvvPxTGt7Scn49hABmjGwz+nSKQ1v2CalflJWD6LepCj+OQr9N12rSFAjSds /WbD02N89rPMHIK7aH76nDmiGAbcZJ2wLfsVzZsZGK2E8i+K9oKyZzjbTi43BtON B5Cqc1hh2OhioduAgcif5Exxz0BXMLl4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:44 2025 by rpki-client