$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: r+S1MysmTeet9AzlFc6tcZXxD4rhQ6ifPTfwNmfhOwk= Subject key identifier: E4:58:27:A8:90:96:C9:BF:D7:A7:EA:20:5A:E2:85:0D:55:EE:2B:A0 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 04D0 Signing time: Sun 02 Nov 2025 23:47:27 +0000 Manifest this update: Sun 02 Nov 2025 23:47:27 +0000 Manifest next update: Sun 09 Nov 2025 23:47:27 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: Ff+Bh/vXjLIlMEro7nsxuXtwISFlp4sXJXTcOKq28Ao=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: Nov 2 23:47:27 2025 GMT Not After : Nov 9 23:47:27 2025 GMT Subject: CN=6907ed8f-a360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:d3:92:70:b0:f3:d4:92:d8:6f:bb:1f:f5: 4d:44:87:48:6c:92:f5:5e:95:81:c5:07:3e:16:39: a2:a0:57:a8:a5:cb:e8:18:dc:66:8d:f5:e2:5d:f6: 20:02:9d:52:41:ea:20:bb:78:60:1c:3b:35:d6:fc: 8a:6a:e5:ef:c7:b1:fc:28:30:38:dd:fc:32:85:38: b8:8a:b4:28:c3:cc:67:b2:3e:ce:0b:18:23:ea:91: e8:1d:90:e8:08:65:65:ee:44:1a:d8:21:33:d3:32: 18:6f:df:3e:9d:1f:1e:82:62:8b:cf:41:0e:6f:34: 1b:b4:eb:32:0e:63:0b:d5:47:e1:9f:4e:33:50:26: 63:dd:fe:03:f5:1f:cb:1d:fc:52:b4:c3:d2:d4:33: 03:c2:c7:eb:08:d5:5a:41:6d:12:e1:62:28:fa:25: 54:73:e6:df:8e:c0:fe:e9:b6:2d:b0:58:5b:c8:25: b4:b0:8b:8a:89:23:79:72:5c:49:f3:8c:f4:d4:46: 8a:e6:a5:7d:05:0a:94:2d:b0:fd:94:4a:42:3c:13: b5:f9:7f:d0:c4:e8:03:76:eb:d2:e0:bc:23:1b:18: e2:2a:26:b9:77:50:0b:d2:6d:a7:a7:19:24:ae:8e: 20:f5:f1:89:32:ba:10:6d:5e:c3:40:90:bf:6c:27: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:27:A8:90:96:C9:BF:D7:A7:EA:20:5A:E2:85:0D:55:EE:2B:A0 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c5:c6:36:6b:8e:ff:2c:19:52:53:c1:a7:1c:cc:0c:18:2f: 5d:9e:0c:1d:a4:d0:06:c3:85:1c:64:30:54:b9:ca:34:65:13: 12:6d:71:fa:cf:fb:1f:a2:86:97:6e:51:a9:6c:48:d0:8b:8e: 8f:b5:d0:f2:0b:75:52:3c:86:d3:e4:71:13:10:f1:3d:80:1e: a2:d0:fd:2f:0e:72:2d:83:83:0d:0f:40:6a:f8:80:af:92:9e: 07:e7:86:21:0e:fd:41:3b:36:51:69:31:31:59:0e:21:9f:2b: 40:14:41:d8:9d:84:72:db:e1:d9:21:17:97:bd:e6:db:77:67: d0:03:48:27:5f:3c:65:26:59:5a:55:3b:d2:a3:58:7d:02:61: 29:e3:a3:4c:55:89:e5:65:db:3f:c8:b2:78:20:e7:44:65:f6: 6a:fb:1a:e5:4d:78:f2:37:05:29:c7:50:21:25:5d:4a:d7:0a: 65:83:9c:d1:37:f2:85:95:e3:af:78:d7:57:0a:5c:ee:aa:fd: ac:b6:3c:0b:4d:bb:e6:b2:40:a3:b5:64:83:b6:ee:67:73:b8: e6:4a:98:ac:9b:4b:fd:22:01:26:d2:2a:d6:7f:37:39:35:7a: 7a:6e:74:c9:6a:92:10:8d:af:d1:ec:8d:c3:50:bb:33:bc:66: af:d2:a6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjUxMTAyMjM0NzI3WhcNMjUxMTA5MjM0NzI3WjAYMRYwFAYD VQQDEw02OTA3ZWQ4Zi1hMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+rTknCw89SS2G+7H/VNRIdIbJL1XpWBxQc+FjmioFeopcvoGNxmjfXiXfYg Ap1SQeogu3hgHDs11vyKauXvx7H8KDA43fwyhTi4irQow8xnsj7OCxgj6pHoHZDo CGVl7kQa2CEz0zIYb98+nR8egmKLz0EObzQbtOsyDmML1Ufhn04zUCZj3f4D9R/L HfxStMPS1DMDwsfrCNVaQW0S4WIo+iVUc+bfjsD+6bYtsFhbyCW0sIuKiSN5clxJ 84z01EaK5qV9BQqULbD9lEpCPBO1+X/QxOgDduvS4LwjGxjiKia5d1AL0m2npxkk ro4g9fGJMroQbV7DQJC/bCdmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORYJ6iQ lsm/16fqIFrihQ1V7iugMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnxcY2a47/LBlSU8GnHMwMGC9dngwdpNAGw4UcZDBUuco0ZRMSbXH6 z/sfooaXblGpbEjQi46PtdDyC3VSPIbT5HETEPE9gB6i0P0vDnItg4MND0Bq+ICv kp4H54YhDv1BOzZRaTExWQ4hnytAFEHYnYRy2+HZIReXvebbd2fQA0gnXzxlJlla VTvSo1h9AmEp46NMVYnlZds/yLJ4IOdEZfZq+xrlTXjyNwUpx1AhJV1K1wplg5zR N/KFleOveNdXClzuqv2stjwLTbvmskCjtWSDtu5nc7jmSpism0v9IgEm0irWfzc5 NXp6bnTJapIQja/R7I3DULszvGav0qbl -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:17 2025 by rpki-client