$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: S0IeHbX6/HJtVTLtfto4SYXaO6zu8djMUqWkyxxmk1g= Subject key identifier: 62:6E:D0:04:23:A6:1D:D0:84:CF:E2:89:7D:C5:81:8D:6A:80:A9:77 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0272 Signing time: Thu 23 Oct 2025 03:06:00 +0000 Manifest this update: Thu 23 Oct 2025 03:05:59 +0000 Manifest next update: Thu 30 Oct 2025 03:05:59 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: yNoOBFCcJDoQdtAG+1UeqCoOw/chAAfNmsat36hyptA=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: ujc0MMs38JAyLv/lgGmTZJVWFsrRIcXX0fImBXf2Gng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Oct 23 03:05:59 2025 GMT Not After : Oct 30 03:05:59 2025 GMT Subject: CN=68f99b98-e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:e3:94:62:30:ae:54:0d:67:32:eb:ca:17: 20:9e:41:18:5b:13:06:b6:4a:87:11:a0:b8:ec:8b: 84:a2:39:ce:e1:17:91:aa:5e:2f:04:f4:f1:9a:18: c0:5d:d7:b8:33:5f:24:25:df:1e:53:8e:32:e9:45: 2e:e4:0b:01:30:5e:88:5f:66:f5:e5:17:63:be:9a: f2:be:7f:ed:32:e8:4c:53:66:3e:80:32:d5:c2:76: a4:7d:10:95:5c:38:ab:ec:97:a5:4b:8d:b5:c7:ff: f2:e5:7b:e1:01:8a:13:83:be:61:0b:03:30:5a:2c: 0d:86:4b:ff:f5:43:cd:2c:ac:75:63:d7:7b:93:55: 29:6b:10:26:84:ef:af:14:49:9f:0c:d9:01:3e:a6: f1:e3:4e:87:fd:d9:f8:0a:cf:17:ee:b7:40:a5:1a: 4c:92:74:ad:3e:a9:af:b7:62:12:35:f6:71:c7:4d: 05:4e:5e:78:c5:88:e8:79:e0:e2:73:fc:30:a2:c7: 06:96:67:28:ac:a7:fe:8b:98:f8:a2:7d:93:17:13: 92:f2:38:12:8e:65:2e:d5:b2:32:d5:cf:f2:8a:c6: e2:27:3c:97:0d:62:ce:01:64:f3:af:92:07:56:7d: 90:f0:4c:7a:f9:8a:35:fb:d2:7e:dc:c1:b7:b3:68: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:D0:04:23:A6:1D:D0:84:CF:E2:89:7D:C5:81:8D:6A:80:A9:77 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:39:e9:9c:16:18:dd:7b:b3:9f:5a:8c:28:42:b2:f8:16: b9:51:30:62:18:e1:65:c0:49:2b:ee:89:05:2d:d2:a8:5d:8a: 19:22:ea:6b:b1:2c:49:95:48:a1:96:e4:70:ae:08:9a:73:b7: 25:1f:8b:9b:b1:b3:44:74:3d:46:f7:c3:e3:6c:63:95:6b:6f: 7b:66:e0:a3:88:4e:04:63:a7:1c:62:de:18:58:69:59:8e:9a: bf:19:9c:cd:e2:47:a9:2e:7a:cf:96:a6:67:81:92:7b:ba:9d: e7:82:79:ca:1e:b0:2a:42:f6:f3:85:8a:08:9e:f2:3a:9d:f8: 86:9c:72:8e:f2:dd:dc:15:fb:2c:d3:bb:d2:ba:e2:19:d9:9d: 02:f4:ce:96:52:08:c8:c8:6f:dc:2b:82:f7:5e:92:87:c3:e2: 72:3a:43:e5:57:d3:d0:f5:ec:2e:e4:fc:e4:6a:d0:16:8f:dc: 6a:5a:d4:03:06:78:3e:15:03:55:36:02:21:8a:9f:9b:81:4e: e9:a7:7f:20:c5:b2:a8:82:1e:8b:f0:e5:4e:af:c1:81:87:33: 96:ff:16:9c:4e:75:37:c7:23:f6:49:88:81:19:f0:dd:2a:60: e8:95:3c:31:6e:89:9d:49:b6:9b:75:39:87:72:aa:f4:bf:7c: d0:33:a6:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUxMDIzMDMwNTU5WhcNMjUxMDMwMDMwNTU5WjAYMRYwFAYD VQQDEw02OGY5OWI5OC1lOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8PjlGIwrlQNZzLryhcgnkEYWxMGtkqHEaC47IuEojnO4ReRql4vBPTxmhjA Xde4M18kJd8eU44y6UUu5AsBMF6IX2b15Rdjvpryvn/tMuhMU2Y+gDLVwnakfRCV XDir7JelS421x//y5XvhAYoTg75hCwMwWiwNhkv/9UPNLKx1Y9d7k1UpaxAmhO+v FEmfDNkBPqbx406H/dn4Cs8X7rdApRpMknStPqmvt2ISNfZxx00FTl54xYjoeeDi c/wwoscGlmcorKf+i5j4on2TFxOS8jgSjmUu1bIy1c/yisbiJzyXDWLOAWTzr5IH Vn2Q8Ex6+Yo1+9J+3MG3s2h9SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJu0AQj ph3QhM/iiX3FgY1qgKl3MB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+DnpnBYY3Xuzn1qMKEKy+Ba5UTBiGOFlwEkr7okFLdKoXYoZIupr sSxJlUihluRwrgiac7clH4ubsbNEdD1G98PjbGOVa297ZuCjiE4EY6ccYt4YWGlZ jpq/GZzN4kepLnrPlqZngZJ7up3ngnnKHrAqQvbzhYoInvI6nfiGnHKO8t3cFfss 07vSuuIZ2Z0C9M6WUgjIyG/cK4L3XpKHw+JyOkPlV9PQ9ewu5PzkatAWj9xqWtQD Bng+FQNVNgIhip+bgU7pp38gxbKogh6L8OVOr8GBhzOW/xacTnU3xyP2SYiBGfDd KmDolTwxbomdSbabdTmHcqr0v3zQM6bw -----END CERTIFICATE-----Generated at Thu Oct 23 20:02:24 2025 by rpki-client