$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: LqremAf9DJHd2A7NmuGJGpJSdBzqdpcmv5B7Pw09j5o= Subject key identifier: C8:15:6A:3A:DC:99:B4:05:67:2C:06:B0:09:1E:06:8B:52:63:A6:46 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 04AA Signing time: Tue 28 Oct 2025 23:48:14 +0000 Manifest this update: Tue 28 Oct 2025 23:48:13 +0000 Manifest next update: Tue 04 Nov 2025 23:48:13 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: xuWYltOcTgbJJoCmMAlaG90sJPWn7fDjikLxsLzm6F8=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) 3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Oct 28 23:48:13 2025 GMT Not After : Nov 4 23:48:13 2025 GMT Subject: CN=6901563d-ca14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:7f:94:a9:60:01:34:37:eb:79:fb:97:bc: 8e:ae:52:b2:8b:16:a2:60:6a:96:f0:63:43:27:41: a2:12:ab:2b:2d:ed:05:3e:1c:cc:54:03:f2:ee:15: cf:fa:1d:59:8f:eb:a8:33:57:dd:c6:0c:b0:74:3e: 76:39:c9:97:91:62:fa:4d:7a:f0:79:7f:64:cc:0b: c8:fd:98:71:1d:95:9e:3b:0b:11:68:b6:ee:be:3d: 4c:cd:94:2c:de:4b:db:21:1a:3e:52:b8:d6:82:8b: ad:0c:8e:d3:c6:67:8f:ae:5c:55:76:3c:26:ff:9c: c3:47:fc:74:08:a6:f5:c8:5f:75:32:ac:c3:3d:71: e9:35:d7:d3:09:b8:91:68:5b:24:69:41:03:c4:5d: b4:f7:da:20:18:da:a3:a1:86:3c:36:d5:e6:d4:2f: 4d:c0:d7:ba:d1:a7:9e:37:fb:96:d3:0e:32:70:c1: c9:0c:9a:69:57:2c:7c:98:92:3b:ed:f5:38:bf:a2: 9d:ff:c3:ed:8b:0b:58:00:c5:15:48:74:e7:61:b4: c8:6a:88:bd:41:99:a2:c5:e0:3c:90:dd:4f:b5:69: 66:9d:12:7d:46:81:4a:f6:ca:34:c4:b7:d4:8e:62: 33:7e:dd:29:0a:ec:53:74:37:7d:51:fc:23:17:31: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:15:6A:3A:DC:99:B4:05:67:2C:06:B0:09:1E:06:8B:52:63:A6:46 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fd:93:ea:60:f9:bc:76:80:02:75:7c:f2:be:e4:ae:f6:57: bc:cb:84:6c:b8:eb:35:8a:17:38:b8:07:13:41:4f:38:6b:1a: e3:ec:d7:45:f5:da:29:5a:14:ab:e1:db:44:96:0b:2e:e1:09: 1d:0b:86:33:9e:51:d9:c9:2f:43:1c:c9:9f:35:4a:30:0a:2b: 43:8d:06:be:73:c7:e0:d1:6f:af:59:8e:31:b7:65:ae:dc:60: 7f:07:e8:fa:34:e1:81:86:9d:6e:55:31:aa:1b:ea:12:0b:31: 53:a9:80:fb:91:17:aa:fc:8e:a7:5c:b7:8c:52:86:c9:1a:53: d6:f7:71:1d:63:05:bb:bc:68:ee:f9:f5:3f:96:da:37:e7:60: 85:85:90:8f:63:be:30:da:b4:17:46:fe:dd:44:0d:03:82:3b: db:5a:cb:14:e2:07:05:59:91:f7:85:0f:3c:13:7f:9b:a4:91: e0:d2:28:6a:af:84:da:08:ef:45:75:61:1a:b4:e3:ca:50:62: 1c:8f:19:4e:49:ea:07:a0:3c:21:33:66:1f:fe:09:71:a8:3b: 80:4b:b3:35:04:a8:43:9b:a8:ae:a3:ae:80:4d:62:40:0d:31: 43:5b:18:05:df:d1:9b:22:9b:17:f8:43:ea:8f:4d:54:4b:aa: ca:b3:3d:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUxMDI4MjM0ODEzWhcNMjUxMTA0MjM0ODEzWjAYMRYwFAYD VQQDEw02OTAxNTYzZC1jYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncl/lKlgATQ363n7l7yOrlKyixaiYGqW8GNDJ0GiEqsrLe0FPhzMVAPy7hXP +h1Zj+uoM1fdxgywdD52OcmXkWL6TXrweX9kzAvI/ZhxHZWeOwsRaLbuvj1MzZQs 3kvbIRo+UrjWgoutDI7TxmePrlxVdjwm/5zDR/x0CKb1yF91MqzDPXHpNdfTCbiR aFskaUEDxF2099ogGNqjoYY8NtXm1C9NwNe60aeeN/uW0w4ycMHJDJppVyx8mJI7 7fU4v6Kd/8PtiwtYAMUVSHTnYbTIaoi9QZmixeA8kN1PtWlmnRJ9RoFK9so0xLfU jmIzft0pCuxTdDd9UfwjFzGNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgVajrc mbQFZywGsAkeBotSY6ZGMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4/ZPqYPm8doACdXzyvuSu9le8y4RsuOs1ihc4uAcTQU84axrj7NdF 9dopWhSr4dtElgsu4QkdC4YznlHZyS9DHMmfNUowCitDjQa+c8fg0W+vWY4xt2Wu 3GB/B+j6NOGBhp1uVTGqG+oSCzFTqYD7kReq/I6nXLeMUobJGlPW93EdYwW7vGju +fU/lto352CFhZCPY74w2rQXRv7dRA0DgjvbWssU4gcFWZH3hQ88E3+bpJHg0ihq r4TaCO9FdWEatOPKUGIcjxlOSeoHoDwhM2Yf/glxqDuAS7M1BKhDm6iuo66ATWJA DTFDWxgF39GbIpsX+EPqj01US6rKsz2J -----END CERTIFICATE-----Generated at Wed Oct 29 07:39:41 2025 by rpki-client