$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft File: o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json) Hash identifier: NsTgGqwqUlloevTBg2zTOnMqs4gNzz096PoXgSRQwGk= Subject key identifier: 83:4B:0B:3B:31:DD:7E:04:F4:79:7F:38:8F:33:38:A3:1A:9D:88:A8 Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft Manifest number: 0612 Signing time: Tue 04 Nov 2025 22:55:57 +0000 Manifest this update: Tue 04 Nov 2025 22:55:57 +0000 Manifest next update: Tue 11 Nov 2025 22:55:57 +0000 Files and hashes: 1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: P+OoKKSD2da/Ks1aZwHiXtpPM9TZAvS2f0u71VjjaEI=) 2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: KmV3A66uHX2ovCCHWTgN+6Kx1zjXxXnhW11qwJ7+Kek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B Validity Not Before: Nov 4 22:55:57 2025 GMT Not After : Nov 11 22:55:57 2025 GMT Subject: CN=690a847d-d72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:92:9f:7c:6c:9f:cc:bd:0d:8a:b5:40:bb: e3:42:20:2c:25:00:ce:4b:34:70:8a:24:57:ab:1d: 68:46:fa:02:bc:43:86:4a:57:e3:22:3d:37:19:95: 7b:a3:a9:61:a1:fd:e8:3f:58:37:69:f8:f9:b6:f0: 11:47:85:af:56:a5:c0:03:e7:b1:06:b4:43:83:8f: 73:9e:fd:64:60:5b:9e:0f:44:a9:9e:4d:a2:31:8e: d2:24:a3:35:89:a4:e2:f4:d3:ce:00:1b:05:41:13: d8:01:b0:21:1d:06:c9:81:e8:7d:54:67:de:dc:05: 31:d2:48:b9:3c:0c:4f:a4:49:79:e8:46:28:df:00: 56:3b:49:fc:bf:41:bf:fc:07:7d:c7:4c:fd:b5:a6: 39:b1:e9:12:15:66:7d:59:38:1f:e7:fc:aa:12:3e: 0d:92:e4:5a:1e:6f:38:e1:f8:f7:98:8c:2d:41:6a: 48:f6:e7:4d:5f:45:62:e4:42:fb:75:19:4a:d4:b2: 19:07:5f:e3:c3:c1:07:f1:27:f8:07:60:60:3f:e8: 0d:aa:d7:3f:7c:5d:41:c2:5e:85:a8:55:12:7a:0d: 69:ed:37:10:08:f0:94:80:7d:19:f9:d9:15:7f:2a: 24:3e:c5:a9:3c:2f:26:1f:23:64:11:80:23:86:7e: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4B:0B:3B:31:DD:7E:04:F4:79:7F:38:8F:33:38:A3:1A:9D:88:A8 X509v3 Authority Key Identifier: keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fa:ea:54:4f:9f:e7:a5:15:07:78:a3:a6:61:a7:57:73:2e: eb:8f:ce:2e:73:fb:dc:cc:ce:97:2b:d5:27:59:1e:b6:1a:60: da:80:00:3a:19:67:c4:48:4d:40:d3:5b:73:14:58:58:79:41: 7d:35:24:3a:e2:e1:8a:08:46:6d:e4:bf:57:46:c4:c4:dc:aa: 47:f5:03:f9:cd:02:ca:6e:1b:ad:c1:17:37:f8:c2:fb:b1:95: 4d:a8:de:10:fc:3b:2f:95:56:2e:4b:dc:b0:bc:dd:37:34:4b: ca:62:3e:cf:be:78:97:e6:37:d3:96:ad:0d:30:f6:56:a4:e6: a2:94:61:ae:91:67:3c:36:a7:89:2e:43:51:d5:bb:a4:a3:e2: b7:36:3e:c0:a6:54:70:a2:6a:25:e0:21:4b:69:ac:e1:b8:94: 6a:34:58:37:1a:be:af:23:d3:0d:d4:a0:2a:8b:0d:0d:57:79: 7b:82:15:66:4c:68:35:eb:11:80:68:4a:8f:e2:b3:40:8c:f4: ff:97:42:2e:37:f9:95:a4:2e:cc:cf:fe:80:30:f8:68:01:ca: 3c:93:04:9a:84:c2:63:57:dd:3a:90:ef:d8:d1:1b:20:1c:b5: 29:9b:39:fe:d3:97:91:3a:a4:16:27:7f:5c:18:7d:29:69:b7: d4:5d:16:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGQkExMTAvBgNVBAUTKEEzREREQUJFM0Q0NkI0NDgwMjYxREFCQkU1MjlBMDY2 QjYyMDVEOEIwHhcNMjUxMTA0MjI1NTU3WhcNMjUxMTExMjI1NTU3WjAYMRYwFAYD VQQDEw02OTBhODQ3ZC1kNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZeSn3xsn8y9DYq1QLvjQiAsJQDOSzRwiiRXqx1oRvoCvEOGSlfjIj03GZV7 o6lhof3oP1g3afj5tvARR4WvVqXAA+exBrRDg49znv1kYFueD0Spnk2iMY7SJKM1 iaTi9NPOABsFQRPYAbAhHQbJgeh9VGfe3AUx0ki5PAxPpEl56EYo3wBWO0n8v0G/ /Ad9x0z9taY5sekSFWZ9WTgf5/yqEj4NkuRaHm844fj3mIwtQWpI9udNX0Vi5EL7 dRlK1LIZB1/jw8EH8Sf4B2BgP+gNqtc/fF1Bwl6FqFUSeg1p7TcQCPCUgH0Z+dkV fyokPsWpPC8mHyNkEYAjhn6LEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINLCzsx 3X4E9Hl/OI8zOKManYioMB8GA1UdIwQYMBaAFKPd2r49RrRIAmHau+UpoGa2IF2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCQS9ENDQyMEU5MEMx RjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RFZ0NZZHE3NVNtZ1pyWWdY WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285M2F2ajFHdEVnQ1lkcTc1U21nWnJZZ1hZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUZCQS9ENDQyMEU5MEMxRjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RF Z0NZZHE3NVNtZ1pyWWdYWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+upUT5/npRUHeKOmYadXcy7rj84uc/vczM6XK9UnWR62GmDagAA6 GWfESE1A01tzFFhYeUF9NSQ64uGKCEZt5L9XRsTE3KpH9QP5zQLKbhutwRc3+ML7 sZVNqN4Q/DsvlVYuS9ywvN03NEvKYj7PvniX5jfTlq0NMPZWpOailGGukWc8NqeJ LkNR1buko+K3Nj7AplRwomol4CFLaazhuJRqNFg3Gr6vI9MN1KAqiw0NV3l7ghVm TGg16xGAaEqP4rNAjPT/l0IuN/mVpC7Mz/6AMPhoAco8kwSahMJjV906kO/Y0Rsg HLUpmzn+05eROqQWJ39cGH0pabfUXRan -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:30 2025 by rpki-client