$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: DXvCI89Y7osFpPBls8Y1Uheco+TsbZIdOJQDr3NjZsU= Subject key identifier: BD:A8:88:B8:48:23:26:B9:45:F3:C1:DC:9A:8A:E0:09:C8:FB:97:4A Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 96 Signing time: Mon 03 Nov 2025 06:37:49 +0000 Manifest this update: Mon 03 Nov 2025 06:37:49 +0000 Manifest next update: Mon 10 Nov 2025 06:37:49 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: 0Ow/1n3A5j7Q6gMZynG0Axbuelbk6PVl49SIBfS4V3c=) 2: 965254F8278811F09217002CC4F9AE02.roa (hash: cntS2QbrLMGVNDiSYKCKZNhPNOsjrLMnvFLUFK/CvnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Nov 3 06:37:49 2025 GMT Not After : Nov 10 06:37:49 2025 GMT Subject: CN=69084dbd-897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:66:f7:f6:e6:2a:12:b2:e2:09:d5:74:75: 8e:e0:02:d5:4d:58:31:d5:4a:7f:ac:5e:8c:99:f1: 6b:4a:3b:bc:b7:94:6d:d6:13:da:05:27:60:42:ce: 9e:07:5c:f1:b1:de:6e:16:41:f0:4f:ec:32:8f:1f: af:e3:f2:8e:5b:4c:67:9d:96:bc:e7:91:c6:14:b5: 9d:de:39:48:82:b6:31:ee:d6:b8:a7:53:b2:6e:da: e2:c7:0d:d7:73:c7:02:94:6c:57:da:81:a5:07:32: 7c:5a:68:cc:8c:79:76:9a:ec:72:e8:a2:8d:c7:77: e4:0a:5a:68:fc:0e:63:28:73:d6:49:a0:db:c7:ff: 8f:83:af:f3:e4:47:63:73:e5:51:ac:e6:6f:af:e7: c2:26:d4:2f:80:26:ee:4a:48:92:5b:25:c1:f4:1c: f7:a4:4c:d5:7f:d1:33:c1:2b:88:18:c8:53:7a:b7: 7d:c6:47:8d:6b:e3:0f:00:28:a1:91:a0:b2:e6:6e: cc:91:fe:b2:f0:65:ab:18:9b:5d:54:8e:cf:e9:e6: 5a:0d:a3:76:b9:76:98:a0:4c:23:d8:41:53:4e:b1: b2:06:ed:19:10:0a:ba:d9:cf:ba:da:2f:16:ff:94: 06:22:11:22:4e:24:b6:6f:54:4a:3f:bb:84:2f:4a: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:88:B8:48:23:26:B9:45:F3:C1:DC:9A:8A:E0:09:C8:FB:97:4A X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b5:50:ec:4e:c3:a0:f2:68:42:25:f3:af:55:c0:da:22:cf: 05:8a:42:c0:3d:c9:b5:42:b9:40:65:1c:2c:4b:97:7a:67:ca: c1:f4:00:9f:c9:6f:a2:f2:30:8d:2d:dc:a3:14:2a:9e:ee:26: c4:d9:bd:f2:7b:c6:c2:c3:37:73:80:d9:80:65:7a:e4:71:10: 27:3a:9d:8b:68:47:c2:7b:45:e1:a1:4c:c4:6d:45:8f:c2:63: df:65:ba:f1:35:a3:19:bc:3e:44:52:f1:f1:47:c6:ef:8a:47: 12:1f:2e:ee:49:2d:59:6d:19:86:95:22:79:9f:50:51:14:15: c3:ce:ee:e1:92:ca:f9:03:e8:be:1a:28:54:86:9e:22:87:b2: af:7f:a7:54:39:07:1c:19:2e:2e:97:20:5a:33:3d:7f:13:23: a4:68:1e:91:67:b5:a0:d6:c6:a5:75:8f:39:18:87:67:27:c6: ed:f1:89:15:f4:60:24:60:56:99:43:7b:a6:d2:a5:90:94:16: 20:3c:24:b3:b7:43:55:ad:6d:b0:7e:22:e9:80:72:08:08:c2: 3a:76:75:55:71:b9:47:77:25:84:c1:08:e3:12:4f:96:f1:47: 5a:9d:7d:4c:e6:dd:5a:e9:62:ad:72:b0:c3:ee:58:e6:df:de: 30:2a:17:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2OEMxMTAvBgNVBAUTKEEyMjg4Rjg5NjRENjE2OUE4Nzk1RjJGNEVGMDVFMEQ1 RTZFMTNCMDkwHhcNMjUxMTAzMDYzNzQ5WhcNMjUxMTEwMDYzNzQ5WjAYMRYwFAYD VQQDEw02OTA4NGRiZC04OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AJm9/bmKhKy4gnVdHWO4ALVTVgx1Up/rF6MmfFrSju8t5Rt1hPaBSdgQs6e B1zxsd5uFkHwT+wyjx+v4/KOW0xnnZa855HGFLWd3jlIgrYx7ta4p1Oybtrixw3X c8cClGxX2oGlBzJ8WmjMjHl2muxy6KKNx3fkClpo/A5jKHPWSaDbx/+Pg6/z5Edj c+VRrOZvr+fCJtQvgCbuSkiSWyXB9Bz3pEzVf9EzwSuIGMhTerd9xkeNa+MPACih kaCy5m7Mkf6y8GWrGJtdVI7P6eZaDaN2uXaYoEwj2EFTTrGyBu0ZEAq62c+62i8W /5QGIhEiTiS2b1RKP7uEL0qTFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2oiLhI Iya5RfPB3JqK4AnI+5dKMB8GA1UdIwQYMBaAFKIoj4lk1haah5Xy9O8F4NXm4TsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY4Qy8xN0QxMDNBOEVB QjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0ZwcUhsZkwwN3dYZzFlYmhP d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY4Qy8xN0QxMDNBOEVBQjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0Zw cUhsZkwwN3dYZzFlYmhPd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqtVDsTsOg8mhCJfOvVcDaIs8FikLAPcm1QrlAZRwsS5d6Z8rB9ACf yW+i8jCNLdyjFCqe7ibE2b3ye8bCwzdzgNmAZXrkcRAnOp2LaEfCe0XhoUzEbUWP wmPfZbrxNaMZvD5EUvHxR8bvikcSHy7uSS1ZbRmGlSJ5n1BRFBXDzu7hksr5A+i+ GihUhp4ih7Kvf6dUOQccGS4ulyBaMz1/EyOkaB6RZ7Wg1saldY85GIdnJ8bt8YkV 9GAkYFaZQ3um0qWQlBYgPCSzt0NVrW2wfiLpgHIICMI6dnVVcblHdyWEwQjjEk+W 8UdanX1M5t1a6WKtcrDD7ljm394wKhcx -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client