$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft File: OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json) Hash identifier: lRx+sge13Rtgfy+WoCXHd4fTOuSLB+XMkLY/SjEc7uI= Subject key identifier: 70:F6:3B:CC:E0:A8:9D:AF:B6:25:01:7C:A7:71:C7:80:2A:61:A8:35 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 17E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft Manifest number: 17DA Signing time: Sun 02 Nov 2025 16:33:39 +0000 Manifest this update: Sun 02 Nov 2025 16:33:39 +0000 Manifest next update: Sun 09 Nov 2025 16:33:39 +0000 Files and hashes: 1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: IV7QRfp8OvAiSNG8rVqDfIbrbNyIKTIOQtr7riAUimI=) 2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: NYe/OwRHgWBG4n1tEVTichlRmY2tFDrc7PdcIFXXIB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6115 (0x17e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Nov 2 16:33:39 2025 GMT Not After : Nov 9 16:33:39 2025 GMT Subject: CN=690787e3-e804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:59:64:0e:a8:db:1f:c0:83:9d:28:71:9b: fb:5d:8e:0d:46:10:53:a6:ad:6f:47:28:11:cd:d7: 54:cf:49:c5:ee:47:57:02:24:90:90:8b:c0:16:89: 40:ab:9d:1c:a4:24:82:56:c5:ae:b3:6d:2c:2d:67: 0b:50:aa:18:3a:4f:1f:f7:76:01:f5:09:aa:cf:88: 95:79:78:26:72:a6:9f:35:35:42:e1:c4:24:d7:4d: 72:53:65:aa:7b:bc:44:69:e6:99:00:32:01:0e:67: f1:e5:dc:85:84:d2:54:1b:14:fb:38:fc:08:92:4e: 7a:25:9b:57:0a:51:f3:19:e7:9d:c0:46:8b:f3:1f: ed:8b:3c:96:ca:24:36:20:4e:16:bf:05:f2:c0:54: f5:2b:40:2f:27:d6:23:c2:8d:b7:d4:a7:3e:d0:49: 1d:14:f2:c5:6e:94:31:95:37:73:40:73:4b:e8:29: eb:8a:fb:3e:87:96:73:01:1e:e7:c5:ca:ed:af:bf: 60:6b:f3:45:03:f2:18:dc:80:27:a2:91:b0:2f:15: 57:60:b8:1c:ec:a7:ec:66:95:9c:e8:bd:e2:f8:8f: d4:3c:b2:53:38:38:db:f4:53:ab:9b:99:6c:4f:02: ed:e0:27:f1:e1:f6:d8:78:b8:a4:e3:3c:a3:04:7a: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:3B:CC:E0:A8:9D:AF:B6:25:01:7C:A7:71:C7:80:2A:61:A8:35 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:26:0c:68:6b:5c:c7:4a:22:59:fc:6e:1a:77:d6:2e:c7: 9c:d3:ed:7b:d3:4a:8a:0c:f7:ce:19:1f:fa:83:7d:6a:76:56: 05:9a:c6:2e:78:cc:ac:d7:d4:f9:cd:f3:f6:4f:28:b2:b9:7a: 21:26:07:9a:c8:6f:20:a9:01:9f:4d:a5:4d:ef:72:fb:b5:ca: 26:5b:5a:6b:67:66:45:4e:36:e4:46:9c:f1:32:00:2a:99:5c: 3f:51:58:cf:32:d3:32:45:f7:cd:ea:14:ac:5a:cc:de:fd:1e: 26:cc:d3:c6:25:9f:7c:ae:1d:da:70:91:fc:cc:4b:fe:31:82: 96:b7:18:bf:e2:58:3f:a1:17:3c:66:4a:8a:ee:70:db:39:f0: 05:5b:1d:5e:1f:62:12:c8:e5:df:46:4a:28:01:49:c2:90:7d: d5:ba:32:eb:69:b4:45:51:65:6d:cd:bf:6c:41:df:e1:59:a2: 00:81:1a:c0:fb:1d:2f:50:78:90:83:ec:42:56:22:9d:4a:46: 13:01:39:8d:af:c1:48:0a:52:6e:86:77:96:45:43:22:10:12: c2:3a:c5:e5:8a:6e:e8:69:57:22:d4:6c:1c:26:e0:ad:e0:22: 52:2f:43:96:a6:da:23:5d:52:8c:d7:a5:30:a1:2d:c8:90:cf: 3d:05:53:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjUxMTAyMTYzMzM5WhcNMjUxMTA5MTYzMzM5WjAYMRYwFAYD VQQDEw02OTA3ODdlMy1lODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TlZZA6o2x/Ag50ocZv7XY4NRhBTpq1vRygRzddUz0nF7kdXAiSQkIvAFolA q50cpCSCVsWus20sLWcLUKoYOk8f93YB9Qmqz4iVeXgmcqafNTVC4cQk101yU2Wq e7xEaeaZADIBDmfx5dyFhNJUGxT7OPwIkk56JZtXClHzGeedwEaL8x/tizyWyiQ2 IE4WvwXywFT1K0AvJ9Yjwo231Kc+0EkdFPLFbpQxlTdzQHNL6Cnrivs+h5ZzAR7n xcrtr79ga/NFA/IY3IAnopGwLxVXYLgc7KfsZpWc6L3i+I/UPLJTODjb9FOrm5ls TwLt4Cfx4fbYeLik4zyjBHoaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD2O8zg qJ2vtiUBfKdxx4AqYag1MB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdOyYMaGtcx0oiWfxuGnfWLsec0+1700qKDPfOGR/6g31qdlYFmsYu eMys19T5zfP2TyiyuXohJgeayG8gqQGfTaVN73L7tcomW1prZ2ZFTjbkRpzxMgAq mVw/UVjPMtMyRffN6hSsWsze/R4mzNPGJZ98rh3acJH8zEv+MYKWtxi/4lg/oRc8 ZkqK7nDbOfAFWx1eH2ISyOXfRkooAUnCkH3VujLrabRFUWVtzb9sQd/hWaIAgRrA +x0vUHiQg+xCViKdSkYTATmNr8FIClJuhneWRUMiEBLCOsXlim7oaVci1GwcJuCt 4CJSL0OWptojXVKM16UwoS3IkM89BVNL -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:55 2025 by rpki-client