$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: kPpSqLxVM3DtkT7W+ZQ7RvOUPV60Aurx4efywJUYX5w= Subject key identifier: 90:B4:3D:1C:F1:A4:34:34:87:ED:A2:93:3F:E7:A5:C5:C4:AD:18:0D Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: 01F1 Signing time: Wed 05 Nov 2025 02:38:12 +0000 Manifest this update: Wed 05 Nov 2025 02:38:12 +0000 Manifest next update: Wed 12 Nov 2025 02:38:12 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: iHLRrzQ0ekhfhFmB2ZtxNQfApU7fFrS3ExOpWeuc2aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: Nov 5 02:38:12 2025 GMT Not After : Nov 12 02:38:12 2025 GMT Subject: CN=690ab894-cfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:1c:1e:6d:dc:0c:93:c8:17:34:6d:d4:98: d4:c3:e5:62:69:57:ea:56:02:fc:bd:97:08:4b:e5: e6:b3:20:a0:ea:c0:f1:61:fe:8e:0f:12:de:e2:ee: 01:b6:dc:6c:73:8a:0a:98:a7:1d:dc:3a:5f:94:77: a5:2f:76:64:37:21:c9:f4:5e:a2:7c:67:f0:e1:90: 01:77:14:51:f0:db:69:8b:72:d2:c9:66:a0:02:81: e1:e2:16:0e:f3:95:fa:7a:c5:e2:5c:4d:4a:25:c1: 1b:59:8f:81:98:e2:de:46:72:3b:47:c8:96:6b:c7: a3:f1:0f:fd:7b:d0:b9:b3:3c:e6:b0:8b:42:9d:ee: 5a:c4:9a:48:51:c3:df:51:fd:8f:1b:c9:e7:c1:22: 17:a6:d7:6e:15:eb:c5:0d:e0:ea:58:77:95:e2:ec: 72:ef:2c:8a:1c:3f:94:36:27:fd:be:bd:74:a0:8b: 22:b6:22:29:b2:33:34:8f:25:68:7b:bc:6d:87:03: 3d:ff:d8:17:e4:ab:ea:d5:58:0b:ff:e8:41:c2:fc: b3:d7:12:ec:93:19:60:0f:ed:36:35:7d:4f:a3:f6: 4c:3d:25:fe:51:a3:8b:6c:8e:4d:a6:5e:d3:88:61: 05:ef:ad:12:b2:3c:04:a4:ff:bd:e7:6d:38:52:92: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B4:3D:1C:F1:A4:34:34:87:ED:A2:93:3F:E7:A5:C5:C4:AD:18:0D X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:0f:0e:4c:81:59:e1:41:81:8d:e6:45:88:df:15:35:61: 71:2a:8e:b8:e4:d5:97:4b:4f:c1:19:d7:f1:db:24:cc:9a:e3: 92:d8:ab:55:a1:fb:81:01:91:6f:f4:26:13:e4:9a:a8:5d:6c: 20:dc:20:b9:8d:69:7f:e1:ae:3e:68:66:19:a7:b2:26:4b:60: 58:b5:85:4f:ac:ae:50:a7:6b:d2:c9:f2:c5:90:40:4e:f8:50: db:70:fb:98:8b:71:81:60:7d:9f:30:2f:b0:bc:8d:aa:de:6b: 52:99:05:d4:20:00:68:9c:c9:a3:60:d6:02:55:b5:5d:a4:c8: eb:03:ca:22:d1:71:f0:90:0d:a3:3b:2e:63:b2:94:3b:f1:5a: c1:ba:a4:ca:53:7f:be:7b:b9:51:5f:cc:d9:a6:fe:db:7e:33: a9:5f:b8:31:9a:46:bf:a7:0e:e5:bb:d5:1a:09:93:94:3f:5e: 27:50:82:0a:c8:bc:bb:41:5d:a5:06:5c:09:4e:26:a2:13:4b: d2:d7:68:94:7a:1a:c5:95:fc:df:06:cc:44:d6:e5:93:9c:5b: 0e:b3:b1:22:e4:3e:37:66:81:10:42:81:c3:72:27:c9:23:10: 9c:9c:cc:30:d2:a6:63:65:28:1c:bc:4b:6c:3b:db:9d:13:39: cc:c0:d2:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjUxMTA1MDIzODEyWhcNMjUxMTEyMDIzODEyWjAYMRYwFAYD VQQDEw02OTBhYjg5NC1jZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMIcHm3cDJPIFzRt1JjUw+ViaVfqVgL8vZcIS+XmsyCg6sDxYf6ODxLe4u4B ttxsc4oKmKcd3DpflHelL3ZkNyHJ9F6ifGfw4ZABdxRR8Ntpi3LSyWagAoHh4hYO 85X6esXiXE1KJcEbWY+BmOLeRnI7R8iWa8ej8Q/9e9C5szzmsItCne5axJpIUcPf Uf2PG8nnwSIXptduFevFDeDqWHeV4uxy7yyKHD+UNif9vr10oIsitiIpsjM0jyVo e7xthwM9/9gX5Kvq1VgL/+hBwvyz1xLskxlgD+02NX1Po/ZMPSX+UaOLbI5Npl7T iGEF760SsjwEpP+95204UpIXmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC0PRzx pDQ0h+2ikz/npcXErRgNMB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0Q8OTIFZ4UGBjeZFiN8VNWFxKo645NWXS0/BGdfx2yTMmuOS2KtV ofuBAZFv9CYT5JqoXWwg3CC5jWl/4a4+aGYZp7ImS2BYtYVPrK5Qp2vSyfLFkEBO +FDbcPuYi3GBYH2fMC+wvI2q3mtSmQXUIABonMmjYNYCVbVdpMjrA8oi0XHwkA2j Oy5jspQ78VrBuqTKU3++e7lRX8zZpv7bfjOpX7gxmka/pw7lu9UaCZOUP14nUIIK yLy7QV2lBlwJTiaiE0vS12iUehrFlfzfBsxE1uWTnFsOs7Ei5D43ZoEQQoHDcifJ IxCcnMww0qZjZSgcvEtsO9udEznMwNI0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:47 2025 by rpki-client