$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: Hddi8fJUNM2aMznWumiUnhYHaGWqFZdxAmMEnJNYwco= Subject key identifier: 6E:FC:20:5C:F4:DE:4D:41:AD:2B:F1:4E:24:22:7D:82:B0:EA:C8:C6 Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: 44 Signing time: Wed 05 Nov 2025 07:36:28 +0000 Manifest this update: Wed 05 Nov 2025 07:36:28 +0000 Manifest next update: Wed 12 Nov 2025 07:36:28 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: Av58zUzyfxbPhdCcaSO1BArDhnmxidnsfNy3ELldZ6M=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: mdIvnywtfDJvKSbbhgc4qSg7/SJGPr319lK/wnjqr9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: Nov 5 07:36:28 2025 GMT Not After : Nov 12 07:36:28 2025 GMT Subject: CN=690afe7c-fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:3a:0e:3d:6b:7b:8e:c4:5e:32:aa:17:3e: df:ba:c1:20:d3:f7:17:27:77:db:ed:17:08:f4:17: 3f:28:3c:f2:df:cf:69:51:f4:b3:23:22:a7:00:57: 9d:3a:51:7b:3d:81:dd:95:f0:66:f9:22:c2:73:98: e5:01:5e:32:75:d9:a6:1a:28:6c:d9:22:e1:19:25: b3:54:64:c9:cb:bc:c3:34:3d:ab:f9:fe:fc:bf:60: 90:7f:7d:3c:bc:d1:6f:24:57:1e:60:31:4f:88:79: df:99:77:8e:57:04:5e:58:56:a7:2e:81:0d:b9:62: b0:35:8e:64:d0:5a:0b:f6:32:11:80:62:ce:ee:ce: 67:5d:09:ee:2e:b8:c2:16:11:37:b1:20:c9:37:fb: 6d:da:5a:91:32:79:46:f9:65:90:59:8e:17:eb:27: b2:df:75:55:be:cd:5a:ab:9f:bf:d1:40:7b:0f:62: f5:a9:0d:59:64:97:a9:ba:8c:a5:b9:e0:1e:ae:a5: 2a:77:b6:f4:41:84:96:7d:d4:77:b5:ca:cf:9c:f0: 5a:b9:84:ee:a1:12:3a:27:a3:ca:b3:57:0f:ff:52: 80:49:af:41:70:5d:ec:e9:6f:55:92:6d:16:f5:5b: c9:8c:e3:7e:b9:4c:aa:8f:63:e6:d1:9d:43:38:1d: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FC:20:5C:F4:DE:4D:41:AD:2B:F1:4E:24:22:7D:82:B0:EA:C8:C6 X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:16:7e:95:92:f2:08:79:53:38:13:a7:0f:34:e5:ef:52:94: 69:06:b8:1a:ef:00:a6:47:70:cc:28:60:80:b9:c5:40:ca:38: b4:ed:68:33:dc:03:81:02:d3:67:89:85:9f:5e:50:ef:9f:13: cc:08:a4:8c:3d:c6:a6:1b:37:6e:a3:d0:31:6c:a8:c7:21:b6: f7:16:ca:43:27:30:66:0b:f6:f4:ca:54:13:4e:69:b8:43:61: 90:ee:35:43:31:fa:11:b6:5d:c3:65:3c:9d:b6:84:77:9e:99: c3:aa:88:ec:29:d6:a7:b1:23:4b:fb:9f:cb:45:46:4c:f7:c7: 8f:5c:ce:bc:bb:5d:f9:86:6d:4c:6e:10:8b:68:29:2b:62:23: 5e:b8:b3:db:40:df:81:7a:4e:a8:e2:02:35:8b:09:78:d6:70: f7:bd:95:1a:49:e9:29:5e:ca:29:b0:96:24:8b:f9:c6:6e:43: a3:df:1f:ed:a0:ff:7c:ff:96:50:84:db:43:16:ac:3a:a4:86: 6b:d8:43:60:6e:ec:cc:e1:de:e7:d0:55:62:6c:e2:64:67:9c: 30:d4:b2:61:6c:aa:2b:6e:c1:83:0b:31:d2:b0:93:4d:0e:71: 91:e1:9c:58:5a:3e:5a:23:5f:39:11:2d:dd:bf:ab:9b:fb:23: 4a:e0:2b:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODdDMTExMC8GA1UEBRMoQTJCOUZGRUQ0NzBDNUI3MUM1MkYzQjY0QjNCNkVEQTQx OUJFMTNCMzAeFw0yNTExMDUwNzM2MjhaFw0yNTExMTIwNzM2MjhaMBgxFjAUBgNV BAMTDTY5MGFmZTdjLWZiYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaXzoOPWt7jsReMqoXPt+6wSDT9xcnd9vtFwj0Fz8oPPLfz2lR9LMjIqcAV506 UXs9gd2V8Gb5IsJzmOUBXjJ12aYaKGzZIuEZJbNUZMnLvMM0Pav5/vy/YJB/fTy8 0W8kVx5gMU+Ied+Zd45XBF5YVqcugQ25YrA1jmTQWgv2MhGAYs7uzmddCe4uuMIW ETexIMk3+23aWpEyeUb5ZZBZjhfrJ7LfdVW+zVqrn7/RQHsPYvWpDVlkl6m6jKW5 4B6upSp3tvRBhJZ91He1ys+c8Fq5hO6hEjono8qzVw//UoBJr0FwXezpb1WSbRb1 W8mM4365TKqPY+bRnUM4HQMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbvwgXPTe TUGtK/FOJCJ9grDqyMYwHwYDVR0jBBgwFoAUorn/7UcMW3HFLztks7btpBm+E7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0MxLzI2MzFDOEI0NTcw QTExRjBCNTM4Q0Y2NUM0RjlBRTAyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb3JuXzdVY01XM0hGTHp0a3M3YnRwQm0tRTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 N0MxLzI2MzFDOEI0NTcwQTExRjBCNTM4Q0Y2NUM0RjlBRTAyL29ybl83VWNNVzNI Rkx6dGtzN2J0cEJtLUU3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIWfpWS8gh5UzgTpw805e9SlGkGuBrvAKZHcMwoYIC5xUDKOLTtaDPc A4EC02eJhZ9eUO+fE8wIpIw9xqYbN26j0DFsqMchtvcWykMnMGYL9vTKVBNOabhD YZDuNUMx+hG2XcNlPJ22hHeemcOqiOwp1qexI0v7n8tFRkz3x49czry7XfmGbUxu EItoKStiI164s9tA34F6TqjiAjWLCXjWcPe9lRpJ6SleyimwliSL+cZuQ6PfH+2g /3z/llCE20MWrDqkhmvYQ2Bu7Mzh3ufQVWJs4mRnnDDUsmFsqituwYMLMdKwk00O cZHhnFhaPlojXzkRLd2/q5v7I0rgKy0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:00 2025 by rpki-client