$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: qY5bFVj39Bo8q/0vjz9JO6s+c9z1DWn1ibxKh6re0eQ= Subject key identifier: 5B:BC:68:31:19:C8:45:6B:D2:98:89:29:93:1B:88:68:A4:D4:B0:5A Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 098D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 20ED Signing time: Tue 04 Nov 2025 16:41:34 +0000 Manifest this update: Tue 04 Nov 2025 16:41:34 +0000 Manifest next update: Tue 11 Nov 2025 16:41:34 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: 4PMEYxJ1Zn89RuI7pU732A/tyIEClcVUh0xRMtHa4Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2445 (0x98d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: Nov 4 16:41:34 2025 GMT Not After : Nov 11 16:41:34 2025 GMT Subject: CN=690a2cbe-dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:2c:cc:ed:00:77:83:e2:49:ee:86:ec:fa: 70:7f:77:c4:6e:61:8e:bd:fe:ad:39:28:99:6b:24: bd:3d:91:10:35:4d:0b:8f:6a:ec:33:b0:8c:e1:08: c3:de:3a:90:ef:17:2b:04:af:33:1c:ea:b7:84:1b: 8e:63:6c:b1:f5:6b:10:06:37:09:ec:03:73:90:cf: 7f:dc:c4:88:1d:b6:5b:20:6f:89:c8:e5:61:2e:8f: 91:16:d4:d2:28:48:72:09:48:f2:cd:fa:b4:4a:68: 0c:86:b3:4a:42:1c:c9:b9:b2:32:52:34:ca:d5:8f: 8e:c1:42:4f:33:d5:06:8d:25:0d:db:fd:f1:94:06: 38:ec:26:4f:69:98:f5:0c:9e:f9:44:b2:98:86:e5: ee:8d:0e:ab:32:74:49:d2:a8:f9:d4:d2:4b:51:8d: 76:6c:b7:ba:4b:3e:1b:46:b3:09:8f:6e:17:02:12: f3:4e:29:90:58:00:ca:24:b7:af:6f:3e:14:ae:7a: c4:8a:1d:90:18:a1:95:de:b8:d0:68:b9:e4:7e:e7: 0e:8b:76:5a:6b:7d:24:a1:ca:49:a5:35:82:5a:9a: 4a:ea:d0:f0:aa:f0:25:1b:14:6e:a2:58:f0:f8:9d: 45:9e:89:48:00:93:42:81:95:11:19:57:d7:ab:0d: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:68:31:19:C8:45:6B:D2:98:89:29:93:1B:88:68:A4:D4:B0:5A X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:28:d4:8d:c6:4a:88:1d:03:1d:9f:d7:18:88:74:3e:b6: 85:f3:c6:df:3a:df:75:e1:cc:61:c8:9d:cd:60:f0:fe:58:bc: 1d:a3:c0:5e:53:6c:0f:a0:dc:a5:15:18:e9:11:96:4a:00:28: e9:a4:ce:6d:ee:46:1f:b3:7e:26:34:0d:8b:c7:13:ae:83:d7: ef:7a:dc:5b:5c:5a:a3:b7:72:8b:ba:b4:8a:de:a1:23:a3:35: 27:07:2e:ba:bb:ce:30:a5:c8:b6:05:c8:f5:fb:67:25:6f:83: 55:b3:05:31:8b:68:ac:fb:a7:78:89:d1:e6:ab:24:94:28:39: 70:01:2c:71:af:da:dd:1a:80:fb:78:1c:fd:17:2d:9b:de:82: 80:ad:7e:b3:f4:8c:b9:17:aa:db:7c:5d:c3:b3:f3:b2:33:96: a5:05:a5:2a:ab:7f:f0:62:50:62:59:51:06:91:3e:24:a2:a6: f3:32:d6:9e:74:dd:45:9c:42:d2:f5:e6:41:90:00:d2:e8:e8: 04:f1:c1:9d:51:98:e5:ce:cf:42:a6:19:e7:05:30:93:e5:33: 76:7f:ed:39:58:3e:5c:bb:ae:cc:9c:ca:16:eb:65:31:90:66: 4c:0a:cd:af:93:07:f6:82:25:45:ef:fe:36:a8:d9:6f:b7:36: 6c:45:18:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjUxMTA0MTY0MTM0WhcNMjUxMTExMTY0MTM0WjAYMRYwFAYD VQQDEw02OTBhMmNiZS1kYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUUszO0Ad4PiSe6G7Ppwf3fEbmGOvf6tOSiZayS9PZEQNU0Lj2rsM7CM4QjD 3jqQ7xcrBK8zHOq3hBuOY2yx9WsQBjcJ7ANzkM9/3MSIHbZbIG+JyOVhLo+RFtTS KEhyCUjyzfq0SmgMhrNKQhzJubIyUjTK1Y+OwUJPM9UGjSUN2/3xlAY47CZPaZj1 DJ75RLKYhuXujQ6rMnRJ0qj51NJLUY12bLe6Sz4bRrMJj24XAhLzTimQWADKJLev bz4UrnrEih2QGKGV3rjQaLnkfucOi3Zaa30kocpJpTWCWppK6tDwqvAlGxRuoljw +J1FnolIAJNCgZURGVfXqw2wxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu8aDEZ yEVr0piJKZMbiGik1LBaMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFWCjUjcZKiB0DHZ/XGIh0PraF88bfOt914cxhyJ3NYPD+WLwdo8Be U2wPoNylFRjpEZZKACjppM5t7kYfs34mNA2LxxOug9fvetxbXFqjt3KLurSK3qEj ozUnBy66u84wpci2Bcj1+2clb4NVswUxi2is+6d4idHmqySUKDlwASxxr9rdGoD7 eBz9Fy2b3oKArX6z9Iy5F6rbfF3Ds/OyM5alBaUqq3/wYlBiWVEGkT4koqbzMtae dN1FnELS9eZBkADS6OgE8cGdUZjlzs9CphnnBTCT5TN2f+05WD5cu67MnMoW62Ux kGZMCs2vkwf2giVF7/42qNlvtzZsRRgs -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:45 2025 by rpki-client