$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json) Hash identifier: ytr+1Y+Jpgiu7IBfl0BaWX6XmC+CSJxY5/5dMwKivoY= Subject key identifier: E0:95:5A:25:EC:52:AA:05:73:B6:FE:AD:14:46:77:B1:22:2A:E1:72 Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft Manifest number: 07A4 Signing time: Tue 04 Nov 2025 21:34:56 +0000 Manifest this update: Tue 04 Nov 2025 21:34:55 +0000 Manifest next update: Tue 11 Nov 2025 21:34:55 +0000 Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: zfWE9daO5InDBuysPOj9bpq+WBF7FXxGcnGZ1vafE28=) 2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: VuRfNVBZwbR+ucX5LeWc2BXr4+CtK5OzMpCV0KJbLkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Nov 4 21:34:55 2025 GMT Not After : Nov 11 21:34:55 2025 GMT Subject: CN=690a7180-e63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:9f:02:c4:69:9d:c0:40:3b:56:8c:82:60: 09:c3:ce:19:02:47:e0:74:de:b4:89:06:58:38:e8: 54:a9:e2:09:10:7c:98:87:9d:1d:d8:c7:ac:13:b2: 4c:d4:64:95:d7:f7:80:56:f6:77:ed:9d:5e:7c:dc: 29:e2:f9:0a:0a:a2:f9:4b:2a:b1:f8:5b:dd:2c:62: fe:8b:5d:af:d0:9c:ec:be:8d:81:6a:22:4c:67:d7: b2:b2:3f:06:72:04:55:55:11:60:24:6a:c3:2f:e4: 4b:aa:f5:f7:cc:56:99:30:d0:87:3e:02:d7:ba:a6: 75:13:8f:bb:ab:d9:df:6e:94:b9:ad:75:d7:72:45: be:95:71:7a:a9:bd:b8:da:47:93:a7:c5:ef:4d:47: 54:16:04:62:62:f8:cd:9a:a6:28:f5:1c:3c:c4:41: e2:a5:0f:fc:71:00:fa:5e:c1:7b:b7:43:08:9e:5c: 48:e4:a2:76:0b:da:d5:05:f2:e0:0a:fa:9c:78:b5: e6:8d:65:d6:fe:e0:16:92:43:4b:32:b3:b0:6b:09: b6:f0:bf:11:3d:2e:22:2c:cf:bf:1c:60:41:74:24: a8:e2:d4:76:f5:ff:da:3c:bd:86:d2:20:3d:13:86: af:b4:6b:11:da:ec:45:a3:c7:a8:d0:53:ba:54:10: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:95:5A:25:EC:52:AA:05:73:B6:FE:AD:14:46:77:B1:22:2A:E1:72 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:1d:0b:52:4e:de:a5:0b:7d:c1:f0:7f:9b:58:42:c0:4f: 24:68:92:59:88:72:32:a9:d4:50:cb:ab:15:b4:16:32:1c:1e: 76:a0:4e:e8:66:b5:bd:06:f9:2e:55:51:54:98:cf:5e:62:65: 45:9b:75:05:3e:36:6b:b8:39:74:2d:b5:e3:80:e7:d2:dd:18: 7c:0e:a4:b0:9a:bd:05:91:93:4f:0a:a5:f2:bf:7d:be:34:0a: 12:f9:52:cf:c1:e4:37:2a:ad:40:84:d4:7a:ea:68:bd:e7:a1: 6a:5a:6a:43:6c:0e:dc:4b:6b:d6:90:06:40:11:5a:2c:13:fe: a6:93:50:11:fc:60:71:07:ea:5c:43:da:e5:ad:7f:e5:9e:4e: e9:57:1d:5e:58:a7:8b:99:2d:94:b3:de:d7:d6:26:0c:1e:63: 35:d6:a4:38:8f:30:f6:f8:56:8b:8e:56:e9:52:3b:a9:4f:de: 6f:f9:13:81:d7:ef:de:a3:5a:22:81:19:e4:8a:fb:63:c4:4d: 10:60:d1:b9:74:12:6c:79:51:1d:d2:7f:f8:f5:0d:bc:4b:a4: dd:13:20:35:df:b6:fc:e4:01:18:33:76:7a:b0:1a:31:ba:12: f3:c4:df:4c:9b:8d:40:69:33:1d:e9:26:47:01:67:d8:c7:ea: ab:91:68:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUxMTA0MjEzNDU1WhcNMjUxMTExMjEzNDU1WjAYMRYwFAYD VQQDEw02OTBhNzE4MC1lNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY6fAsRpncBAO1aMgmAJw84ZAkfgdN60iQZYOOhUqeIJEHyYh50d2MesE7JM 1GSV1/eAVvZ37Z1efNwp4vkKCqL5Syqx+FvdLGL+i12v0Jzsvo2BaiJMZ9eysj8G cgRVVRFgJGrDL+RLqvX3zFaZMNCHPgLXuqZ1E4+7q9nfbpS5rXXXckW+lXF6qb24 2keTp8XvTUdUFgRiYvjNmqYo9Rw8xEHipQ/8cQD6XsF7t0MInlxI5KJ2C9rVBfLg CvqceLXmjWXW/uAWkkNLMrOwawm28L8RPS4iLM+/HGBBdCSo4tR29f/aPL2G0iA9 E4avtGsR2uxFo8eo0FO6VBAIVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCVWiXs UqoFc7b+rRRGd7EiKuFyMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTE4RC83QTEyNjk3RTJBRTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kw b2tmSWFILWhLT1UwN0lSQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5gB0LUk7epQt9wfB/m1hCwE8kaJJZiHIyqdRQy6sVtBYyHB52oE7o ZrW9BvkuVVFUmM9eYmVFm3UFPjZruDl0LbXjgOfS3Rh8DqSwmr0FkZNPCqXyv32+ NAoS+VLPweQ3Kq1AhNR66mi956FqWmpDbA7cS2vWkAZAEVosE/6mk1AR/GBxB+pc Q9rlrX/lnk7pVx1eWKeLmS2Us97X1iYMHmM11qQ4jzD2+FaLjlbpUjupT95v+ROB 1+/eo1oigRnkivtjxE0QYNG5dBJseVEd0n/49Q28S6TdEyA137b85AEYM3Z6sBox uhLzxN9Mm41AaTMd6SZHAWfYx+qrkWiZ -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:20 2025 by rpki-client