$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json) Hash identifier: Z/Sktw2wgG8bZ+lvU+pFZ1pmz6bg/zFLYZJwgvkodfM= Subject key identifier: D6:17:04:55:6B:42:A5:11:4B:FF:C2:2D:B8:A1:AD:EA:62:29:37:37 Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Certificate serial: 0F2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft Manifest number: 0DD4 Signing time: Tue 04 Nov 2025 19:02:53 +0000 Manifest this update: Tue 04 Nov 2025 19:02:53 +0000 Manifest next update: Tue 11 Nov 2025 19:02:53 +0000 Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: 1JgcEk1oUh/5N1X/APoBC8pLaXJEpW9yaUi83NaQIj0=) 2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: 9lYaQfvs3YCdH2SxOc1bcfID6AuBrqgeKUgHbxfb/rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Validity Not Before: Nov 4 19:02:53 2025 GMT Not After : Nov 11 19:02:53 2025 GMT Subject: CN=690a4ddd-26f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:54:de:3a:2a:17:1f:be:96:9a:b1:5a:97: 78:b5:4e:08:51:07:68:64:a2:39:5c:26:01:38:e2: 9d:ae:89:39:6c:22:48:41:0b:d1:f4:0d:20:43:c6: 98:f4:2c:49:9c:a8:3a:09:34:4a:f7:16:06:54:43: e3:17:ac:f8:e3:f3:73:bc:2c:0b:f4:b2:4b:53:30: c8:48:b2:ce:7b:21:4e:9b:fc:4e:f2:64:f4:b9:62: 0d:fb:87:06:2d:90:7b:47:cb:17:15:d4:30:0e:bd: b3:b1:94:7a:5f:3f:0b:f1:2e:e0:6d:0d:5d:94:07: eb:4a:9f:b9:03:2e:16:a1:6c:14:90:8a:bb:10:47: 4d:ad:7f:d4:60:86:8b:0f:7d:ad:67:45:3a:1c:9b: 4f:2c:db:72:30:20:3e:e8:90:e3:c9:fd:30:ad:35: ca:94:25:c5:cb:db:f1:e0:ac:b5:58:19:7c:b3:5d: 7a:fc:3c:81:ba:1b:c0:d8:e4:db:07:93:94:4e:74: a8:5b:6c:94:f0:9a:0d:6e:e3:03:69:64:67:32:a7: 70:c5:4c:08:3c:53:54:10:ed:ac:07:ba:e5:f0:6f: 03:5c:9e:0b:30:7f:03:70:a4:55:24:a3:66:2f:d5: 70:47:28:cb:c9:9d:88:d3:40:ec:57:73:52:b6:5f: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:17:04:55:6B:42:A5:11:4B:FF:C2:2D:B8:A1:AD:EA:62:29:37:37 X509v3 Authority Key Identifier: keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:cb:e1:31:d3:81:73:52:55:ce:98:23:4d:42:0d:2d:05: 31:f8:49:1f:15:a5:f4:9d:0e:87:fa:c2:13:d7:0e:76:fd:6b: c7:ca:12:86:ac:af:a6:82:7c:4a:34:85:4f:90:64:d2:1c:e8: d2:b3:53:5a:bb:5d:e3:d1:e1:aa:1d:22:27:04:35:af:3e:d0: 5f:4b:e3:53:1d:dd:7c:a8:57:ca:1b:12:3a:fa:bb:8c:db:0c: 42:cc:b2:ec:47:93:27:94:da:58:2d:d3:9e:d9:34:a5:a0:27: 43:14:10:b7:49:3b:81:08:9f:d8:20:86:2e:1e:c0:35:20:93: b7:78:68:6a:bd:ae:c4:50:d5:be:ba:1c:2d:71:ea:30:1e:d9: 58:70:73:b0:4f:94:c5:8f:c0:2c:2c:a1:63:a4:fb:ca:75:54: b5:12:88:9a:27:a3:59:17:53:82:d7:b6:a4:e3:0b:1b:58:34: 39:50:ee:ea:2d:0b:1a:97:cf:a6:0e:40:bd:e3:e9:10:c8:90: 11:d3:5f:2f:44:26:66:41:4d:63:72:9e:85:61:2e:6e:5c:cd: 05:ae:20:64:b7:d4:8d:be:6b:18:8c:6b:e5:68:9f:d0:10:0e: e4:11:aa:ae:b6:83:17:ab:e9:c0:93:02:ab:ec:7a:a8:fe:fa: fa:81:aa:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKDc0RTVCQjlCNkQzQ0M3RjhDMjlBODNCREM4NDkyQjk2 NTlGMEVFMTcwHhcNMjUxMTA0MTkwMjUzWhcNMjUxMTExMTkwMjUzWjAYMRYwFAYD VQQDEw02OTBhNGRkZC0yNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwdU3joqFx++lpqxWpd4tU4IUQdoZKI5XCYBOOKdrok5bCJIQQvR9A0gQ8aY 9CxJnKg6CTRK9xYGVEPjF6z44/NzvCwL9LJLUzDISLLOeyFOm/xO8mT0uWIN+4cG LZB7R8sXFdQwDr2zsZR6Xz8L8S7gbQ1dlAfrSp+5Ay4WoWwUkIq7EEdNrX/UYIaL D32tZ0U6HJtPLNtyMCA+6JDjyf0wrTXKlCXFy9vx4Ky1WBl8s116/DyBuhvA2OTb B5OUTnSoW2yU8JoNbuMDaWRnMqdwxUwIPFNUEO2sB7rl8G8DXJ4LMH8DcKRVJKNm L9VwRyjLyZ2I00DsV3NStl8BCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYXBFVr QqURS//CLbihrepiKTc3MB8GA1UdIwQYMBaAFHTlu5ttPMf4wpqDvchJK5ZZ8O4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9EOTY0QjQ4MjMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhfakNtb085eUVrcmxsbnc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RPVzdtMjA4eF9qQ21vTzl5RWtybGxudzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9EOTY0QjQ4MjMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhf akNtb085eUVrcmxsbnc3aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TcvhMdOBc1JVzpgjTUINLQUx+EkfFaX0nQ6H+sIT1w52/WvHyhKG rK+mgnxKNIVPkGTSHOjSs1Nau13j0eGqHSInBDWvPtBfS+NTHd18qFfKGxI6+ruM 2wxCzLLsR5MnlNpYLdOe2TSloCdDFBC3STuBCJ/YIIYuHsA1IJO3eGhqva7EUNW+ uhwtceowHtlYcHOwT5TFj8AsLKFjpPvKdVS1EoiaJ6NZF1OC17ak4wsbWDQ5UO7q LQsal8+mDkC94+kQyJAR018vRCZmQU1jcp6FYS5uXM0FriBkt9SNvmsYjGvlaJ/Q EA7kEaqutoMXq+nAkwKr7Hqo/vr6gaq6 -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:53 2025 by rpki-client