$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: 80Ew10ME6zw7Va6jF7w1s/QAEeNSDr+bWSvJEX+fHpc= Subject key identifier: F6:07:5A:19:23:43:D7:F1:53:0D:3C:E5:1B:41:5D:76:F6:38:1B:B0 Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 93 Signing time: Mon 03 Nov 2025 06:30:15 +0000 Manifest this update: Mon 03 Nov 2025 06:30:15 +0000 Manifest next update: Mon 10 Nov 2025 06:30:14 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: XK+vzdq/WTBbWb0eR5vqaKeBZ2kw6DYmFrqaHgi6fg0=) 2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: kx9lWNj7NgSUFsuMfRCJDT7t5wBdkdtWpvVdEqQ2TDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Nov 3 06:30:15 2025 GMT Not After : Nov 10 06:30:14 2025 GMT Subject: CN=69084bf7-3f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:91:21:ed:da:46:34:3f:c0:f9:69:f2:37: 19:50:7e:e0:5e:3e:3a:26:3e:04:1a:85:b2:f3:d5: cb:9f:31:7f:10:77:45:9c:77:1c:03:05:53:02:b6: 14:f3:80:22:35:fb:75:a9:ea:2b:59:bd:9b:6b:31: e2:87:8c:8b:a9:81:80:b2:c3:52:d9:93:44:d3:8e: 5b:af:ca:7a:b6:de:6a:e2:dd:b9:12:c1:70:3c:b9: db:10:9e:00:d9:65:ff:4b:a2:82:cd:46:e0:11:97: ff:5f:df:83:d3:65:4d:a4:42:96:03:75:4e:14:9a: ef:e2:81:d2:89:73:af:24:f5:23:e7:7d:7c:62:dc: 34:d5:ed:9c:aa:6b:03:a8:10:4d:9c:9d:5b:e3:d5: 52:4a:da:74:1f:3d:94:f8:45:53:08:0e:9e:0b:43: c5:f3:26:f0:c2:e6:dd:50:d5:57:23:dd:13:6b:84: 68:ea:c6:eb:4d:e2:6d:b2:b8:0a:57:52:34:27:a8: 15:80:5b:91:06:4a:f0:1c:d5:cd:3d:ca:25:f5:d4: c2:9a:6a:81:29:61:af:d7:a7:b9:85:1b:0d:36:0a: 9a:b1:b0:da:29:5c:ab:4b:8e:28:dc:64:7f:41:eb: 46:26:de:e8:09:15:86:11:e3:3a:74:24:14:f9:d2: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:07:5A:19:23:43:D7:F1:53:0D:3C:E5:1B:41:5D:76:F6:38:1B:B0 X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fc:ba:02:cb:a3:06:9b:7d:72:62:f9:32:5f:44:be:b0:b6: 5c:2a:88:e5:12:a8:17:80:c1:3e:8b:54:7b:5a:9a:7f:45:5f: 7b:0a:8a:01:b6:fb:96:67:80:03:cd:d9:14:86:ac:3c:58:96: 40:f1:3e:6b:bf:c1:5a:3b:e1:e9:d0:1f:30:6a:ed:9c:d6:bc: 2a:77:6f:06:75:d5:07:55:e0:e3:a5:01:3f:d6:b0:8d:39:f4: 8d:20:95:30:8e:69:f1:70:40:27:cf:9f:35:f1:29:f4:e6:5f: 24:38:9b:cd:56:e2:d0:db:2a:b9:eb:74:ca:f6:53:55:d1:f5: 2f:d7:79:5d:1b:0b:ee:9e:8f:e7:4d:90:6e:3c:5a:ec:95:ac: 6e:79:62:bb:02:58:6f:e9:dc:c3:e1:ad:f8:40:66:8f:eb:bd: b6:47:2c:12:14:94:7b:4d:84:93:a0:b4:5d:a7:fd:24:81:7a: f5:ca:2f:73:84:cd:e2:fb:56:65:37:34:f1:fb:a5:7a:18:c8: 7b:d4:7c:fd:66:e2:0c:01:7c:e0:fa:9c:91:cd:a6:d8:ea:df: 3b:01:90:9a:cc:ef:ee:f0:38:0d:ce:63:89:0d:e9:7b:1b:fc: 2b:20:4f:8b:56:9f:c8:20:88:ff:53:03:c7:7a:89:b0:b4:d9: 69:4e:8c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQzUxMTAvBgNVBAUTKDNBNUUxMDI5RTY1QzYzNjgxMjMyREI2N0Q4MDUzREQy RjY5NEU2MUYwHhcNMjUxMTAzMDYzMDE1WhcNMjUxMTEwMDYzMDE0WjAYMRYwFAYD VQQDEw02OTA4NGJmNy0zZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGqRIe3aRjQ/wPlp8jcZUH7gXj46Jj4EGoWy89XLnzF/EHdFnHccAwVTArYU 84AiNft1qeorWb2bazHih4yLqYGAssNS2ZNE045br8p6tt5q4t25EsFwPLnbEJ4A 2WX/S6KCzUbgEZf/X9+D02VNpEKWA3VOFJrv4oHSiXOvJPUj5318Ytw01e2cqmsD qBBNnJ1b49VSStp0Hz2U+EVTCA6eC0PF8ybwwubdUNVXI90Ta4Ro6sbrTeJtsrgK V1I0J6gVgFuRBkrwHNXNPcol9dTCmmqBKWGv16e5hRsNNgqasbDaKVyrS44o3GR/ QetGJt7oCRWGEeM6dCQU+dKChwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYHWhkj Q9fxUw085RtBXXb2OBuwMB8GA1UdIwQYMBaAFDpeECnmXGNoEjLbZ9gFPdL2lOYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDNS84MjMzNUEyMEQ5 NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1kyZ1NNdHRuMkFVOTB2YVU1 aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDNS84MjMzNUEyMEQ5NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1ky Z1NNdHRuMkFVOTB2YVU1aDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2/LoCy6MGm31yYvkyX0S+sLZcKojlEqgXgME+i1R7Wpp/RV97CooB tvuWZ4ADzdkUhqw8WJZA8T5rv8FaO+Hp0B8wau2c1rwqd28GddUHVeDjpQE/1rCN OfSNIJUwjmnxcEAnz5818Sn05l8kOJvNVuLQ2yq563TK9lNV0fUv13ldGwvuno/n TZBuPFrslaxueWK7Alhv6dzD4a34QGaP6722RywSFJR7TYSToLRdp/0kgXr1yi9z hM3i+1ZlNzTx+6V6GMh71Hz9ZuIMAXzg+pyRzabY6t87AZCazO/u8DgNzmOJDel7 G/wrIE+LVp/IIIj/UwPHeomwtNlpToz1 -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:47 2025 by rpki-client