$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: 2QD9Xdet3NhqknSJFpREOg7PMm5iqve+wVGVn8gvMGc= Subject key identifier: 99:27:8E:64:97:03:AE:23:61:36:82:6D:73:2C:EB:F3:FB:7F:56:C0 Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 94 Signing time: Wed 05 Nov 2025 06:41:24 +0000 Manifest this update: Wed 05 Nov 2025 06:41:23 +0000 Manifest next update: Wed 12 Nov 2025 06:41:23 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: J6+C25ku/v4m1bv46kJqB0TIuxBklHmnZEG+f6asiwA=) 2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: kx9lWNj7NgSUFsuMfRCJDT7t5wBdkdtWpvVdEqQ2TDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Nov 5 06:41:23 2025 GMT Not After : Nov 12 06:41:23 2025 GMT Subject: CN=690af193-647e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:ca:a6:20:4d:01:52:ca:2a:fd:03:f0:af: bd:fe:a4:4d:c4:4e:72:84:7b:34:d8:89:33:40:83: 6c:36:36:f0:66:d2:34:7b:c9:c0:28:6f:5d:e1:b5: 64:f5:e6:29:12:7d:ef:71:c0:7e:7c:8a:c6:2e:70: ae:a1:a1:fb:26:a9:54:c6:44:23:a1:49:5b:3d:36: 95:5e:66:52:32:e0:6b:fa:ea:06:08:b2:7a:e3:41: 4e:eb:3e:18:a4:e9:7c:dc:74:32:61:bd:41:8c:b8: 77:5f:a2:8e:c9:f6:b4:e1:cf:c2:a7:d0:e0:4e:14: 88:a3:13:8c:e3:3f:2f:13:8c:3b:b0:8b:df:f4:d3: ce:fe:a4:5e:11:a5:3f:40:38:1d:9f:b5:91:ed:d8: b1:ea:04:34:ea:18:04:de:dc:f2:dd:c4:7f:80:f7: 54:8e:cb:dd:11:6b:9e:5f:75:25:3f:28:7d:55:42: f2:5e:27:b3:e5:1a:ee:a0:fb:f3:6b:da:7c:30:2e: 1b:5e:aa:a0:34:4d:f6:96:9d:40:72:2d:39:9e:94: 5c:e0:13:8e:d8:11:b8:46:f1:d9:9d:ca:83:65:ec: 4b:0c:41:9d:6c:b1:bb:f7:6a:e1:14:2a:34:06:30: 28:a1:7a:b8:0e:b3:21:6d:d4:82:09:4a:2c:2e:2a: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:8E:64:97:03:AE:23:61:36:82:6D:73:2C:EB:F3:FB:7F:56:C0 X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:53:fa:2b:dd:5b:94:e3:9d:6e:b9:f1:9d:db:ed:be:d5:d2: 14:c9:a2:fb:96:3f:63:c2:c6:d6:16:50:18:2f:f1:73:53:a2: 21:8a:5d:c8:c0:45:15:a5:40:ee:09:16:13:0b:c4:ee:18:94: 9a:a4:c9:cb:16:81:1b:47:34:af:4b:88:aa:8d:84:07:98:84: 45:9e:a5:76:7b:e5:07:f3:e2:10:94:0e:b8:3e:5b:ea:09:82: ea:14:49:26:f8:ce:78:46:7e:50:c7:33:36:fb:54:81:be:f8: 78:54:9d:aa:11:89:35:fb:4f:46:00:5d:22:13:e4:5c:ca:83: 13:11:a8:4e:54:0a:6a:64:54:c2:65:6e:26:1a:bc:1d:c1:54: aa:98:d8:c3:af:68:06:d7:9b:bd:ee:e9:53:c5:1a:59:15:8e: 65:c6:ab:d2:70:60:95:28:a3:3e:9f:8d:47:dd:74:b9:9b:af: 94:28:e8:15:e2:99:ed:2a:76:34:25:6b:af:92:32:97:58:4c: c4:a2:e4:09:a2:29:7c:80:c7:73:e8:84:81:a9:96:41:a8:cc: 1a:df:ad:95:e8:b4:9f:9e:a4:20:c9:03:aa:af:96:b4:67:ba: a5:04:be:3b:20:bd:aa:1e:49:76:97:47:7e:c1:df:10:21:0c: 67:e7:bb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQzUxMTAvBgNVBAUTKDNBNUUxMDI5RTY1QzYzNjgxMjMyREI2N0Q4MDUzREQy RjY5NEU2MUYwHhcNMjUxMTA1MDY0MTIzWhcNMjUxMTEyMDY0MTIzWjAYMRYwFAYD VQQDEw02OTBhZjE5My02NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpvKpiBNAVLKKv0D8K+9/qRNxE5yhHs02IkzQINsNjbwZtI0e8nAKG9d4bVk 9eYpEn3vccB+fIrGLnCuoaH7JqlUxkQjoUlbPTaVXmZSMuBr+uoGCLJ640FO6z4Y pOl83HQyYb1BjLh3X6KOyfa04c/Cp9DgThSIoxOM4z8vE4w7sIvf9NPO/qReEaU/ QDgdn7WR7dix6gQ06hgE3tzy3cR/gPdUjsvdEWueX3UlPyh9VULyXiez5RruoPvz a9p8MC4bXqqgNE32lp1Aci05npRc4BOO2BG4RvHZncqDZexLDEGdbLG792rhFCo0 BjAooXq4DrMhbdSCCUosLioPSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJknjmSX A64jYTaCbXMs6/P7f1bAMB8GA1UdIwQYMBaAFDpeECnmXGNoEjLbZ9gFPdL2lOYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDNS84MjMzNUEyMEQ5 NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1kyZ1NNdHRuMkFVOTB2YVU1 aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDNS84MjMzNUEyMEQ5NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1ky Z1NNdHRuMkFVOTB2YVU1aDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMU/or3VuU451uufGd2+2+1dIUyaL7lj9jwsbWFlAYL/FzU6Ihil3I wEUVpUDuCRYTC8TuGJSapMnLFoEbRzSvS4iqjYQHmIRFnqV2e+UH8+IQlA64Plvq CYLqFEkm+M54Rn5QxzM2+1SBvvh4VJ2qEYk1+09GAF0iE+RcyoMTEahOVApqZFTC ZW4mGrwdwVSqmNjDr2gG15u97ulTxRpZFY5lxqvScGCVKKM+n41H3XS5m6+UKOgV 4pntKnY0JWuvkjKXWEzEouQJoil8gMdz6ISBqZZBqMwa362V6LSfnqQgyQOqr5a0 Z7qlBL47IL2qHkl2l0d+wd8QIQxn57uW -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:13 2025 by rpki-client