$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft File: 9ouGJos33oELlo2481f3c-mDv20.mft (raw, json) Hash identifier: PPp14y6TFES1e5ebbMwaigfidKn55zYZkw7UzeRh6bY= Subject key identifier: F6:4D:AA:2A:E3:3A:4C:23:ED:B7:17:76:3D:B7:AB:AE:79:DC:D6:5D Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft Manifest number: 0AC7 Signing time: Sun 02 Nov 2025 19:25:58 +0000 Manifest this update: Sun 02 Nov 2025 19:25:58 +0000 Manifest next update: Sun 09 Nov 2025 19:25:58 +0000 Files and hashes: 1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: dDZ2MLXBgtQCg0Y1TCnt9+DZdz97Cj1CQyWp1090Ajs=) 2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: hPcGjX6pod1mQjVuO2fta8f52KKrIcQ5XI+2+yM8wXY=) 3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: FEaiMi5+ZViFMZcOI+52QVvWi5kkjXKoDrc8FS7/m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: Nov 2 19:25:58 2025 GMT Not After : Nov 9 19:25:58 2025 GMT Subject: CN=6907b046-f1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:16:3b:95:59:24:a9:9f:cc:61:02:f7:f6: 13:75:9c:a4:97:f7:88:6a:4d:ab:eb:f8:91:a0:88: 2b:fe:0e:44:c2:c8:a5:f5:53:00:a0:c4:37:a0:fa: 95:21:13:6a:e7:fb:99:89:c7:7b:e1:1c:99:5d:01: b9:2c:3b:a3:6f:d6:29:82:65:f5:65:e0:bc:4f:6b: 4d:53:3a:70:17:58:bb:f3:c0:d6:ab:c2:f8:12:0c: 59:6c:7b:75:3a:cb:b2:0a:8d:ac:10:63:93:d6:74: 56:49:b4:39:db:74:96:93:ff:4a:01:9c:24:2a:61: a2:20:63:c4:38:3a:a7:d8:e3:25:9e:31:a4:e6:c0: 3b:83:1b:3d:05:35:3e:e3:a1:58:5c:61:13:3d:d5: 66:7f:2d:8b:7d:f5:d2:32:f8:2a:bd:dd:26:3c:8c: 50:64:07:0f:13:a1:67:95:5b:2a:31:72:17:4e:ae: 6c:85:c8:d4:f2:2a:17:84:7e:3f:ed:4b:e3:d0:04: 89:50:ed:52:16:f9:f0:ee:57:43:40:ce:d7:f1:a1: b6:4f:b0:4a:60:3f:36:57:06:26:13:b6:35:6b:88: b0:4b:96:7d:69:40:bb:aa:a1:ef:f6:96:82:63:07: 47:7c:ce:d1:23:c6:11:46:c2:0b:6d:69:ab:71:a5: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:AA:2A:E3:3A:4C:23:ED:B7:17:76:3D:B7:AB:AE:79:DC:D6:5D X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:40:08:2f:c4:f4:49:7f:e6:ce:77:97:6b:2f:f5:63:5b:2a: 60:c5:b9:6d:63:13:82:2a:70:b8:81:ea:16:d6:d3:a1:5e:31: 0f:21:3e:4f:0d:5e:40:27:9b:a0:0f:ae:3e:76:1c:fe:91:77: 00:76:97:fb:59:16:bd:45:e6:64:e9:06:b3:67:a1:d0:1d:74: 15:de:0d:b3:25:04:de:fc:1a:ef:55:8b:a4:e0:75:6e:8c:c8: a0:f1:24:fd:3b:5c:07:02:7b:ae:23:9a:cc:58:09:88:8a:21: 20:1f:9e:40:df:3c:1b:cb:9f:18:5c:a2:34:77:6e:47:fa:b4: 53:90:17:e8:dd:86:ea:23:fa:67:21:f4:04:86:21:85:35:67: d7:fa:98:0d:76:9e:53:9a:29:14:1a:c0:18:fa:65:0e:cd:d1: 20:7e:6a:de:ff:82:c0:82:90:98:ff:7a:86:fd:b6:33:c2:ce: ce:2a:51:75:07:fd:86:36:a5:cb:48:da:cd:64:04:53:18:c2: 7c:1e:a1:ca:24:c7:cd:90:d5:13:6f:c8:cd:d8:7a:7e:de:43: 0c:14:64:9b:f6:fe:8b:cb:5d:e8:3d:f1:14:a9:63:e8:7e:48: 53:c2:23:13:33:c8:cd:45:17:fe:04:4f:c0:ea:a3:1f:18:23: 84:a9:4a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjUxMTAyMTkyNTU4WhcNMjUxMTA5MTkyNTU4WjAYMRYwFAYD VQQDEw02OTA3YjA0Ni1mMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjsWO5VZJKmfzGEC9/YTdZykl/eIak2r6/iRoIgr/g5Ewsil9VMAoMQ3oPqV IRNq5/uZicd74RyZXQG5LDujb9YpgmX1ZeC8T2tNUzpwF1i788DWq8L4EgxZbHt1 OsuyCo2sEGOT1nRWSbQ523SWk/9KAZwkKmGiIGPEODqn2OMlnjGk5sA7gxs9BTU+ 46FYXGETPdVmfy2LffXSMvgqvd0mPIxQZAcPE6FnlVsqMXIXTq5shcjU8ioXhH4/ 7Uvj0ASJUO1SFvnw7ldDQM7X8aG2T7BKYD82VwYmE7Y1a4iwS5Z9aUC7qqHv9paC YwdHfM7RI8YRRsILbWmrcaW8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZNqirj Okwj7bcXdj23q6553NZdMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVGNi9ENjlFQUFCMjVGNjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNv RUxsbzI0ODFmM2MtbUR2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6QAgvxPRJf+bOd5drL/VjWypgxbltYxOCKnC4geoW1tOhXjEPIT5P DV5AJ5ugD64+dhz+kXcAdpf7WRa9ReZk6QazZ6HQHXQV3g2zJQTe/BrvVYuk4HVu jMig8ST9O1wHAnuuI5rMWAmIiiEgH55A3zwby58YXKI0d25H+rRTkBfo3YbqI/pn IfQEhiGFNWfX+pgNdp5TmikUGsAY+mUOzdEgfmre/4LAgpCY/3qG/bYzws7OKlF1 B/2GNqXLSNrNZARTGMJ8HqHKJMfNkNUTb8jN2Hp+3kMMFGSb9v6Ly13oPfEUqWPo fkhTwiMTM8jNRRf+BE/A6qMfGCOEqUoE -----END CERTIFICATE-----Generated at Tue Nov 4 20:03:18 2025 by rpki-client