$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: BlkX6DNmYKkVuU17Uuuhzrm7J5UWH5GVRoiJ7WSu0jc= Subject key identifier: 92:FF:B3:3C:20:22:86:29:CA:AE:3A:43:7A:CA:FD:D9:AF:B5:D9:8A Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 04D7 Signing time: Tue 04 Nov 2025 20:44:46 +0000 Manifest this update: Tue 04 Nov 2025 20:44:45 +0000 Manifest next update: Tue 11 Nov 2025 20:44:45 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: wkOnFjMdDXYIYRaVnraIWpFz7RAUIHAFyMBYa0vjaCo=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: trLJfSwyymOYXghPy0PGh0ipgzAzEgwWMLJxE/C/bWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Nov 4 20:44:45 2025 GMT Not After : Nov 11 20:44:45 2025 GMT Subject: CN=690a65bd-422a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6d:e5:51:fd:f3:f2:99:d5:da:ea:06:fe:73: 5a:16:82:55:4d:f5:1f:b4:e3:7d:31:45:5f:bd:32: d6:52:8f:fe:59:6b:3c:d1:74:28:18:1b:07:ae:ca: 74:ab:fe:90:e3:fc:65:23:9f:3b:ee:82:e6:d2:ba: bd:ab:e8:04:60:ad:0d:06:1c:b0:b5:69:68:1c:e6: 28:35:2a:40:bb:8d:4e:f3:0d:65:da:62:f3:04:e9: 1f:bc:f6:6e:bb:a4:d9:5b:8f:59:36:ce:66:d9:a8: 58:fb:7d:87:35:72:51:29:e4:87:f6:04:b9:f0:0f: 93:e3:1e:45:d1:ae:44:1c:f6:8e:64:73:54:c5:64: ab:5f:b7:8e:68:ed:82:22:5f:67:ed:16:a2:72:85: fd:af:38:e4:51:60:7e:08:64:52:61:4d:ef:3e:14: fb:59:3b:20:82:23:58:c4:13:5f:3a:b1:77:66:3d: b2:a8:1d:5b:a8:13:25:62:6c:19:c3:53:7c:cc:77: a2:11:c9:82:60:7a:09:b1:58:7a:72:2c:b9:6b:c8: 4d:7a:29:81:a0:7c:d3:f9:8a:7a:ce:d5:87:d0:64: 3f:f8:5a:0f:7d:47:03:c6:10:fd:f7:0c:a4:c4:c8: 20:95:a1:10:6a:b0:7b:1e:10:31:63:dc:e1:a6:1b: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:B3:3C:20:22:86:29:CA:AE:3A:43:7A:CA:FD:D9:AF:B5:D9:8A X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:29:c4:01:a6:65:c8:ae:0e:d9:4a:bb:d7:c3:73:14:1e:4d: d2:9b:61:4d:4c:21:85:b0:cf:e0:a7:6b:ad:29:06:ab:be:6a: 29:d7:b8:71:b1:cf:a7:1c:96:f7:c1:48:8a:fd:ce:a8:48:41: c3:e0:3d:07:d2:a8:44:2f:0b:8f:01:5a:4c:ea:f3:5c:17:f8: 27:06:49:6f:6a:5a:dc:9c:f8:02:55:ce:c0:ac:b6:08:4b:a8: e6:c7:af:bd:09:29:8c:fa:a9:24:b3:30:bb:6c:c0:ec:50:95: ca:9d:7d:9b:db:ae:e9:e4:f5:02:65:dc:0c:5a:b8:c3:08:d3: af:8b:3c:f5:97:16:84:1f:2d:19:0f:bf:0e:ac:69:1e:d4:bf: de:e1:c8:0c:7f:7e:87:ff:39:73:d2:08:23:c2:78:fc:fa:84: 5d:bf:9c:16:b8:d3:0f:6e:93:ba:e6:13:8d:7a:d5:cb:ea:3a: d4:27:d3:18:92:1b:ea:29:a4:20:23:6d:16:c5:38:fa:67:cb: 48:92:8d:78:5e:b7:7c:b2:66:26:4a:e6:fe:5c:7b:e7:6b:89: 5c:5c:28:2f:dd:62:8a:72:94:75:ae:b3:36:d0:f4:ce:47:69: 18:b3:2e:0d:c0:ad:38:a1:83:5a:5e:2f:9e:41:ed:b0:cb:1d: 95:31:bd:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUxMTA0MjA0NDQ1WhcNMjUxMTExMjA0NDQ1WjAYMRYwFAYD VQQDEw02OTBhNjViZC00MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+W3lUf3z8pnV2uoG/nNaFoJVTfUftON9MUVfvTLWUo/+WWs80XQoGBsHrsp0 q/6Q4/xlI5877oLm0rq9q+gEYK0NBhywtWloHOYoNSpAu41O8w1l2mLzBOkfvPZu u6TZW49ZNs5m2ahY+32HNXJRKeSH9gS58A+T4x5F0a5EHPaOZHNUxWSrX7eOaO2C Il9n7RaicoX9rzjkUWB+CGRSYU3vPhT7WTsggiNYxBNfOrF3Zj2yqB1bqBMlYmwZ w1N8zHeiEcmCYHoJsVh6ciy5a8hNeimBoHzT+Yp6ztWH0GQ/+FoPfUcDxhD99wyk xMgglaEQarB7HhAxY9zhphvJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL/szwg IoYpyq46Q3rK/dmvtdmKMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3KcQBpmXIrg7ZSrvXw3MUHk3Sm2FNTCGFsM/gp2utKQarvmop17hx sc+nHJb3wUiK/c6oSEHD4D0H0qhELwuPAVpM6vNcF/gnBklvalrcnPgCVc7ArLYI S6jmx6+9CSmM+qkkszC7bMDsUJXKnX2b267p5PUCZdwMWrjDCNOvizz1lxaEHy0Z D78OrGke1L/e4cgMf36H/zlz0ggjwnj8+oRdv5wWuNMPbpO65hONetXL6jrUJ9MY khvqKaQgI20WxTj6Z8tIko14Xrd8smYmSub+XHvna4lcXCgv3WKKcpR1rrM20PTO R2kYsy4NwK04oYNaXi+eQe2wyx2VMb2y -----END CERTIFICATE-----Generated at Wed Nov 5 00:00:07 2025 by rpki-client