$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft File: mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json) Hash identifier: ApfRmQ/HPJEKbDr5pez5bf+jzOIotv/aybSQsPzaOKs= Subject key identifier: 99:21:D0:0D:8C:E8:0D:A1:19:B4:57:77:59:33:93:CA:7E:38:B2:33 Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft Manifest number: E8 Signing time: Wed 05 Nov 2025 05:34:41 +0000 Manifest this update: Wed 05 Nov 2025 05:34:40 +0000 Manifest next update: Wed 12 Nov 2025 05:34:40 +0000 Files and hashes: 1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: 4jY4XEuT0bI7FoiNlJ/JLNa4DvUgBlUuMqoXDIgZkII=) 2: 6BC308A4ABD111F0A03CFC15C4F9AE02.roa (hash: KXJnMGfGJ3kG3e40pHo+x5iAcN5v1yBqTBZ04eTSA8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Nov 5 05:34:40 2025 GMT Not After : Nov 12 05:34:40 2025 GMT Subject: CN=690ae1f0-c481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:4e:bc:0c:0d:e2:2e:ae:37:95:c4:3c:8a: c1:52:54:3b:a2:e4:e0:99:76:c7:28:6a:64:b4:7d: 38:0f:45:11:11:06:be:f9:4e:98:32:63:b7:23:48: 3f:8f:34:b6:21:95:7e:20:c5:ae:df:5d:fe:2f:73: bc:ac:6a:18:8c:6f:54:e3:11:be:d0:2c:d6:66:7e: 91:a6:f9:00:68:51:f6:8d:9e:c8:7c:d4:49:cb:7b: 0c:f6:a4:5e:cf:43:8d:3c:b4:fb:1c:80:b0:e2:b6: bf:0d:e8:c9:d0:a6:da:2e:c4:4f:62:37:76:61:61: 27:32:1a:80:05:88:e7:71:aa:2f:27:fd:59:57:d8: 11:f1:1c:99:ee:de:4b:f2:1f:54:40:28:49:d8:dc: 2c:ae:a7:43:56:be:23:af:e7:ed:69:5c:3b:a3:7a: 2b:70:4d:9c:48:d1:74:e2:9c:14:8f:1b:a9:a6:05: 89:cd:a8:f7:be:f6:30:47:50:c5:21:e5:e3:cb:2c: 50:2b:c7:a1:fd:63:9f:19:01:78:0e:29:15:0f:d6: 0b:8f:d2:0a:a9:67:d3:2e:27:64:fc:ae:7a:f5:87: 7e:c5:f8:f7:8f:0f:85:1f:9f:93:83:24:b0:61:58: d1:a0:d0:84:dc:b8:77:74:8e:ef:52:29:76:a1:2a: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:D0:0D:8C:E8:0D:A1:19:B4:57:77:59:33:93:CA:7E:38:B2:33 X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b6:41:f8:e2:89:13:a3:de:82:ee:10:7e:a1:44:c4:d9:e2: 45:a4:b9:cf:f0:40:20:cb:50:87:d7:dd:42:25:fd:b4:a3:bd: 54:67:a4:a3:2f:46:1b:97:97:4e:53:69:e7:1d:67:fd:ee:88: c7:29:c9:75:ca:97:1c:dd:4c:e4:60:09:b3:da:d1:f1:e6:dc: ce:81:49:a1:e8:09:96:5f:15:ac:fa:33:2d:e0:98:bd:a8:4f: d7:34:41:85:32:66:d0:f2:8f:dc:04:59:10:2f:bb:b3:fa:ac: e6:f2:e1:b5:01:f6:f9:91:8c:5c:58:06:15:65:ed:d3:3d:ba: bc:a2:54:6a:ad:b9:21:72:37:c3:80:3b:b8:7a:fc:7d:64:09: a4:ec:1e:9f:f7:6a:2b:e7:03:d6:43:d6:48:d1:32:9b:8a:96: 7e:52:72:8e:cd:0a:0d:67:31:b8:7d:5b:eb:f1:03:85:94:a1: 3e:d8:33:d4:76:1b:b3:49:24:26:63:45:29:64:d4:bd:a3:3c: 29:ae:9a:1f:47:43:0d:c1:53:41:7d:0e:6a:e1:f6:ae:3d:4f: f9:c9:70:e1:92:3c:40:09:2c:9a:32:9a:00:23:16:3c:8a:ae: 7b:7c:b5:14:78:7d:b5:07:4f:b3:da:c3:a1:af:b9:01:da:1a: e1:2b:93:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3NzIxMTAvBgNVBAUTKDk4RTFFOUIwNDNFNjhEMzc2OUU5QTY4REIxQzI2RDcx NTEwOEY3ODcwHhcNMjUxMTA1MDUzNDQwWhcNMjUxMTEyMDUzNDQwWjAYMRYwFAYD VQQDEw02OTBhZTFmMC1jNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWFOvAwN4i6uN5XEPIrBUlQ7ouTgmXbHKGpktH04D0UREQa++U6YMmO3I0g/ jzS2IZV+IMWu313+L3O8rGoYjG9U4xG+0CzWZn6RpvkAaFH2jZ7IfNRJy3sM9qRe z0ONPLT7HICw4ra/DejJ0KbaLsRPYjd2YWEnMhqABYjncaovJ/1ZV9gR8RyZ7t5L 8h9UQChJ2NwsrqdDVr4jr+ftaVw7o3orcE2cSNF04pwUjxuppgWJzaj3vvYwR1DF IeXjyyxQK8eh/WOfGQF4DikVD9YLj9IKqWfTLidk/K569Yd+xfj3jw+FH5+TgySw YVjRoNCE3Lh3dI7vUil2oSpUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkh0A2M 6A2hGbRXd1kzk8p+OLIzMB8GA1UdIwQYMBaAFJjh6bBD5o03aemmjbHCbXFRCPeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzc3Mi85MUZGMEQ5MjVC OUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpUZHA2YWFOc2NKdGNWRUk5 NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpU ZHA2YWFOc2NKdGNWRUk5NGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1tkH44okTo96C7hB+oUTE2eJFpLnP8EAgy1CH191CJf20o71UZ6Sj L0Ybl5dOU2nnHWf97ojHKcl1ypcc3UzkYAmz2tHx5tzOgUmh6AmWXxWs+jMt4Ji9 qE/XNEGFMmbQ8o/cBFkQL7uz+qzm8uG1Afb5kYxcWAYVZe3TPbq8olRqrbkhcjfD gDu4evx9ZAmk7B6f92or5wPWQ9ZI0TKbipZ+UnKOzQoNZzG4fVvr8QOFlKE+2DPU dhuzSSQmY0UpZNS9ozwprpofR0MNwVNBfQ5q4fauPU/5yXDhkjxACSyaMpoAIxY8 iq57fLUUeH21B0+z2sOhr7kB2hrhK5NC -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:20 2025 by rpki-client