$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: VQMZGMi1dcW25w5hvOGFb6tBnTHYb4SmuJDIo9lZsuw= Subject key identifier: 4A:CF:F7:51:E0:B8:41:E9:F1:41:C6:40:04:FB:80:EA:2A:35:9E:BD Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 089E Signing time: Tue 04 Nov 2025 20:37:16 +0000 Manifest this update: Tue 04 Nov 2025 20:37:16 +0000 Manifest next update: Tue 11 Nov 2025 20:37:16 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: A8sIKz4ldpSoVQse5FcZYGQf/SAt78tCmlcpiO19JkE=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LYF+KadzZ69diyD5rWiKHJlYkwO/eA/Z250K04w+xPI=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: +w6DPiK2iGC1sFd6+H0KMfGyjFvRHYPwKc/prnzBHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Nov 4 20:37:16 2025 GMT Not After : Nov 11 20:37:16 2025 GMT Subject: CN=690a63fc-603f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:6e:00:f3:e5:8c:86:6f:ad:7e:04:93:b5: e4:b1:a3:a7:9f:99:37:7d:3c:76:08:59:98:77:16: e1:e4:18:64:47:84:2a:8c:df:0e:4c:dd:74:6c:00: f1:ff:cb:87:62:de:97:ec:7f:be:24:c4:13:87:9e: cb:04:77:9c:83:5c:8c:af:bc:7e:c9:30:f6:4c:49: ac:d2:6a:ed:7e:48:08:47:3e:08:53:51:71:e1:0d: b4:4b:7e:e8:9c:be:a6:1a:da:cc:fc:ac:86:4f:ac: 20:7a:d6:86:40:ec:2e:27:b9:b2:f6:95:6a:b7:9c: d7:6d:9e:2e:31:6b:bb:5d:ea:f1:fb:ed:d2:cf:00: ea:89:cb:be:42:ba:53:b8:d3:58:40:c7:3b:b1:e2: f4:48:26:18:8b:b1:d0:b9:0b:55:22:f3:24:c4:ef: 1b:d5:ee:88:da:a3:9d:57:f0:3b:75:a7:0a:7b:cf: df:8a:00:17:91:af:5d:05:15:f9:9b:47:a0:e8:23: 78:0d:9c:4c:b0:57:66:26:62:f3:f1:eb:75:64:ab: 7e:1e:e8:8f:0a:72:a0:d3:cc:f1:1c:74:4f:11:4a: 7d:f1:ae:7c:e3:e4:cb:73:c5:6e:dc:7b:b5:02:0e: a5:b6:4b:71:01:c2:f0:3f:ed:08:92:c6:73:63:b4: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:F7:51:E0:B8:41:E9:F1:41:C6:40:04:FB:80:EA:2A:35:9E:BD X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d7:8b:30:a7:26:84:72:01:18:74:9b:ca:93:ba:98:c9:a5: f1:70:3f:d6:5c:c4:fe:e3:66:f1:7c:53:aa:7d:f4:c8:47:61: e7:b9:9d:b2:e3:05:d1:83:13:1f:ff:04:b7:1e:d1:2a:a2:04: ca:92:8c:d5:3a:bd:f6:b2:6f:2f:70:d3:ab:80:f4:72:0b:d4: 75:9d:56:36:d8:59:28:bb:e1:33:fd:b3:5d:26:6d:5b:38:d4: c1:10:52:8c:d4:4d:2b:23:ec:bf:8b:af:e2:0d:c9:1a:67:27: 6b:2f:29:88:48:99:c0:56:8b:01:b4:25:a9:2c:d1:c6:69:2f: f5:90:e2:ae:75:be:a6:08:bf:07:80:b4:0e:e6:16:c8:3f:05: 6e:f8:1d:a2:18:34:66:2b:13:f1:e1:4d:ca:af:ca:a9:bf:f0: 7d:9d:53:9d:4b:8b:c4:73:c6:a5:a0:db:16:24:70:a0:05:dc: 5f:ef:7f:16:f6:dd:fb:13:2a:8e:7f:e8:58:ac:a9:f3:5e:9c: e1:99:7a:08:70:c4:7c:7a:21:01:94:66:71:19:df:d3:db:b3: b9:28:95:b0:32:68:0b:d7:b5:a8:4f:58:14:f2:5d:8c:0a:98: aa:51:f8:76:6c:41:8c:7a:9c:bb:2d:8e:10:d7:9d:6f:95:b8: 47:c7:ca:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjUxMTA0MjAzNzE2WhcNMjUxMTExMjAzNzE2WjAYMRYwFAYD VQQDEw02OTBhNjNmYy02MDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrJuAPPljIZvrX4Ek7XksaOnn5k3fTx2CFmYdxbh5BhkR4QqjN8OTN10bADx /8uHYt6X7H++JMQTh57LBHecg1yMr7x+yTD2TEms0mrtfkgIRz4IU1Fx4Q20S37o nL6mGtrM/KyGT6wgetaGQOwuJ7my9pVqt5zXbZ4uMWu7Xerx++3SzwDqicu+QrpT uNNYQMc7seL0SCYYi7HQuQtVIvMkxO8b1e6I2qOdV/A7dacKe8/figAXka9dBRX5 m0eg6CN4DZxMsFdmJmLz8et1ZKt+HuiPCnKg08zxHHRPEUp98a584+TLc8Vu3Hu1 Ag6ltktxAcLwP+0IksZzY7TGBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErP91Hg uEHp8UHGQAT7gOoqNZ69MB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf14swpyaEcgEYdJvKk7qYyaXxcD/WXMT+42bxfFOqffTIR2HnuZ2y 4wXRgxMf/wS3HtEqogTKkozVOr32sm8vcNOrgPRyC9R1nVY22Fkou+Ez/bNdJm1b ONTBEFKM1E0rI+y/i6/iDckaZydrLymISJnAVosBtCWpLNHGaS/1kOKudb6mCL8H gLQO5hbIPwVu+B2iGDRmKxPx4U3Kr8qpv/B9nVOdS4vEc8aloNsWJHCgBdxf738W 9t37EyqOf+hYrKnzXpzhmXoIcMR8eiEBlGZxGd/T27O5KJWwMmgL17WoT1gU8l2M CpiqUfh2bEGMepy7LY4Q151vlbhHx8qC -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:44 2025 by rpki-client