$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json) Hash identifier: jEJJCHH+/HBoLOBa0RMz0vKnsLGCcgV6qFfL31OXdLc= Subject key identifier: 98:A8:85:81:EC:7C:03:08:73:DB:B8:9F:71:4E:72:FC:0E:70:DD:13 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft Manifest number: 062C Signing time: Tue 04 Nov 2025 22:50:05 +0000 Manifest this update: Tue 04 Nov 2025 22:50:04 +0000 Manifest next update: Tue 11 Nov 2025 22:50:04 +0000 Files and hashes: 1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: kx1B7VcXF1fJy5b1U3Mk++JeWsCXH6aE6MqCNm7APUw=) 2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: AxnCXioU+pzcVhOQczSiGNqFZn1BtxYji3/Mt/svcQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Nov 4 22:50:04 2025 GMT Not After : Nov 11 22:50:04 2025 GMT Subject: CN=690a831d-99eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:4b:45:7b:ed:6a:49:c8:af:18:c2:4b:81: 21:4f:7e:ab:63:f5:e2:85:7a:f0:12:f9:91:6c:8c: 53:a3:3b:87:73:34:78:eb:50:eb:69:7f:33:64:5f: 0b:28:17:59:c2:60:2b:9a:0a:2c:25:36:a4:55:94: 08:48:e1:c8:03:21:2d:4e:db:e3:51:f7:e1:2d:c3: 17:04:1d:0f:b3:8c:cf:56:e4:c9:af:b4:60:17:0d: 06:25:e1:11:f3:41:2e:b6:c6:44:eb:cb:d0:f0:38: c9:7b:db:4d:f1:a9:98:a2:4c:80:8d:ae:68:d1:e5: 19:22:f5:c8:29:fb:2b:f8:93:51:4c:13:86:48:95: a4:83:66:01:b6:80:63:d9:58:75:b3:89:25:b2:ce: 91:e0:4d:51:f3:3e:9b:a5:dc:7e:97:b0:77:0c:cc: 3a:43:89:ee:f0:fa:f7:44:02:ef:c7:4e:ba:59:d5: 51:ad:db:de:75:c5:a4:08:90:3d:24:2b:21:9d:49: 13:4d:29:4b:9e:ce:39:7b:9d:66:b4:4f:64:38:99: 81:7a:a3:0a:4b:5a:9e:be:a7:12:e2:54:2c:81:6e: 99:37:d0:70:50:ed:50:ac:c6:7d:1b:a1:b1:e3:39: cd:59:69:2d:c5:77:b8:52:58:63:87:d6:86:6a:9f: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A8:85:81:EC:7C:03:08:73:DB:B8:9F:71:4E:72:FC:0E:70:DD:13 X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ea:5d:9a:e5:b4:88:8d:30:33:9c:9c:3b:66:02:ab:c5:c4: 1a:86:fc:9f:b6:70:b6:ef:67:56:73:1b:c9:40:81:2f:ee:4c: 77:f3:cd:92:79:6e:5d:ae:27:dc:a6:c5:50:05:6c:dd:4a:a5: 94:84:03:c0:ec:31:91:96:0a:2a:bc:f4:2e:59:92:55:27:5a: 26:09:bf:3e:f7:13:35:16:42:a9:60:56:5e:ce:d0:f5:2c:eb: 97:7c:0d:bc:d0:77:0e:08:14:a9:e6:28:36:4c:60:3a:14:da: 22:59:c7:ae:fa:de:a2:fb:50:83:8e:de:0f:e6:51:21:ce:85: b0:96:7f:49:08:50:2d:fa:5f:00:3a:06:df:cc:1a:a6:b4:8c: 64:fc:d7:a9:cf:12:ca:04:db:9c:7b:e7:e3:13:9b:cf:09:56: 17:91:13:b7:b1:2e:2e:dc:df:ee:c8:5e:0d:6c:bc:cc:0f:0e: 10:8e:4f:e6:8d:0d:d8:e2:33:69:61:de:f4:85:56:91:a8:10: 62:2b:97:b1:38:fb:c1:10:2e:68:83:7e:95:c9:26:84:4e:9f: 3f:75:3f:bd:78:06:36:fa:51:f0:b4:c8:ca:b5:1b:94:7b:05: 57:2b:86:ed:0c:ba:fe:26:b0:23:df:7b:a4:8b:c1:a9:bb:23: 96:a8:fa:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUxMTA0MjI1MDA0WhcNMjUxMTExMjI1MDA0WjAYMRYwFAYD VQQDEw02OTBhODMxZC05OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs79LRXvtaknIrxjCS4EhT36rY/XihXrwEvmRbIxTozuHczR461DraX8zZF8L KBdZwmArmgosJTakVZQISOHIAyEtTtvjUffhLcMXBB0Ps4zPVuTJr7RgFw0GJeER 80EutsZE68vQ8DjJe9tN8amYokyAja5o0eUZIvXIKfsr+JNRTBOGSJWkg2YBtoBj 2Vh1s4klss6R4E1R8z6bpdx+l7B3DMw6Q4nu8Pr3RALvx066WdVRrdvedcWkCJA9 JCshnUkTTSlLns45e51mtE9kOJmBeqMKS1qevqcS4lQsgW6ZN9BwUO1QrMZ9G6Gx 4znNWWktxXe4Ulhjh9aGap9bLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiohYHs fAMIc9u4n3FOcvwOcN0TMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpH aXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs6l2a5bSIjTAznJw7ZgKrxcQahvyftnC272dWcxvJQIEv7kx3882S eW5drifcpsVQBWzdSqWUhAPA7DGRlgoqvPQuWZJVJ1omCb8+9xM1FkKpYFZeztD1 LOuXfA280HcOCBSp5ig2TGA6FNoiWceu+t6i+1CDjt4P5lEhzoWwln9JCFAt+l8A OgbfzBqmtIxk/NepzxLKBNuce+fjE5vPCVYXkRO3sS4u3N/uyF4NbLzMDw4Qjk/m jQ3Y4jNpYd70hVaRqBBiK5exOPvBEC5og36VySaETp8/dT+9eAY2+lHwtMjKtRuU ewVXK4btDLr+JrAj33uki8GpuyOWqPqv -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:09 2025 by rpki-client