$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json) Hash identifier: ahiFMZEJK7iJN7sl2YvcTWdbT2O7PQHMFlmvyBxm6SI= Subject key identifier: 95:E4:3F:C4:FB:63:8A:3D:65:83:CE:98:34:F0:A9:E6:61:04:79:96 Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft Manifest number: 0548 Signing time: Sun 02 Nov 2025 23:25:11 +0000 Manifest this update: Sun 02 Nov 2025 23:25:10 +0000 Manifest next update: Sun 09 Nov 2025 23:25:10 +0000 Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: mRR4Wh5pEjNwxsB3DH+kgVD6NubCqzy64N4MEibRDWA=) 2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=) 3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655 Validity Not Before: Nov 2 23:25:10 2025 GMT Not After : Nov 9 23:25:10 2025 GMT Subject: CN=6907e857-fa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:20:a4:36:e5:89:38:28:28:89:81:3e:a7: 85:d1:d3:0b:b7:5f:5f:10:b4:60:58:ee:db:f4:35: 38:38:a5:52:30:98:47:a4:b1:07:0d:76:fe:2d:b1: ce:3d:cf:18:f1:6a:eb:c8:eb:e7:5a:ba:0a:ca:57: 24:14:ba:d7:3c:12:26:79:f8:e7:d7:66:68:0e:cc: 9e:61:d2:19:19:d7:98:a2:1c:50:49:ad:ea:82:45: f4:91:b2:2a:e1:a4:38:80:c1:2e:5e:af:46:b5:97: 4b:9c:3f:bf:6f:4b:ed:8b:ff:f6:92:f7:f1:08:06: bc:15:06:8a:40:2d:1c:fa:9d:08:c8:61:53:cd:60: 43:79:8d:4c:31:4f:73:4e:14:86:66:9b:88:33:13: 2d:30:6f:d1:e3:61:dd:a3:17:9d:09:5d:18:fd:5f: 88:ac:2d:cf:76:f7:a9:76:2a:da:3b:7e:b0:af:97: 9a:ae:17:0e:c7:5f:1b:94:66:45:49:93:95:0f:4a: 35:00:7a:7b:42:99:9a:5c:bf:bb:77:0e:de:94:17: 45:c7:5c:9e:3b:cc:f2:8f:9a:c3:f2:a4:8c:52:2f: ec:31:49:4f:9b:d2:b9:00:b7:4b:87:24:04:d4:66: a9:09:6b:54:db:47:b7:16:0a:5e:80:2a:92:11:4e: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:3F:C4:FB:63:8A:3D:65:83:CE:98:34:F0:A9:E6:61:04:79:96 X509v3 Authority Key Identifier: keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3c:38:96:ee:27:dc:91:b1:fb:72:9d:fc:99:65:3e:de:d7: 19:e0:b5:d2:3c:a5:fe:97:cc:77:c9:30:21:04:46:d3:6b:fd: a4:d1:30:19:c3:07:3e:4f:23:94:08:3e:a3:6e:33:03:90:a2: af:99:85:4a:11:58:9e:08:72:ef:27:3a:33:d7:a8:77:8f:50: 50:77:1b:aa:e8:c5:a4:54:eb:c7:08:c6:31:31:8b:f6:27:ba: 3b:d3:a1:53:13:d1:b9:24:2a:e4:10:2c:29:fb:9e:ac:12:d0: fb:eb:48:06:29:23:9c:05:2a:d0:45:ff:d0:37:4f:23:a6:af: 12:a1:3e:df:c6:8b:7e:80:bf:4d:6a:4b:c2:0a:b1:b5:df:35: 6c:3d:64:50:7d:eb:ea:17:e4:e9:00:32:bc:71:25:81:d1:9e: 86:44:12:e6:d0:ff:73:ca:60:f4:cb:c9:98:14:f6:da:6f:f8: cd:d7:bb:8b:e5:7c:65:62:5f:59:dd:f5:f4:7c:8d:1a:7e:98: 89:05:48:eb:74:31:30:51:55:58:44:c1:8a:b2:80:0e:56:af: 27:e0:27:19:1a:00:84:af:a9:1f:95:40:76:38:e7:f3:dd:3b: a6:54:93:b1:11:a1:38:8a:9d:31:14:b2:83:7a:39:ea:58:1f: 9b:cf:f0:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3MDcxMTAvBgNVBAUTKDk4RTg2M0U0NEI1OTdCNjRDQThDODFGRTNGNkRDQkNE REZFMUY2NTUwHhcNMjUxMTAyMjMyNTEwWhcNMjUxMTA5MjMyNTEwWjAYMRYwFAYD VQQDEw02OTA3ZTg1Ny1mYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZwgpDbliTgoKImBPqeF0dMLt19fELRgWO7b9DU4OKVSMJhHpLEHDXb+LbHO Pc8Y8WrryOvnWroKylckFLrXPBImefjn12ZoDsyeYdIZGdeYohxQSa3qgkX0kbIq 4aQ4gMEuXq9GtZdLnD+/b0vti//2kvfxCAa8FQaKQC0c+p0IyGFTzWBDeY1MMU9z ThSGZpuIMxMtMG/R42HdoxedCV0Y/V+IrC3PdvepdiraO36wr5earhcOx18blGZF SZOVD0o1AHp7QpmaXL+7dw7elBdFx1yeO8zyj5rD8qSMUi/sMUlPm9K5ALdLhyQE 1GapCWtU20e3FgpegCqSEU45hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXkP8T7 Y4o9ZYPOmDTwqeZhBHmWMB8GA1UdIwQYMBaAFJjoY+RLWXtkyoyB/j9ty83f4fZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDcwNy8yODY2QzIzNDEw OEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUyVEtqSUgtUDIzTHpkX2g5 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaGo1RXRaZTJUS2pJSC1QMjNMemRfaDlsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwNy8yODY2QzIzNDEwOEIxMUVDODc4RjFCNEZDNEY5QUUwMi9tT2hqNUV0WmUy VEtqSUgtUDIzTHpkX2g5bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABPDiW7ifckbH7cp38mWU+3tcZ4LXSPKX+l8x3yTAhBEbTa/2k0TAZ wwc+TyOUCD6jbjMDkKKvmYVKEVieCHLvJzoz16h3j1BQdxuq6MWkVOvHCMYxMYv2 J7o706FTE9G5JCrkECwp+56sEtD760gGKSOcBSrQRf/QN08jpq8SoT7fxot+gL9N akvCCrG13zVsPWRQfevqF+TpADK8cSWB0Z6GRBLm0P9zymD0y8mYFPbab/jN17uL 5XxlYl9Z3fX0fI0afpiJBUjrdDEwUVVYRMGKsoAOVq8n4CcZGgCEr6kflUB2OOfz 3TumVJOxEaE4ip0xFLKDejnqWB+bz/AW -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:15 2025 by rpki-client