$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: QAhLfTuub+8ZhPyaA2dHh+gjKCHkPHE5bHSNuH9GVVk= Subject key identifier: BF:E7:5D:91:1F:93:2E:D9:CF:2C:0C:11:4A:4F:4C:7E:C6:E3:06:E3 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FFF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0FF6 Signing time: Tue 04 Nov 2025 17:33:43 +0000 Manifest this update: Tue 04 Nov 2025 17:33:42 +0000 Manifest next update: Tue 11 Nov 2025 17:33:42 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: rDqQfv5mTJGPHpjaDoUo8v8zVij+iq9rekp7SNJAHAU=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4095 (0xfff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Nov 4 17:33:42 2025 GMT Not After : Nov 11 17:33:42 2025 GMT Subject: CN=690a38f6-c3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:67:9b:fa:ff:5e:67:42:4f:96:f0:bf:47: ac:a1:77:fc:c9:53:1e:27:cf:51:66:33:59:4f:12: b8:fe:33:00:37:ae:26:3f:e6:8e:1c:f6:34:f6:9a: 55:5b:42:8b:76:48:12:cf:fa:62:40:cf:c1:32:f7: 06:38:94:7c:25:ac:28:1b:a0:9e:a6:ff:20:0b:45: d3:63:ec:43:03:b0:78:95:26:8d:4b:a5:02:d0:48: 0d:2c:ba:9a:d7:2e:20:6b:21:49:69:8e:f1:6b:a0: 40:0f:75:cf:36:0a:1e:3f:e4:ad:1b:f2:b0:17:50: e3:45:89:3c:cb:24:86:bc:ea:a4:e0:e5:c1:4e:3c: aa:fe:21:3e:bf:b5:1f:3a:02:dc:ba:de:10:2e:a2: 71:53:b4:0a:9d:69:8a:16:f1:58:63:27:66:71:ce: a1:f6:88:ed:2a:31:a9:a0:16:df:c1:da:c2:43:ca: 9a:02:54:2a:8e:41:bc:6f:c6:a3:ff:b9:5b:5c:8b: d1:b4:37:c7:4d:c2:5e:86:18:3c:72:ba:7d:73:5b: d4:78:b9:b8:d4:41:42:ed:e9:29:29:83:b9:ff:67: 00:87:ea:e6:2e:49:40:3a:82:91:a5:36:3a:d4:3a: 05:a8:11:3e:eb:84:a4:71:da:e3:a0:1d:3a:b8:2f: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E7:5D:91:1F:93:2E:D9:CF:2C:0C:11:4A:4F:4C:7E:C6:E3:06:E3 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:20:ba:17:4b:d3:07:1c:67:2b:1a:c6:9e:31:1c:88:46: 33:aa:5a:a3:6e:0a:85:0b:2a:71:9d:af:73:38:d2:49:d5:6a: 95:b3:87:c1:fd:9c:85:13:74:bc:ef:b4:4a:55:4c:dc:f2:f3: 95:3b:36:da:96:6e:64:1f:6d:5c:1a:e6:6d:7b:cd:9b:ea:b0: c1:94:2b:60:be:3e:a4:ff:ff:be:13:b0:85:82:2e:e3:0f:c4: a6:ca:30:92:45:6f:ae:99:fa:17:c9:38:d9:9e:e4:d6:d5:5d: 16:45:5d:76:29:08:73:99:68:c1:44:6b:d3:33:09:0e:ca:87: 69:bf:14:44:d0:f0:55:69:b5:e3:8a:e2:40:3f:42:bc:73:ef: 75:27:8f:81:5a:32:2b:2f:bc:a4:1f:2a:c2:61:d3:39:46:66: d8:09:10:2e:f8:59:f4:1d:88:d6:13:96:97:f7:c7:ba:7e:b1: 3b:79:28:58:95:e2:c2:54:07:0d:52:c8:2c:fe:d6:51:e6:23: 58:78:e8:a8:d2:d0:b4:01:55:b0:6b:e0:83:8b:fe:e2:b3:7a: 2a:39:03:86:79:02:53:b8:c6:c7:e6:83:41:4e:cb:bf:1b:9a: 12:ee:f3:08:b1:fb:0d:bc:a7:6b:3e:ac:d4:29:09:ee:aa:1c: 6c:fc:7c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUxMTA0MTczMzQyWhcNMjUxMTExMTczMzQyWjAYMRYwFAYD VQQDEw02OTBhMzhmNi1jM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CJnm/r/XmdCT5bwv0esoXf8yVMeJ89RZjNZTxK4/jMAN64mP+aOHPY09ppV W0KLdkgSz/piQM/BMvcGOJR8JawoG6Cepv8gC0XTY+xDA7B4lSaNS6UC0EgNLLqa 1y4gayFJaY7xa6BAD3XPNgoeP+StG/KwF1DjRYk8yySGvOqk4OXBTjyq/iE+v7Uf OgLcut4QLqJxU7QKnWmKFvFYYydmcc6h9ojtKjGpoBbfwdrCQ8qaAlQqjkG8b8aj /7lbXIvRtDfHTcJehhg8crp9c1vUeLm41EFC7ekpKYO5/2cAh+rmLklAOoKRpTY6 1DoFqBE+64SkcdrjoB06uC9LdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/nXZEf ky7ZzywMEUpPTH7G4wbjMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtlCC6F0vTBxxnKxrGnjEciEYzqlqjbgqFCypxna9zONJJ1WqVs4fB /ZyFE3S877RKVUzc8vOVOzbalm5kH21cGuZte82b6rDBlCtgvj6k//++E7CFgi7j D8SmyjCSRW+umfoXyTjZnuTW1V0WRV12KQhzmWjBRGvTMwkOyodpvxRE0PBVabXj iuJAP0K8c+91J4+BWjIrL7ykHyrCYdM5RmbYCRAu+Fn0HYjWE5aX98e6frE7eShY leLCVAcNUsgs/tZR5iNYeOio0tC0AVWwa+CDi/7is3oqOQOGeQJTuMbH5oNBTsu/ G5oS7vMIsfsNvKdrPqzUKQnuqhxs/Hz1 -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:47 2025 by rpki-client