$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: 8Z1T4H0V2Usb3Ea/NZyt7+QLDwb4zPWeE1k6y0M2YRA= Subject key identifier: 21:20:17:7F:7C:76:DE:11:25:4E:A9:E9:E1:EC:FF:3E:C7:16:20:1F Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 0657 Signing time: Sun 02 Nov 2025 22:36:46 +0000 Manifest this update: Sun 02 Nov 2025 22:36:46 +0000 Manifest next update: Sun 09 Nov 2025 22:36:46 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: kXkjNohkqaZVDOzGL/bQukSg6UPdEYLPvEeU6psimn4=) 2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=) 3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Nov 2 22:36:46 2025 GMT Not After : Nov 9 22:36:46 2025 GMT Subject: CN=6907dcfe-deec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:58:a8:ce:b4:30:7d:a4:ac:e1:1a:48:5d: 39:42:79:71:aa:53:dd:06:64:4e:66:a3:36:98:5c: d8:de:48:ee:28:aa:a9:f9:4d:51:a1:8b:2b:fe:d7: 20:f3:95:68:5d:76:9a:2f:74:c4:5d:a9:a1:e5:4c: 2d:f3:66:a1:f4:3c:c3:13:51:8a:83:ed:44:7d:34: 82:be:48:2f:d1:be:3b:07:9c:cf:0a:d8:a9:c2:9b: d3:64:74:7c:bd:f4:6c:27:90:0b:b8:28:67:b4:80: 58:0f:e5:b9:32:61:b5:bb:e3:98:3f:89:98:24:8b: cf:4b:90:0c:7a:34:ee:93:4a:40:1b:c6:a6:4a:b5: c7:37:2e:87:5a:a3:3a:6c:59:4a:37:70:64:8f:ef: fd:51:f9:6c:b8:fd:ee:a6:be:dd:23:9e:2f:db:e3: 13:10:23:8c:79:91:28:4a:d8:49:4d:96:49:aa:55: 51:4a:77:01:4e:c8:39:f2:6a:bb:ff:da:7a:5d:cc: 2c:f1:b1:84:ae:a8:dc:63:3e:a4:d9:38:bd:97:88: 2e:bf:bb:9f:2b:bd:77:c2:27:30:56:17:17:18:e2: dc:48:ae:74:50:68:92:a6:81:ef:8b:c7:eb:8b:09: 59:f9:77:7b:8c:65:88:ef:cd:1f:6d:fc:ea:ec:75: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:17:7F:7C:76:DE:11:25:4E:A9:E9:E1:EC:FF:3E:C7:16:20:1F X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:85:16:4c:9a:b1:8d:2c:b0:5b:02:5e:90:ed:70:8d:a3:60: f2:a6:9e:dd:3f:33:1c:a1:b2:3c:c1:9f:51:d9:1e:5f:aa:23: d1:06:ee:da:18:69:62:34:4a:2e:ab:3f:29:c7:22:6d:c8:06: 1b:52:66:ac:33:28:06:1d:6c:c7:ab:75:3f:bb:5a:eb:7a:d8: 94:7e:33:2b:f5:eb:46:3b:04:5a:b2:d6:76:9d:d9:49:cd:77: 2e:4a:ed:5e:3f:bc:8c:ac:47:be:b1:a0:32:24:ba:fa:33:66: 37:8c:93:3b:81:3b:01:1c:e3:cf:76:1b:54:15:25:ab:cb:42: 7a:e1:5f:05:38:c6:cc:71:2a:ac:b9:93:80:70:1b:bc:5b:01: 88:23:cf:53:7e:4f:b8:ea:92:80:04:2f:21:0a:0a:c4:a2:ab: f7:97:e1:16:9c:33:84:78:d1:2d:07:10:d2:94:40:48:ae:a1: 49:75:c7:05:a9:12:21:f1:71:4e:bd:63:95:37:c6:ba:f6:f4: 76:1d:48:df:da:06:e9:12:f3:5b:fb:75:68:5f:57:b0:c7:93: 8a:cb:9f:8f:bd:db:51:7b:6d:dd:6e:42:e1:7d:3b:42:14:bc: a7:ff:19:d3:ab:e6:96:8f:d3:41:e1:ae:75:b5:3a:04:0f:25: b4:cf:a8:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjUxMTAyMjIzNjQ2WhcNMjUxMTA5MjIzNjQ2WjAYMRYwFAYD VQQDEw02OTA3ZGNmZS1kZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlVYqM60MH2krOEaSF05QnlxqlPdBmROZqM2mFzY3kjuKKqp+U1RoYsr/tcg 85VoXXaaL3TEXamh5Uwt82ah9DzDE1GKg+1EfTSCvkgv0b47B5zPCtipwpvTZHR8 vfRsJ5ALuChntIBYD+W5MmG1u+OYP4mYJIvPS5AMejTuk0pAG8amSrXHNy6HWqM6 bFlKN3Bkj+/9UflsuP3upr7dI54v2+MTECOMeZEoSthJTZZJqlVRSncBTsg58mq7 /9p6Xcws8bGErqjcYz6k2Ti9l4guv7ufK713wicwVhcXGOLcSK50UGiSpoHvi8fr iwlZ+Xd7jGWI780fbfzq7HXPVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEgF398 dt4RJU6p6eHs/z7HFiAfMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHhRZMmrGNLLBbAl6Q7XCNo2Dypp7dPzMcobI8wZ9R2R5fqiPRBu7a GGliNEouqz8pxyJtyAYbUmasMygGHWzHq3U/u1rretiUfjMr9etGOwRastZ2ndlJ zXcuSu1eP7yMrEe+saAyJLr6M2Y3jJM7gTsBHOPPdhtUFSWry0J64V8FOMbMcSqs uZOAcBu8WwGII89Tfk+46pKABC8hCgrEoqv3l+EWnDOEeNEtBxDSlEBIrqFJdccF qRIh8XFOvWOVN8a69vR2HUjf2gbpEvNb+3VoX1ewx5OKy5+PvdtRe23dbkLhfTtC FLyn/xnTq+aWj9NB4a51tToEDyW0z6hy -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:43 2025 by rpki-client