$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: TWGIY04d6688T9mXldSarzuBfOTXeJ+mUryo8CElhi0= Subject key identifier: 6A:5F:6D:FD:C0:64:0F:CD:12:8E:85:7B:F3:5D:F0:9D:D0:00:7C:93 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 07:26:55 +0000 Manifest this update: Mon 03 Nov 2025 07:26:55 +0000 Manifest next update: Mon 10 Nov 2025 07:26:55 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: DnRwu5bIiLF+aepGi+g1g7g688u8OtNmPugkppDdhTE=) 2: C24679DC741211F0808A8240C4F9AE02.roa (hash: 0sz+kpmtwGElJIZS+dbC02B4JWfvDxu2J1QwiI80uIU=) 3: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 1ZtqCzNNxWxSJ7uFzzu6FWZe/QSQ6qrzF6WDQCLLHuM=) 4: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: BBZhX9HK3NBq65o9RCyGDdGBDo4hsR5Etdc6G3lRbjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Nov 3 07:26:55 2025 GMT Not After : Nov 10 07:26:55 2025 GMT Subject: CN=6908593f-78d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:e5:df:c4:c5:ae:c3:5f:e8:4d:ae:02:f4: b9:ad:f4:8a:bf:61:dd:50:20:fb:07:0e:91:71:c9: 3a:8b:1a:48:f7:a2:2a:f4:74:21:25:cd:31:0c:f2: 02:9e:e5:d8:8e:4b:6c:a8:bf:63:a4:9e:b4:79:47: 7b:88:d0:14:74:46:ec:1d:88:a0:dc:f0:ca:ea:06: 82:fa:a2:ad:7f:83:5c:b3:44:08:c0:f5:2c:26:d5: 65:c4:32:64:1a:a7:3f:a0:cf:d3:69:59:c4:a1:ad: fb:bb:05:43:48:67:0c:89:41:5a:68:d8:16:7a:2a: b5:7c:ab:85:af:87:1b:38:db:47:cd:ef:75:b1:32: 12:8e:ca:42:fb:62:77:3e:ca:45:78:86:34:42:0e: 19:c0:74:49:7b:c7:f0:ea:d6:a3:a4:eb:00:a8:45: 17:c7:ce:e0:ce:3f:cc:34:67:24:46:d1:88:4a:58: f7:a3:db:63:c0:b8:1e:94:07:7e:de:47:16:27:12: f8:85:91:1c:92:e6:fb:55:18:07:79:f3:82:6f:ab: 03:2c:11:74:2f:a0:e7:f1:85:48:9d:b4:90:4c:28: 31:40:37:da:e3:bf:17:87:47:0f:e8:06:ea:c4:65: f0:8e:32:cc:78:20:95:37:b4:38:27:63:e4:a8:93: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5F:6D:FD:C0:64:0F:CD:12:8E:85:7B:F3:5D:F0:9D:D0:00:7C:93 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:9b:9d:90:34:cc:ec:98:f5:5d:b3:fa:d9:cc:d7:43:55:c8: 79:b3:ec:54:fe:ae:31:c0:4b:65:79:2c:a4:03:07:21:d1:ab: e6:42:47:da:4a:2e:5d:86:31:60:a5:57:01:71:a0:26:e7:88: 08:77:8e:68:04:72:96:83:c6:d0:2f:0c:3e:3c:bd:7b:76:0c: 8b:98:ed:ed:00:e0:87:e6:e6:b9:6e:8f:b6:69:e6:1b:65:89: ae:b5:1e:df:09:3e:63:d9:22:0c:a6:13:ad:a6:3f:5b:f5:fd: 9f:bc:3b:45:2f:a5:8f:82:df:2d:7c:4c:b7:13:0f:a3:43:85: 10:7b:9a:98:b6:3d:a0:6a:8f:2f:63:0d:63:f7:b4:89:e9:51: 90:10:76:6e:b2:3d:0e:2a:3b:ef:21:d0:ce:b9:70:45:fe:ea: ee:4e:a7:af:57:db:4c:16:9c:92:eb:e0:23:bd:0f:bf:37:4d: 78:ab:be:b2:ba:2a:eb:e6:a5:90:b6:10:43:f3:d9:32:90:68: d6:d1:61:36:97:d4:b0:8c:f2:b2:db:73:6c:d4:69:eb:a8:34: 93:6a:c7:c5:16:cd:f8:2b:ed:b8:0f:c4:b1:14:7f:d5:08:04: ba:e7:37:d3:fc:57:2f:ea:fa:db:85:00:60:4a:fc:f3:75:48: 5e:5d:93:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTExMDMwNzI2NTVaFw0yNTExMTAwNzI2NTVaMBgxFjAUBgNV BAMTDTY5MDg1OTNmLTc4ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCenOXfxMWuw1/oTa4C9Lmt9Iq/Yd1QIPsHDpFxyTqLGkj3oir0dCElzTEM8gKe 5diOS2yov2OknrR5R3uI0BR0RuwdiKDc8MrqBoL6oq1/g1yzRAjA9Swm1WXEMmQa pz+gz9NpWcShrfu7BUNIZwyJQVpo2BZ6KrV8q4Wvhxs420fN73WxMhKOykL7Ync+ ykV4hjRCDhnAdEl7x/Dq1qOk6wCoRRfHzuDOP8w0ZyRG0YhKWPej22PAuB6UB37e RxYnEviFkRyS5vtVGAd584JvqwMsEXQvoOfxhUidtJBMKDFAN9rjvxeHRw/oBurE ZfCOMsx4IJU3tDgnY+Sok7+xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUal9t/cBk D80SjoV7813wndAAfJMwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDLzcxRTVEOEJFNTlGMjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlT bkZXYzFFbFhzam43VlB2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMybnZA0zOyY9V2z+tnM10NVyHmz7FT+rjHAS2V5LKQDByHRq+ZCR9pK Ll2GMWClVwFxoCbniAh3jmgEcpaDxtAvDD48vXt2DIuY7e0A4Ifm5rluj7Zp5htl ia61Ht8JPmPZIgymE62mP1v1/Z+8O0UvpY+C3y18TLcTD6NDhRB7mpi2PaBqjy9j DWP3tInpUZAQdm6yPQ4qO+8h0M65cEX+6u5Op69X20wWnJLr4CO9D783TXirvrK6 KuvmpZC2EEPz2TKQaNbRYTaX1LCM8rLbc2zUaeuoNJNqx8UWzfgr7bgPxLEUf9UI BLrnN9P8Vy/q+tuFAGBK/PN1SF5dk7U= -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:42 2025 by rpki-client