$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: Ri52rr45OMlSHt/hJdIEL0xhWdGkJnTUAFmsnocqxrM= Subject key identifier: DF:C3:BF:16:A8:E4:2A:92:67:3A:37:7A:A6:83:1A:B4:EA:8E:27:A1 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 1674 Signing time: Sun 02 Nov 2025 16:41:37 +0000 Manifest this update: Sun 02 Nov 2025 16:41:36 +0000 Manifest next update: Sun 09 Nov 2025 16:41:36 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: b+pHHfzHmf38KabAjsC6tbPUB0zPpodZEmG0sQrNg6Y=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: sJz6G/xstqw6p4gPUJK4gZEDHHsTgFb0oSV9wpMQ7es=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: bW1tXZTK5POt+zZDGbG4YDsox5kPeg50QnLxOuLANNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5766 (0x1686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Nov 2 16:41:36 2025 GMT Not After : Nov 9 16:41:36 2025 GMT Subject: CN=690789c0-a037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:11:c6:a2:11:40:bd:7e:20:80:2c:a2:ee: 07:08:8c:6c:2a:54:c4:12:f6:f7:1c:9e:d5:54:81: 1d:91:f8:9c:a3:d4:26:45:cd:dc:aa:49:50:f6:ce: a1:67:6b:79:a6:2a:b3:78:4f:ce:82:91:82:11:b3: 38:7b:e8:0e:ea:56:51:e1:83:f3:a5:cf:2a:a9:d0: 45:a8:3e:a6:e0:04:96:1c:d3:88:09:93:5e:1c:6e: 05:2b:e4:17:d2:79:28:da:62:a4:e1:d9:0e:fd:97: 99:b8:93:a3:79:1f:96:4b:6f:72:ec:4a:07:fb:c3: 5b:f8:0a:17:c6:35:5e:28:fb:58:e7:c7:ec:33:d7: 31:33:98:19:e0:57:94:7d:18:7d:06:d3:ba:62:c8: 36:0b:61:15:81:43:6d:c2:70:ec:36:44:62:54:fd: 60:dd:23:06:e9:97:48:6b:ae:47:f7:e0:3e:b1:8f: b5:02:5f:dd:e3:ac:3e:22:c5:36:d5:39:d4:5e:fb: 6b:93:3b:af:a8:c8:ce:26:9e:04:81:55:42:fd:85: 7d:22:f7:2f:7e:d9:67:e2:cc:30:81:0e:72:d3:64: 29:43:ea:29:42:cc:f1:f2:84:a9:f9:a0:a6:e5:dc: 8c:67:22:fb:38:84:46:47:40:e1:9d:c9:2d:bc:c8: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:BF:16:A8:E4:2A:92:67:3A:37:7A:A6:83:1A:B4:EA:8E:27:A1 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cf:60:e9:2a:74:e3:74:0a:1a:9d:1d:52:4f:a0:2a:6c:b1: 42:c6:f8:9a:8f:40:fa:36:d5:52:4b:7a:73:f2:f3:35:29:5d: 05:5a:9f:9e:f2:62:fc:c3:2b:da:ea:4c:cc:ca:ed:8e:ef:3c: 2d:2c:6c:fc:3b:28:fc:2d:4a:b6:2a:5a:85:74:4a:8a:3d:9e: 06:79:8e:8f:8f:da:4b:e8:f1:e8:3a:62:e2:0f:9f:24:b9:4c: 9c:e4:2d:60:4d:38:01:20:67:22:cd:d5:8c:1f:57:c1:4f:da: 33:6f:db:a3:81:4e:cd:e8:16:0c:ea:84:94:d4:e6:fc:b5:91: 75:56:2f:29:32:eb:9c:70:72:59:11:c1:3a:02:42:9d:91:3e: 1a:8d:c9:0b:10:42:1c:4c:4c:01:57:72:47:3c:6d:8d:ef:23: 3b:e3:0d:43:1f:fe:d1:6f:04:ed:4c:60:4b:f8:38:0f:bf:03: c7:a2:24:1a:df:4c:b1:be:64:43:3a:e2:db:4a:f6:6e:7b:9c: d2:0f:7a:c1:e4:c5:f2:79:93:e7:9d:36:65:3b:60:c7:5c:50: e7:8f:c8:d6:67:91:2d:4f:46:09:a4:76:45:9c:ec:67:d7:04: f1:b4:97:91:a9:55:1b:65:38:2c:c5:95:9d:ec:64:68:77:a0: a7:be:2b:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjUxMTAyMTY0MTM2WhcNMjUxMTA5MTY0MTM2WjAYMRYwFAYD VQQDEw02OTA3ODljMC1hMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25ERxqIRQL1+IIAsou4HCIxsKlTEEvb3HJ7VVIEdkfico9QmRc3cqklQ9s6h Z2t5piqzeE/OgpGCEbM4e+gO6lZR4YPzpc8qqdBFqD6m4ASWHNOICZNeHG4FK+QX 0nko2mKk4dkO/ZeZuJOjeR+WS29y7EoH+8Nb+AoXxjVeKPtY58fsM9cxM5gZ4FeU fRh9BtO6Ysg2C2EVgUNtwnDsNkRiVP1g3SMG6ZdIa65H9+A+sY+1Al/d46w+IsU2 1TnUXvtrkzuvqMjOJp4EgVVC/YV9Ivcvftln4swwgQ5y02QpQ+opQszx8oSp+aCm 5dyMZyL7OIRGR0DhncktvMjhYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Dvxao 5CqSZzo3eqaDGrTqjiehMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqz2DpKnTjdAoanR1ST6AqbLFCxviaj0D6NtVSS3pz8vM1KV0FWp+e 8mL8wyva6kzMyu2O7zwtLGz8Oyj8LUq2KlqFdEqKPZ4GeY6Pj9pL6PHoOmLiD58k uUyc5C1gTTgBIGcizdWMH1fBT9ozb9ujgU7N6BYM6oSU1Ob8tZF1Vi8pMuuccHJZ EcE6AkKdkT4ajckLEEIcTEwBV3JHPG2N7yM74w1DH/7RbwTtTGBL+DgPvwPHoiQa 30yxvmRDOuLbSvZue5zSD3rB5MXyeZPnnTZlO2DHXFDnj8jWZ5EtT0YJpHZFnOxn 1wTxtJeRqVUbZTgsxZWd7GRod6CnvisI -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:48 2025 by rpki-client