$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: rGVF554GuC8cYvMWXn4R+suo1RwVzza3+6W0Y4P+XLE= Subject key identifier: 9E:AE:CD:4F:28:73:8C:24:E8:18:BA:5D:4A:EB:3C:03:99:5C:C9:BF Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 0200 Signing time: Mon 03 Nov 2025 02:23:17 +0000 Manifest this update: Mon 03 Nov 2025 02:23:17 +0000 Manifest next update: Mon 10 Nov 2025 02:23:17 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: foBVZ7NuyBadXCVQPv/qpa5Bl00mN3bkPtnvF8vaN3A=) 2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=) 3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Nov 3 02:23:17 2025 GMT Not After : Nov 10 02:23:17 2025 GMT Subject: CN=69081215-2513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:3b:8d:0e:30:d3:db:eb:a7:d8:a1:36:aa: a4:c0:a6:85:d0:84:24:34:37:93:17:ea:42:61:a9: ee:51:4d:85:83:0e:35:4c:47:b2:13:f6:f7:6c:0c: 93:96:8a:e3:ef:e2:06:a7:35:4a:90:26:39:11:b9: 9f:de:7d:e9:48:82:79:2c:97:52:1b:cf:c1:50:61: 95:32:fa:64:a4:4d:99:95:92:3a:a2:21:b8:d5:10: be:81:5a:95:60:40:d5:31:29:3a:46:5e:c5:aa:80: 64:92:e2:a7:c0:13:ff:fe:a1:2d:ea:08:45:56:8a: 1c:7f:a7:af:60:30:97:2d:c1:0f:ef:66:d9:79:45: 97:93:cc:6c:6b:20:9a:d5:76:ae:09:0b:b3:72:8c: 06:08:ad:df:73:4a:3b:0c:de:9d:fb:40:fe:84:3a: c2:b4:65:d4:10:9d:09:f4:54:6c:4c:dc:e9:b0:0e: 07:63:f8:bd:bc:ab:f4:38:af:18:2d:7e:b9:61:a0: 56:f5:1a:af:06:7f:42:3c:4c:d4:85:11:b3:4c:c1: af:1b:7a:29:cb:b4:d9:58:93:49:7f:5c:b5:ee:a3: 66:70:6e:32:5c:be:58:32:5a:7b:77:57:a1:85:95: d9:de:d3:67:3c:48:69:ea:be:0d:5f:b7:52:14:97: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:CD:4F:28:73:8C:24:E8:18:BA:5D:4A:EB:3C:03:99:5C:C9:BF X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1f:59:ad:03:a1:9c:99:93:2a:c3:d6:07:37:37:ff:35:3c: 4c:4b:15:94:6c:3d:8d:e8:ac:13:bd:56:69:08:ca:cc:67:a0: 2c:c8:34:2b:e9:61:d9:79:64:e9:58:59:85:eb:60:34:05:19: ea:e2:a2:9e:f0:4c:80:27:da:50:19:9c:68:d2:2d:96:3d:3d: 7d:59:ac:64:60:4d:44:0a:7b:a2:b1:c6:80:b8:eb:d8:09:16: 77:7d:bf:66:34:c0:13:24:b3:68:d2:e0:97:01:ef:d2:ed:af: a2:3f:3f:23:d5:d1:59:d9:27:8c:2b:36:f4:50:ef:24:8d:51: 59:b5:ab:51:25:80:34:32:d4:d9:60:6f:a2:83:97:a4:2e:ea: 9c:5a:02:82:2e:aa:87:7a:18:77:16:51:8e:08:6e:bf:fd:67: bc:93:b5:1a:3e:0d:42:85:9a:f7:3a:76:6a:4a:90:56:44:5e: d1:1d:a2:f9:6e:ee:72:3c:9e:f0:a4:00:41:a4:1e:57:f4:7f: 58:21:4a:2f:f5:30:e9:95:6a:cc:bc:f2:49:49:64:d7:a0:33: dc:fd:50:de:f3:db:ed:6f:7a:75:78:0b:e6:f6:e9:11:4c:05: 4f:e6:73:50:9e:e8:6b:2e:37:a7:69:ea:10:18:95:0e:fd:23: 73:05:12:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjUxMTAzMDIyMzE3WhcNMjUxMTEwMDIyMzE3WjAYMRYwFAYD VQQDEw02OTA4MTIxNS0yNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XQ7jQ4w09vrp9ihNqqkwKaF0IQkNDeTF+pCYanuUU2Fgw41TEeyE/b3bAyT lorj7+IGpzVKkCY5Ebmf3n3pSIJ5LJdSG8/BUGGVMvpkpE2ZlZI6oiG41RC+gVqV YEDVMSk6Rl7FqoBkkuKnwBP//qEt6ghFVoocf6evYDCXLcEP72bZeUWXk8xsayCa 1XauCQuzcowGCK3fc0o7DN6d+0D+hDrCtGXUEJ0J9FRsTNzpsA4HY/i9vKv0OK8Y LX65YaBW9RqvBn9CPEzUhRGzTMGvG3opy7TZWJNJf1y17qNmcG4yXL5YMlp7d1eh hZXZ3tNnPEhp6r4NX7dSFJe8qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6uzU8o c4wk6Bi6XUrrPAOZXMm/MB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZH1mtA6GcmZMqw9YHNzf/NTxMSxWUbD2N6KwTvVZpCMrMZ6AsyDQr 6WHZeWTpWFmF62A0BRnq4qKe8EyAJ9pQGZxo0i2WPT19WaxkYE1ECnuiscaAuOvY CRZ3fb9mNMATJLNo0uCXAe/S7a+iPz8j1dFZ2SeMKzb0UO8kjVFZtatRJYA0MtTZ YG+ig5ekLuqcWgKCLqqHehh3FlGOCG6//We8k7UaPg1ChZr3OnZqSpBWRF7RHaL5 bu5yPJ7wpABBpB5X9H9YIUov9TDplWrMvPJJSWTXoDPc/VDe89vtb3p1eAvm9ukR TAVP5nNQnuhrLjenaeoQGJUO/SNzBRJj -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:47 2025 by rpki-client