$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft File: o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json) Hash identifier: MBpPJ/bRFjpmlmObRKz3p+DnlemlWngvF4oSqYzIRYc= Subject key identifier: 6F:6E:6C:19:F6:B1:F9:4B:2C:D7:8F:72:2B:0B:D3:84:DE:BD:8C:5B Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 Certificate issuer: /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft Manifest number: 0437 Signing time: Mon 03 Nov 2025 00:14:07 +0000 Manifest this update: Mon 03 Nov 2025 00:14:07 +0000 Manifest next update: Mon 10 Nov 2025 00:14:07 +0000 Files and hashes: 1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: daRr11nwh4HxKBVamtE1oJfRGqpLRl28wSx1Bagnl7c=) 2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 7VcZosPp1uH1LHkRjpyCPhzaiPyFOlncH9YUjxzCpg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3 Validity Not Before: Nov 3 00:14:07 2025 GMT Not After : Nov 10 00:14:07 2025 GMT Subject: CN=6907f3cf-b4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:7a:94:75:70:d3:3e:6e:c8:9f:41:6f:f8: 80:c6:b5:b1:38:4c:94:c5:aa:eb:57:e2:dd:03:61: 9e:94:d0:cf:1d:61:d9:15:d6:41:9a:da:d7:f2:7f: a3:64:01:d3:43:2c:7d:27:4d:a6:5e:86:b7:4f:64: 73:c9:ff:af:03:66:14:50:22:1b:6b:4e:22:2c:95: d1:67:f2:ff:f8:11:b9:aa:96:54:2f:25:3b:62:71: 73:a0:3b:fe:13:c9:27:9e:a7:6e:b1:11:0f:f8:7c: 15:a1:15:3d:9c:58:52:9b:dc:2d:8c:36:9f:75:40: f9:01:5e:8e:44:bc:2f:35:03:17:27:fa:4c:fe:b9: 8d:75:94:83:96:ff:03:61:c7:d2:f5:ed:59:f9:76: 95:e2:72:ab:3c:27:34:b2:33:b2:0a:34:2d:73:90: 82:a1:c1:0f:f5:19:5d:f7:a3:21:ea:4a:23:da:51: 16:1c:57:e0:1b:4d:34:b3:3f:3f:e3:13:e0:ec:73: 97:54:76:d1:96:68:dc:40:d9:0a:79:68:1d:f6:4e: 9e:c6:80:10:fc:bf:a8:6d:37:5d:4e:71:75:a5:19: 2b:7f:af:25:23:45:1b:50:30:96:31:5e:8c:62:fb: a1:c7:be:78:8a:05:52:a7:fb:f3:a1:88:d0:69:0a: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:6C:19:F6:B1:F9:4B:2C:D7:8F:72:2B:0B:D3:84:DE:BD:8C:5B X509v3 Authority Key Identifier: keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:15:5d:a9:c1:cc:3b:00:ef:bd:58:4e:45:76:e7:bc:69:77: ab:73:a7:21:d8:24:9c:a8:c9:f6:44:4e:4c:1e:26:97:f3:b0: 8b:3d:9a:90:ce:4a:f9:1c:b3:55:f6:28:dd:9b:47:95:12:80: a7:95:13:65:ea:38:26:60:0c:5d:a7:2f:68:bb:0d:c9:b9:ad: b5:c1:63:ed:7f:a2:80:20:b4:82:31:75:e6:8f:08:13:d4:62: 70:0a:1d:31:6c:ae:40:cd:4b:e4:02:00:b3:95:75:e8:0d:90: 38:ec:3f:b5:ed:6a:f5:ce:1c:1a:7d:be:79:f6:56:ab:03:cc: 05:ff:39:1e:42:99:33:ed:36:3f:1c:58:da:3d:8c:84:a6:f3: 2b:8e:b4:6d:10:b9:78:81:5a:3f:37:57:18:7f:51:9e:6c:bd: ff:c7:d3:9a:f6:7f:fa:4d:74:ae:fd:99:14:6d:37:cf:ab:74: 6c:c0:f7:bf:ae:c1:7a:b9:6c:d2:8c:e0:fc:ab:66:eb:f4:d8: a5:69:70:97:1f:70:d4:e6:98:03:35:80:70:7a:fb:8f:b9:d7: c7:63:21:83:94:6e:8f:64:8a:87:d3:d2:69:65:0d:61:88:75: 37:98:41:25:96:b5:e2:76:1e:69:ce:d3:97:bd:5f:3b:47:6c: f9:45:71:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxNUQxMTAvBgNVBAUTKEEzOThERkQ0RDM5NzVFQUI5NkZEMzgwMzM5NjgyNDZF NDc1RTI4QjMwHhcNMjUxMTAzMDAxNDA3WhcNMjUxMTEwMDAxNDA3WjAYMRYwFAYD VQQDEw02OTA3ZjNjZi1iNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTp6lHVw0z5uyJ9Bb/iAxrWxOEyUxarrV+LdA2GelNDPHWHZFdZBmtrX8n+j ZAHTQyx9J02mXoa3T2Rzyf+vA2YUUCIba04iLJXRZ/L/+BG5qpZULyU7YnFzoDv+ E8knnqdusREP+HwVoRU9nFhSm9wtjDafdUD5AV6ORLwvNQMXJ/pM/rmNdZSDlv8D YcfS9e1Z+XaV4nKrPCc0sjOyCjQtc5CCocEP9Rld96Mh6koj2lEWHFfgG000sz8/ 4xPg7HOXVHbRlmjcQNkKeWgd9k6exoAQ/L+obTddTnF1pRkrf68lI0UbUDCWMV6M Yvuhx754igVSp/vzoYjQaQomBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9ubBn2 sflLLNePcisL04TevYxbMB8GA1UdIwQYMBaAFKOY39TTl16rlv04AzloJG5HXiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTE1RC83MTA5RUZDNDdE QzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhxdVdfVGdET1dna2JrZGVL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281amYxTk9YWHF1V19UZ0RPV2drYmtkZUtMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTE1RC83MTA5RUZDNDdEQzkxMUVDQkJGQjZGMjRDNEY5QUUwMi9vNWpmMU5PWFhx dVdfVGdET1dna2JrZGVLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDFV2pwcw7AO+9WE5Fdue8aXerc6ch2CScqMn2RE5MHiaX87CLPZqQ zkr5HLNV9ijdm0eVEoCnlRNl6jgmYAxdpy9ouw3Jua21wWPtf6KAILSCMXXmjwgT 1GJwCh0xbK5AzUvkAgCzlXXoDZA47D+17Wr1zhwafb559larA8wF/zkeQpkz7TY/ HFjaPYyEpvMrjrRtELl4gVo/N1cYf1GebL3/x9Oa9n/6TXSu/ZkUbTfPq3RswPe/ rsF6uWzSjOD8q2br9NilaXCXH3DU5pgDNYBwevuPudfHYyGDlG6PZIqH09JpZQ1h iHU3mEEllrXidh5pztOXvV87R2z5RXE5 -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:09 2025 by rpki-client