$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json) Hash identifier: VyFD3SD3ZdOoFehE68h5e5eTfbxP/cOBQX0oMc3wzXY= Subject key identifier: 4E:EB:BC:50:20:63:2B:2E:76:72:0A:C1:08:E0:24:C1:56:1D:9C:1E Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft Manifest number: D9 Signing time: Wed 05 Nov 2025 05:45:33 +0000 Manifest this update: Wed 05 Nov 2025 05:45:33 +0000 Manifest next update: Wed 12 Nov 2025 05:45:33 +0000 Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: tSw6xH2N6vayXe4OgEozI7w71IO4LI+eP/ExEIjHfbI=) 2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: Aikvd4VQaZ5YWJuoaQst8o1un+A8abkdzu+IgmJpwMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Validity Not Before: Nov 5 05:45:33 2025 GMT Not After : Nov 12 05:45:33 2025 GMT Subject: CN=690ae47d-1be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:b1:4d:77:1e:f5:c4:d0:fe:02:02:49:cf: 7a:79:90:4e:36:15:48:9c:b7:ff:4f:6e:2a:54:2b: d9:0e:18:c9:54:94:92:91:57:23:b3:5b:62:05:9e: 55:7e:e1:0f:dd:89:e8:09:ea:f9:e6:1b:29:fd:96: d2:e8:48:0e:8b:aa:1d:50:ff:87:20:60:bf:e5:cf: a6:79:b6:a8:c5:44:65:e4:92:b1:39:02:68:e2:53: cb:40:af:43:79:0e:82:ca:51:ef:1b:98:01:bf:22: 2f:5d:9c:c4:87:b7:17:35:27:7c:f1:64:85:69:3c: 70:d9:2d:b5:0e:a5:04:b8:a5:e2:06:50:85:32:9c: 2d:b8:cd:e4:f5:53:26:87:a4:e5:70:f5:31:bf:ce: 99:2c:89:9d:e2:d2:c7:b6:28:05:a7:dc:e1:8f:88: 1a:69:cd:8e:3f:db:dc:ad:8e:09:21:79:0d:ec:f9: fa:51:cc:56:f4:a4:01:24:9a:b5:c3:d0:55:51:a8: ee:dc:20:eb:92:cb:60:4f:a8:20:4d:4b:f8:09:7f: 9f:3b:0c:e4:fd:dc:d8:01:97:d6:98:23:cd:92:57: 53:e4:99:37:03:6b:f7:fe:66:ef:7b:f1:cd:d6:86: f6:b0:72:e9:91:63:f6:0f:4f:73:8f:bd:8a:c9:e2: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:BC:50:20:63:2B:2E:76:72:0A:C1:08:E0:24:C1:56:1D:9C:1E X509v3 Authority Key Identifier: keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:31:d8:3d:6d:bd:ea:1a:86:ed:84:be:62:d5:b0:9b:8b: ee:b3:80:ee:ca:4f:6d:36:11:ba:9c:63:15:7a:77:3e:49:b0: a9:49:c0:d1:57:f4:25:6d:7b:52:36:de:bf:22:42:63:3a:06: 5d:49:cd:87:c1:62:61:04:b9:4e:33:bb:aa:7c:28:dd:70:a6: 3f:af:3a:c0:ec:11:ae:e5:24:e7:79:41:90:6a:67:f0:14:60: a5:2a:3e:35:7c:53:f7:c6:bd:32:5d:c7:d1:5d:9b:df:b1:d9: 8e:ce:9d:c5:ff:8a:0e:11:48:90:c1:0b:aa:c0:32:fd:3c:57: d3:22:85:2f:47:e4:09:0f:68:18:d7:7c:c1:7c:d9:0e:43:bc: ce:da:99:c7:39:53:26:48:f2:03:de:d5:0d:ac:e6:1a:90:d9: fc:e4:2e:0d:5f:3b:97:56:a0:38:94:49:23:60:3c:aa:80:23: 4d:94:c9:97:e2:ea:78:47:c2:03:10:b1:88:b4:21:b8:36:e5: 14:9c:e8:5f:c7:ed:88:73:7a:7e:6b:81:4c:a8:2c:4b:99:9f: 63:0a:20:ab:6d:86:52:31:ce:eb:18:90:74:25:6c:e3:fe:5e: 89:46:eb:04:67:f2:36:d0:07:ce:a9:75:47:54:1a:75:59:9e: b1:77:20:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKDM4MTdDRkUwMEE1RjFBQ0MzNjNCNDcyRjRGNjlEQTgz QkVCNTY2MTMwHhcNMjUxMTA1MDU0NTMzWhcNMjUxMTEyMDU0NTMzWjAYMRYwFAYD VQQDEw02OTBhZTQ3ZC0xYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbOxTXce9cTQ/gICSc96eZBONhVInLf/T24qVCvZDhjJVJSSkVcjs1tiBZ5V fuEP3YnoCer55hsp/ZbS6EgOi6odUP+HIGC/5c+mebaoxURl5JKxOQJo4lPLQK9D eQ6CylHvG5gBvyIvXZzEh7cXNSd88WSFaTxw2S21DqUEuKXiBlCFMpwtuM3k9VMm h6TlcPUxv86ZLImd4tLHtigFp9zhj4gaac2OP9vcrY4JIXkN7Pn6UcxW9KQBJJq1 w9BVUaju3CDrkstgT6ggTUv4CX+fOwzk/dzYAZfWmCPNkldT5Jk3A2v3/mbve/HN 1ob2sHLpkWP2D09zj72KyeKESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7rvFAg YysudnIKwQjgJMFWHZweMB8GA1UdIwQYMBaAFDgXz+AKXxrMNjtHL09p2oO+tWYT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9EMTE4QzBCQzZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdzdzJPMGN2VDJuYWc3NjFa aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9EMTE4QzBCQzZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdz dzJPMGN2VDJuYWc3NjFaaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJbjHYPW296hqG7YS+YtWwm4vus4Duyk9tNhG6nGMVenc+SbCpScDR V/QlbXtSNt6/IkJjOgZdSc2HwWJhBLlOM7uqfCjdcKY/rzrA7BGu5STneUGQamfw FGClKj41fFP3xr0yXcfRXZvfsdmOzp3F/4oOEUiQwQuqwDL9PFfTIoUvR+QJD2gY 13zBfNkOQ7zO2pnHOVMmSPID3tUNrOYakNn85C4NXzuXVqA4lEkjYDyqgCNNlMmX 4up4R8IDELGItCG4NuUUnOhfx+2Ic3p+a4FMqCxLmZ9jCiCrbYZSMc7rGJB0JWzj /l6JRusEZ/I20AfOqXVHVBp1WZ6xdyDu -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:05 2025 by rpki-client