$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: q9AvH590iKn3HPiszSInd/Avh7S9o1JkpfFkHqoBwr0= Subject key identifier: 50:7E:03:A0:2C:5D:0A:AC:08:01:11:84:4E:09:83:4B:D6:02:03:79 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0112 Signing time: Mon 03 Nov 2025 04:59:36 +0000 Manifest this update: Mon 03 Nov 2025 04:59:35 +0000 Manifest next update: Mon 10 Nov 2025 04:59:35 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: EwS0pWbvAs3wUJiF6eaIaZiIhPmcMIGI+MOamstZdcI=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: d8hqa3VZK4uOVZ2NvSviBU2tKSi94lw2kqJ0YIkiOVk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: 4xCjhLIdX51ri4H5JFEDOXxLAoM3aQzhavfN2qSp8lM=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: 4rxa1nn9pIW4f6C2tqJ4BWqQLDcGWeXHub2QF8i41eo=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: zHkwstjBU9okILb/X+WL5mE12pvjEZDjhxeOKIBOBNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Nov 3 04:59:35 2025 GMT Not After : Nov 10 04:59:35 2025 GMT Subject: CN=690836b7-2669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:9f:41:5e:2e:f5:ed:9b:2c:82:2a:f0:69: cc:83:b9:29:bb:32:82:4f:50:12:3a:00:47:79:aa: b7:8d:65:3c:09:3d:19:4a:74:fe:d5:03:0e:4b:ba: b4:47:ad:9d:7f:96:61:7d:5f:47:3e:3d:03:90:19: 5c:35:3d:83:60:d0:b0:dc:b0:80:73:d3:a6:45:10: 3f:88:12:69:8b:4f:23:a5:50:d5:e6:a5:1c:06:bf: fa:bb:54:39:d4:29:2f:07:59:34:1d:a5:ca:e6:dd: ca:28:b0:97:aa:ac:16:ea:e4:2b:9b:ee:8e:85:77: c8:6f:aa:91:a2:60:82:31:c7:30:09:bb:29:73:f0: 6b:2c:60:1b:6c:3b:a1:3a:61:0b:f8:45:92:e8:7e: ca:76:50:f0:ae:4f:e7:24:39:99:2b:3d:8e:87:c5: e7:92:be:a4:eb:1a:a3:f7:d3:f6:f4:c6:53:d9:1b: 87:49:f9:e2:31:16:11:89:57:d7:9b:3d:82:41:16: 51:5a:9a:e1:c3:b7:f3:77:4d:08:0b:b8:16:00:57: df:f2:7b:e9:52:76:22:14:59:94:43:82:f2:c1:fc: 26:34:2c:d1:ca:35:1f:88:4d:6e:0b:64:ce:39:a5: f4:f4:5c:ac:0a:56:00:63:12:d8:28:78:04:d0:b9: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:03:A0:2C:5D:0A:AC:08:01:11:84:4E:09:83:4B:D6:02:03:79 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ad:c7:7a:30:b6:4c:af:9a:86:a9:2b:d1:05:18:88:6c:73: c2:c1:d1:1c:ec:21:dc:3f:4b:9c:3a:8e:18:82:f7:7e:78:b1: 3a:c3:1d:07:bd:6c:62:3a:97:2a:47:46:40:55:70:42:cd:f2: c3:a8:13:89:84:ba:87:30:b0:ab:55:07:e1:79:7a:21:3c:1a: d7:77:4d:21:35:52:0f:9e:4e:b2:d9:a1:b7:36:ef:e8:43:79: 90:8d:cd:7e:e8:d5:04:09:b3:5b:54:b4:bf:bc:27:9e:41:dd: 7f:5d:71:b4:54:35:8f:a5:7c:e2:e1:06:ca:1b:c1:59:d5:86: 9b:98:9a:b2:d7:e6:49:86:10:06:80:06:c2:4c:b4:e9:20:ed: 3d:21:cf:11:4e:84:15:32:25:85:20:3e:58:1c:98:85:9a:5b: 0e:cf:0a:03:fc:f4:d8:09:7a:e5:5a:74:ad:01:f4:10:cd:6f: e0:0a:12:d4:49:18:9b:2a:36:66:a6:ec:ed:fd:a7:54:df:c8: 0a:41:13:40:dd:87:b9:17:8b:a4:0f:87:82:f1:9a:c6:4f:6a: 00:62:70:04:22:3c:f5:e7:11:e0:6c:a2:43:4a:9c:51:ef:62: 1e:68:3d:cc:ca:4f:1f:9b:f1:48:64:c4:ae:66:95:61:3f:a7: f3:dc:02:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMTAzMDQ1OTM1WhcNMjUxMTEwMDQ1OTM1WjAYMRYwFAYD VQQDEw02OTA4MzZiNy0yNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRqfQV4u9e2bLIIq8GnMg7kpuzKCT1ASOgBHeaq3jWU8CT0ZSnT+1QMOS7q0 R62df5ZhfV9HPj0DkBlcNT2DYNCw3LCAc9OmRRA/iBJpi08jpVDV5qUcBr/6u1Q5 1CkvB1k0HaXK5t3KKLCXqqwW6uQrm+6OhXfIb6qRomCCMccwCbspc/BrLGAbbDuh OmEL+EWS6H7KdlDwrk/nJDmZKz2Oh8Xnkr6k6xqj99P29MZT2RuHSfniMRYRiVfX mz2CQRZRWprhw7fzd00IC7gWAFff8nvpUnYiFFmUQ4LywfwmNCzRyjUfiE1uC2TO OaX09FysClYAYxLYKHgE0LlUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB+A6As XQqsCAERhE4Jg0vWAgN5MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIrcd6MLZMr5qGqSvRBRiIbHPCwdEc7CHcP0ucOo4Ygvd+eLE6wx0H vWxiOpcqR0ZAVXBCzfLDqBOJhLqHMLCrVQfheXohPBrXd00hNVIPnk6y2aG3Nu/o Q3mQjc1+6NUECbNbVLS/vCeeQd1/XXG0VDWPpXzi4QbKG8FZ1YabmJqy1+ZJhhAG gAbCTLTpIO09Ic8RToQVMiWFID5YHJiFmlsOzwoD/PTYCXrlWnStAfQQzW/gChLU SRibKjZmpuzt/adU38gKQRNA3Ye5F4ukD4eC8ZrGT2oAYnAEIjz15xHgbKJDSpxR 72IeaD3Myk8fm/FIZMSuZpVhP6fz3AIp -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:45 2025 by rpki-client