$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: NAj1nMd4r0u4zehuMV4racG4sIPhLTG3ittlIJhYDNs= Subject key identifier: 96:96:52:3C:FD:12:F0:2C:DF:DD:02:28:5C:BE:56:06:61:96:C3:27 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 34F3 Signing time: Tue 04 Nov 2025 14:32:59 +0000 Manifest this update: Tue 04 Nov 2025 14:32:58 +0000 Manifest next update: Tue 11 Nov 2025 14:32:58 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: JFf4EGulb82xm2ZzrRRLhXD1ghSiNmWfxK6X9ObWh+0=) 2: F175093C71A411F09351784AC4F9AE02.roa (hash: sX+/MXQGa3XOHWne5n8WyzQHADebdwQ8tiP703yRh44=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: RpwdGJeEWb/3FqZBI7k4hyBai/WEVbuoaZIuDveesGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13576 (0x3508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Nov 4 14:32:58 2025 GMT Not After : Nov 11 14:32:58 2025 GMT Subject: CN=690a0e9b-6ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:18:25:ba:7f:c1:71:2e:05:2c:ba:d9:14: 83:25:df:57:cf:95:03:86:75:31:88:89:07:eb:82: 36:60:51:6d:9b:af:4c:bf:d4:53:ea:a6:78:f4:e7: 03:0f:06:66:54:2a:b2:dc:be:61:0e:9c:e7:b5:4e: 8b:e5:4b:72:6c:03:cb:ed:54:66:f6:97:c7:a1:6f: 7a:b5:20:63:67:bf:93:31:df:98:f0:b0:a6:84:8a: 42:ea:43:c3:8c:03:69:5d:54:76:73:a9:6c:e1:cf: 0a:e4:45:6c:b9:49:cb:b4:30:ee:8e:2c:f6:d7:de: b9:88:91:6c:8e:2b:8f:d0:fd:ee:ec:a4:b6:87:74: a6:f1:a3:ea:02:16:14:d0:ab:9f:df:8e:e1:99:7c: c5:14:3d:c2:47:cb:5b:8e:a1:7b:22:6e:2c:26:b3: 1f:d8:90:7e:90:f6:38:64:07:77:c6:89:ad:e2:a9: c7:0a:7b:31:96:6b:f7:54:74:d1:0d:cf:70:09:9a: 03:45:61:a9:95:f8:59:37:48:76:b9:40:6f:11:03: 99:c5:3b:e0:17:74:df:6b:a9:68:ba:8f:c7:a4:05: 61:e1:25:79:de:94:db:80:fa:88:5e:0b:e3:7f:6d: ef:0f:51:11:d6:2b:65:53:30:87:ac:db:79:a2:03: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:96:52:3C:FD:12:F0:2C:DF:DD:02:28:5C:BE:56:06:61:96:C3:27 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bf:34:48:c2:07:21:f4:cb:37:38:4e:13:1b:12:b4:a2:84: de:e4:7a:37:b9:0f:65:29:a1:62:19:47:02:5d:16:8f:15:2b: 32:e2:57:d9:f5:30:11:50:0b:7a:48:14:d3:7a:6a:cb:1c:e6: b1:17:04:26:38:71:f1:95:f6:3e:a9:a8:a6:bf:7c:73:76:08: a4:23:62:55:cf:e0:c5:ab:a2:57:30:2d:13:6a:9a:d5:03:53: 97:11:43:80:9a:1d:ce:6a:60:d9:b0:7a:99:df:46:ab:41:b1: 18:d6:81:44:aa:89:3f:cb:33:07:de:09:7a:81:65:4a:65:ad: d2:d5:ca:cc:1a:ab:e6:5c:70:c3:38:e9:c1:b6:ca:90:8c:23: 00:32:90:1f:37:86:ee:5f:22:14:9e:1b:d4:c2:c5:58:d0:06: 93:85:4d:14:58:df:dd:1c:9a:f3:1d:c6:5e:2f:16:38:42:3f: 35:87:7e:6e:15:85:99:f2:c0:ea:a4:4b:fa:bf:87:b3:ea:7a: bb:c5:98:f0:47:d6:c2:6b:ab:8b:ab:cc:2d:fc:f9:c9:c4:0c: 4b:d1:e0:49:b7:c4:10:2d:19:d5:4b:3e:3d:a3:16:3f:70:a1: 5f:3f:a7:d8:e5:58:1f:16:df:f5:b5:5d:47:5b:77:b9:99:32: 81:d1:a7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjUxMTA0MTQzMjU4WhcNMjUxMTExMTQzMjU4WjAYMRYwFAYD VQQDEw02OTBhMGU5Yi02ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueYYJbp/wXEuBSy62RSDJd9Xz5UDhnUxiIkH64I2YFFtm69Mv9RT6qZ49OcD DwZmVCqy3L5hDpzntU6L5UtybAPL7VRm9pfHoW96tSBjZ7+TMd+Y8LCmhIpC6kPD jANpXVR2c6ls4c8K5EVsuUnLtDDujiz21965iJFsjiuP0P3u7KS2h3Sm8aPqAhYU 0Kuf347hmXzFFD3CR8tbjqF7Im4sJrMf2JB+kPY4ZAd3xomt4qnHCnsxlmv3VHTR Dc9wCZoDRWGplfhZN0h2uUBvEQOZxTvgF3Tfa6louo/HpAVh4SV53pTbgPqIXgvj f23vD1ER1itlUzCHrNt5ogMHJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaWUjz9 EvAs390CKFy+VgZhlsMnMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcvzRIwgch9Ms3OE4TGxK0ooTe5Ho3uQ9lKaFiGUcCXRaPFSsy4lfZ 9TARUAt6SBTTemrLHOaxFwQmOHHxlfY+qaimv3xzdgikI2JVz+DFq6JXMC0TaprV A1OXEUOAmh3OamDZsHqZ30arQbEY1oFEqok/yzMH3gl6gWVKZa3S1crMGqvmXHDD OOnBtsqQjCMAMpAfN4buXyIUnhvUwsVY0AaThU0UWN/dHJrzHcZeLxY4Qj81h35u FYWZ8sDqpEv6v4ez6nq7xZjwR9bCa6uLq8wt/PnJxAxL0eBJt8QQLRnVSz49oxY/ cKFfP6fY5VgfFt/1tV1HW3e5mTKB0ads -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:19 2025 by rpki-client