$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: Ov/W7rG+j/tqlmywh0ma56o0E5jbZwlizhcPsjWrnkE= Subject key identifier: 25:DC:43:1F:A3:7F:C7:44:47:2C:62:51:1B:68:DA:83:3D:4E:F6:C3 Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0257 Signing time: Wed 05 Nov 2025 01:49:58 +0000 Manifest this update: Wed 05 Nov 2025 01:49:57 +0000 Manifest next update: Wed 12 Nov 2025 01:49:57 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: 2fUD81jhf/Nfb5E1eRX3TDrup+9UEZAEnkA3MFR3L3E=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Nov 5 01:49:57 2025 GMT Not After : Nov 12 01:49:57 2025 GMT Subject: CN=690aad46-edc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:a9:ab:e6:ce:61:af:e2:4e:d6:5a:13:a9: 2c:02:c3:cb:74:1c:10:a3:ce:59:23:55:59:59:be: cb:3a:3f:5a:50:4f:a5:fc:9c:3a:fa:26:c9:f6:c2: 99:15:38:3a:d1:76:93:08:af:2e:73:26:c8:7f:91: 75:5b:2d:c7:a0:e1:45:3e:99:bd:ad:0f:c9:57:70: 72:c7:22:76:22:36:b0:a4:99:f4:c1:bd:27:6a:35: 8a:84:fd:ac:96:ba:c9:4c:6e:e5:40:2f:a4:1c:1b: 6a:f2:11:39:94:46:c7:1e:41:3d:43:5e:44:72:8b: 1c:6c:5d:d5:57:c5:40:a3:3f:e7:2b:0b:05:d0:fd: 57:45:c5:ee:f5:23:5d:72:bb:e6:09:66:35:1c:42: 97:a9:e7:ae:79:cf:63:c2:d4:9e:cc:f7:d5:91:a4: 15:fa:98:d6:80:b6:09:12:ff:7b:60:32:31:98:46: f9:ff:19:d2:c5:c1:05:2e:41:83:c5:a5:18:d2:9a: 26:f5:78:7d:d9:97:dd:ec:a8:72:8b:c5:04:64:d7: d1:1f:dd:09:d5:46:1a:88:5a:91:9d:c2:97:6b:7f: 7b:55:d0:ad:7f:ea:07:21:6c:e1:c0:a1:ff:44:34: 82:b7:dd:85:a6:6d:ad:0c:04:66:12:c5:71:ed:f0: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:43:1F:A3:7F:C7:44:47:2C:62:51:1B:68:DA:83:3D:4E:F6:C3 X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:de:91:7b:11:1f:c4:fe:01:3d:d1:3f:7b:c5:06:52:e8:69: 93:0e:5c:f6:ab:62:73:9a:a9:e5:40:e0:cb:fa:48:ef:bb:66: b1:a2:47:2e:b5:bf:24:b2:b0:3a:40:5a:71:1b:e0:42:3a:d3: 21:dc:37:78:16:cc:d6:3e:81:81:ef:63:63:02:b2:22:ac:bc: 46:56:3a:41:8a:55:88:ff:c2:f7:69:75:30:c5:17:7a:ea:e1: 65:fd:76:af:af:de:d4:ae:34:ea:23:8c:bf:fd:57:a8:b2:66: 40:ca:05:9e:40:47:fa:3d:bf:70:55:17:35:41:01:21:47:84: f9:66:17:2a:36:9c:c1:9f:39:f8:9e:e8:0f:53:e4:f1:7a:f1: e9:48:4c:ea:a3:2c:55:16:8a:cc:4a:c6:23:b5:99:00:62:e7: 8b:91:c4:ab:d6:97:b8:12:bf:24:80:94:4e:f5:28:49:87:da: b9:84:f8:94:2f:86:42:16:70:5f:43:0d:32:43:c3:92:05:de: c3:56:8d:38:9a:83:40:f9:7d:c9:c8:7f:0d:61:2d:a3:c9:a2: 97:2b:7a:ff:78:c8:28:c4:83:c0:fd:21:4a:a0:0a:7d:d5:07: ad:1f:3e:10:e4:18:20:4c:e8:ec:4b:ea:01:52:5b:68:1b:09: bc:58:2b:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUxMTA1MDE0OTU3WhcNMjUxMTEyMDE0OTU3WjAYMRYwFAYD VQQDEw02OTBhYWQ0Ni1lZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhipq+bOYa/iTtZaE6ksAsPLdBwQo85ZI1VZWb7LOj9aUE+l/Jw6+ibJ9sKZ FTg60XaTCK8ucybIf5F1Wy3HoOFFPpm9rQ/JV3ByxyJ2IjawpJn0wb0najWKhP2s lrrJTG7lQC+kHBtq8hE5lEbHHkE9Q15EcoscbF3VV8VAoz/nKwsF0P1XRcXu9SNd crvmCWY1HEKXqeeuec9jwtSezPfVkaQV+pjWgLYJEv97YDIxmEb5/xnSxcEFLkGD xaUY0pom9Xh92Zfd7Khyi8UEZNfRH90J1UYaiFqRncKXa397VdCtf+oHIWzhwKH/ RDSCt92Fpm2tDARmEsVx7fCeIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXcQx+j f8dERyxiURto2oM9TvbDMB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG3pF7ER/E/gE90T97xQZS6GmTDlz2q2JzmqnlQODL+kjvu2axokcu tb8ksrA6QFpxG+BCOtMh3Dd4FszWPoGB72NjArIirLxGVjpBilWI/8L3aXUwxRd6 6uFl/Xavr97UrjTqI4y//VeosmZAygWeQEf6Pb9wVRc1QQEhR4T5ZhcqNpzBnzn4 nugPU+TxevHpSEzqoyxVForMSsYjtZkAYueLkcSr1pe4Er8kgJRO9ShJh9q5hPiU L4ZCFnBfQw0yQ8OSBd7DVo04moNA+X3JyH8NYS2jyaKXK3r/eMgoxIPA/SFKoAp9 1QetHz4Q5BggTOjsS+oBUltoGwm8WCv7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:17 2025 by rpki-client