$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: hiM/HZ+vUSEufo/2fVINVx0rYSdumvv9DrWV11BsxBk= Subject key identifier: E1:DA:47:1F:4E:9E:F3:BE:62:32:4A:A3:9F:EA:17:E0:05:79:DC:15 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 01A1 Signing time: Wed 05 Nov 2025 03:25:51 +0000 Manifest this update: Wed 05 Nov 2025 03:25:51 +0000 Manifest next update: Wed 12 Nov 2025 03:25:51 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: 5QNBuS4cA5A17dltYiO6ey4bmeJvpGoz/PBLMbp3P3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Nov 5 03:25:51 2025 GMT Not After : Nov 12 03:25:51 2025 GMT Subject: CN=690ac3bf-93c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:b9:0f:62:4b:0c:8d:84:63:ff:a0:3b:39: 94:62:fa:1f:c4:e6:8a:fd:7f:96:05:48:b5:6f:20: 4f:1e:2e:a0:d5:b8:04:cd:eb:fd:a7:c6:d1:8f:3c: e3:5a:07:fe:5c:90:b1:61:f4:2f:f6:27:df:09:82: 22:fd:6f:c2:ea:a1:5e:67:67:1c:d0:a0:14:95:21: f9:a4:a4:b2:c5:ca:29:df:76:81:8f:53:61:b4:2e: fc:c2:ff:53:fc:87:a3:1c:f5:37:13:14:a1:19:a7: 70:91:9d:c9:e9:b2:ee:e6:f0:0d:68:00:6b:e4:90: 96:cb:e2:b8:e5:2d:2c:04:8a:ba:a7:7d:fe:61:92: 9b:a7:5d:4d:9f:b3:5c:94:aa:f0:18:50:35:f6:be: 63:56:c9:07:7a:64:22:d6:9c:2b:2b:85:25:03:5a: 8e:40:65:2a:3b:68:0d:f5:73:b0:03:83:b5:fa:0e: 46:d0:fc:a1:07:dd:da:2f:b3:3b:0a:2f:02:01:8b: ab:43:f7:e2:dc:65:e0:b0:28:08:40:0a:14:73:38: 46:c8:d0:75:41:0c:80:83:bd:9b:61:9c:be:b8:d5: b1:91:48:4a:42:87:8d:52:85:df:19:e7:90:d4:bd: 23:c7:5f:36:74:a5:e4:6d:04:87:4d:c6:1b:25:88: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:47:1F:4E:9E:F3:BE:62:32:4A:A3:9F:EA:17:E0:05:79:DC:15 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:5e:48:e9:79:5a:6d:4a:cc:f5:23:23:e2:f8:cd:ac:87:44: d2:b3:a4:7b:73:90:a7:76:c6:84:ba:b8:7b:46:12:d4:8a:6e: 6d:6f:e8:d2:ed:a4:f2:40:16:f2:46:78:86:42:7e:84:75:97: 27:35:76:dd:8b:e0:1a:1e:e1:dd:b9:b1:e8:8b:4a:d8:24:87: 47:85:31:df:a4:22:fc:ac:93:23:0b:4e:be:88:d1:da:14:45: c5:1b:11:7b:57:c6:80:5b:69:b6:44:8e:16:95:85:36:e3:e6: df:52:dc:c9:36:d8:57:4c:54:e2:f4:99:f3:7c:2c:c7:00:40: 06:61:e1:49:30:cd:1c:2d:59:49:b2:ac:a4:87:2e:9f:b6:fe: c3:12:b8:f3:65:8f:e2:d8:0c:4b:b9:41:a7:0e:4b:46:b9:67: 48:32:dd:38:b9:16:9e:0c:e1:ec:e5:e3:6c:62:7f:99:05:d5: 7c:26:52:02:07:65:ff:4c:25:c9:56:1d:cd:13:ed:14:7a:91: ad:7a:47:d0:5e:84:c5:69:84:62:8a:48:dd:60:15:7f:63:7d: 74:e2:ac:13:b4:64:15:9e:d4:40:60:0d:46:ab:c3:02:71:2e: 9f:8f:fd:e6:66:fd:9a:23:34:a8:52:a2:4f:99:d5:e7:3e:47: f0:96:2b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjUxMTA1MDMyNTUxWhcNMjUxMTEyMDMyNTUxWjAYMRYwFAYD VQQDEw02OTBhYzNiZi05M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeK5D2JLDI2EY/+gOzmUYvofxOaK/X+WBUi1byBPHi6g1bgEzev9p8bRjzzj Wgf+XJCxYfQv9iffCYIi/W/C6qFeZ2cc0KAUlSH5pKSyxcop33aBj1NhtC78wv9T /IejHPU3ExShGadwkZ3J6bLu5vANaABr5JCWy+K45S0sBIq6p33+YZKbp11Nn7Nc lKrwGFA19r5jVskHemQi1pwrK4UlA1qOQGUqO2gN9XOwA4O1+g5G0PyhB93aL7M7 Ci8CAYurQ/fi3GXgsCgIQAoUczhGyNB1QQyAg72bYZy+uNWxkUhKQoeNUoXfGeeQ 1L0jx182dKXkbQSHTcYbJYg8zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHaRx9O nvO+YjJKo5/qF+AFedwVMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhXkjpeVptSsz1IyPi+M2sh0TSs6R7c5CndsaEurh7RhLUim5tb+jS 7aTyQBbyRniGQn6EdZcnNXbdi+AaHuHdubHoi0rYJIdHhTHfpCL8rJMjC06+iNHa FEXFGxF7V8aAW2m2RI4WlYU24+bfUtzJNthXTFTi9JnzfCzHAEAGYeFJMM0cLVlJ sqykhy6ftv7DErjzZY/i2AxLuUGnDktGuWdIMt04uRaeDOHs5eNsYn+ZBdV8JlIC B2X/TCXJVh3NE+0UepGtekfQXoTFaYRiikjdYBV/Y3104qwTtGQVntRAYA1Gq8MC cS6fj/3mZv2aIzSoUqJPmdXnPkfwlit4 -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:07 2025 by rpki-client