$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json) Hash identifier: p8D7oh8fg8S1To4uh+w7EspTzQCh0645OKO5Zw6ElKQ= Subject key identifier: 65:5B:6E:A2:6E:85:BD:DD:84:AA:7C:2E:28:83:1B:A1:99:17:15:47 Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft Manifest number: 0625 Signing time: Sun 02 Nov 2025 22:45:57 +0000 Manifest this update: Sun 02 Nov 2025 22:45:56 +0000 Manifest next update: Sun 09 Nov 2025 22:45:56 +0000 Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: I4jx4MKFrz/Q9eoRNBWdSBhH5BaoPu96+FIALdcvAcE=) 2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: 6pIeJa5XHZxFNB4lFdKcS5COM+fLfin0ZU91W6J3bYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1 Validity Not Before: Nov 2 22:45:56 2025 GMT Not After : Nov 9 22:45:56 2025 GMT Subject: CN=6907df25-de46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:f4:4b:0f:23:c8:3a:37:53:0c:99:71:6b: 95:e4:cf:e8:a2:3a:14:cb:d5:23:69:d2:a1:68:2e: d3:8a:fb:59:fc:df:02:35:98:8f:96:97:75:28:83: 1b:94:7d:fd:06:80:f9:72:06:5c:9b:51:ae:66:7e: 66:81:46:39:eb:d0:25:57:f6:e3:be:e3:0e:e8:b9: 6e:51:0e:ee:39:1f:31:aa:7c:c8:63:2a:fe:79:c8: 9a:51:98:cf:33:02:d3:50:b5:3b:28:9b:f7:99:d0: 4c:80:9d:f8:97:1e:87:97:26:12:11:d5:10:a7:89: 28:5e:0a:f8:a3:ff:c5:da:a9:86:42:68:fa:86:7f: af:36:87:e4:a7:af:3c:e2:cf:53:68:e1:44:eb:ae: f9:05:7f:05:83:88:ef:cf:c4:d0:73:3b:3a:58:bb: 9c:39:40:99:7b:09:57:ff:34:d7:ae:44:25:52:9a: af:f2:15:de:44:06:77:7e:f7:7e:02:3f:ef:10:af: f0:ce:a8:51:bc:52:6c:de:cc:de:25:f5:4b:a7:f2: 37:ad:97:e3:17:5a:b1:6a:d9:9d:f0:65:fd:14:a5: a2:02:93:e8:fd:14:2e:26:e9:78:6b:d3:93:e6:90: 86:ea:b9:46:fd:68:7f:3b:c7:96:e7:bc:21:95:41: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5B:6E:A2:6E:85:BD:DD:84:AA:7C:2E:28:83:1B:A1:99:17:15:47 X509v3 Authority Key Identifier: keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:77:05:11:13:54:8e:1c:f2:e7:1f:a9:36:6e:9d:2e:0a:55: 8e:08:31:d3:03:ea:ff:29:1e:3f:d0:af:a9:d4:d3:fc:4d:81: a5:2c:9a:24:2a:27:ca:6a:22:5c:4f:c6:ee:2a:8b:30:5f:1b: ba:28:c0:01:45:24:02:a5:46:85:f3:fc:69:28:88:d7:47:93: 2b:48:bb:a1:88:82:97:cb:05:83:8b:83:23:92:45:fc:d3:8f: a4:1e:5f:82:5f:58:c6:5a:4c:56:4d:60:f0:3d:f9:f9:1f:19: c4:3b:cb:6d:a9:bd:89:0f:9a:68:45:a9:8b:e4:f8:2f:f1:c1: 77:de:09:15:f1:9b:c1:db:6e:57:82:33:25:25:cb:e4:45:e9: 85:fa:10:cd:fa:fd:10:53:2d:72:b0:7a:17:a1:72:1c:83:1f: 18:3a:ad:00:e6:b7:5d:d5:d5:88:cf:bc:90:88:2b:01:f6:90: 62:58:10:e2:2f:40:08:ba:ce:a9:b4:08:40:27:7e:a3:0a:fc: d6:ce:3c:4d:cf:91:de:67:d9:a8:50:5d:4f:52:d0:86:0d:5c: cd:a8:a2:ea:e9:94:d9:c8:ce:1a:08:ba:65:31:6b:04:21:6e: c7:df:f3:55:09:9f:c7:6d:a4:fc:26:f6:ce:ee:48:46:a3:14: de:ea:5f:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzRjYxMTAvBgNVBAUTKEEwQkE0NjJGMjlGODI1QTQwMjA5NkEzMkNENzRGN0Ey OENCQ0ZFRTEwHhcNMjUxMTAyMjI0NTU2WhcNMjUxMTA5MjI0NTU2WjAYMRYwFAYD VQQDEw02OTA3ZGYyNS1kZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYD0Sw8jyDo3UwyZcWuV5M/oojoUy9UjadKhaC7TivtZ/N8CNZiPlpd1KIMb lH39BoD5cgZcm1GuZn5mgUY569AlV/bjvuMO6LluUQ7uOR8xqnzIYyr+eciaUZjP MwLTULU7KJv3mdBMgJ34lx6HlyYSEdUQp4koXgr4o//F2qmGQmj6hn+vNofkp688 4s9TaOFE6675BX8Fg4jvz8TQczs6WLucOUCZewlX/zTXrkQlUpqv8hXeRAZ3fvd+ Aj/vEK/wzqhRvFJs3szeJfVLp/I3rZfjF1qxatmd8GX9FKWiApPo/RQuJul4a9OT 5pCG6rlG/Wh/O8eW57whlUGr6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVbbqJu hb3dhKp8LiiDG6GZFxVHMB8GA1UdIwQYMBaAFKC6Ri8p+CWkAglqMs1096KMvP7h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDNGNi8yRDJGMjE4NkJB MDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEphUUNDV295elhUM29veThf dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29McEdMeW40SmFRQ0NXb3l6WFQzb295OF91RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDNGNi8yRDJGMjE4NkJBMDQxMUVCOTdGNUI0MUZDNEY5QUUwMi9vTHBHTHluNEph UUNDV295elhUM29veThfdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDdwURE1SOHPLnH6k2bp0uClWOCDHTA+r/KR4/0K+p1NP8TYGlLJok KifKaiJcT8buKoswXxu6KMABRSQCpUaF8/xpKIjXR5MrSLuhiIKXywWDi4MjkkX8 04+kHl+CX1jGWkxWTWDwPfn5HxnEO8ttqb2JD5poRamL5Pgv8cF33gkV8ZvB225X gjMlJcvkRemF+hDN+v0QUy1ysHoXoXIcgx8YOq0A5rdd1dWIz7yQiCsB9pBiWBDi L0AIus6ptAhAJ36jCvzWzjxNz5HeZ9moUF1PUtCGDVzNqKLq6ZTZyM4aCLplMWsE IW7H3/NVCZ/HbaT8JvbO7khGoxTe6l9X -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:42 2025 by rpki-client