$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: aq7YPYBLTxchv+49nB48REQ8Q6jgKwks7x8aq1VmrFE= Subject key identifier: 34:CE:00:50:39:3C:BB:71:02:DE:49:3A:A4:52:96:00:23:8C:C0:1E Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 49 Signing time: Mon 03 Nov 2025 07:25:42 +0000 Manifest this update: Mon 03 Nov 2025 07:25:42 +0000 Manifest next update: Mon 10 Nov 2025 07:25:42 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: 1w3SMxnLidMirGoGzOMtRtiJNUG5NMz/8b10UwLgCtA=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Nov 3 07:25:42 2025 GMT Not After : Nov 10 07:25:42 2025 GMT Subject: CN=690858f6-5ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:bf:62:be:98:0a:54:0e:c6:ac:74:dd:e1: 36:a7:74:1c:c9:3c:b9:a2:59:45:70:cc:c4:9c:aa: bd:e0:61:98:5c:82:ef:82:bc:59:0b:d2:02:4c:d8: 00:55:94:e2:48:9f:88:91:a6:8f:21:8f:d9:65:b2: 59:8a:a4:94:73:c4:e5:08:27:5d:48:72:9b:d2:ac: 22:99:3b:85:32:54:e9:38:f5:a8:bf:a4:a5:d8:f9: 7b:29:32:10:2f:a6:60:a6:a4:0f:0a:b2:17:07:1f: b3:41:4f:fd:ce:3b:e3:78:a7:32:bd:a4:f9:f0:39: 3c:e5:e9:76:ae:dd:fc:c2:14:31:2d:63:90:99:ab: 69:47:b2:06:92:62:39:d2:d0:64:7b:cc:c0:b8:dc: f2:43:21:01:ee:4a:cf:dc:c5:c7:74:d8:c0:96:87: 48:d3:9c:3c:ab:01:30:45:81:ec:56:2c:8a:e0:40: 5c:11:e0:13:ed:94:bf:2f:f8:a4:3f:38:35:aa:12: 39:06:44:c2:f3:f8:b7:51:0e:8b:8a:f8:60:4c:af: 58:13:0e:f2:33:f2:f9:c5:43:ef:4a:86:44:28:31: f4:80:f5:8d:35:29:cb:25:a1:43:bf:ce:2b:c2:2e: a3:94:fb:02:66:e4:67:a8:0a:63:b2:84:06:6d:c2: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CE:00:50:39:3C:BB:71:02:DE:49:3A:A4:52:96:00:23:8C:C0:1E X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:40:a5:ea:0e:51:c9:bd:a9:b5:13:67:0f:08:fa:06:24:ef: 2d:c0:fb:2a:ac:98:1b:96:ae:93:1f:d0:71:ee:1e:3a:c9:a8: 92:f1:1c:2c:91:da:73:6e:91:c5:91:ba:06:34:f7:a2:e9:81: 59:29:1c:09:93:df:f9:a0:06:56:1e:52:e9:18:9b:19:25:8b: ae:9b:e4:3f:58:0a:4b:05:06:ea:35:88:c3:70:eb:a7:65:58: 0a:ba:bd:54:d5:68:57:a8:b1:50:93:e5:02:b2:f8:b4:95:0b: 44:b3:1c:11:6f:57:7a:38:3f:80:4b:7c:e5:a6:63:e0:15:d9: 38:0e:ee:62:ee:c2:a6:23:d7:cf:05:2a:46:19:0d:a7:67:88: 6d:19:2b:b1:3e:f8:e9:44:9c:66:c5:f0:1c:91:9a:ea:f2:8c: 1b:1b:ca:87:b3:cc:0f:26:bb:fc:46:f9:70:26:d3:a5:0e:c4: 5b:ee:e2:7c:91:3f:49:10:57:70:d2:eb:b5:4d:fe:28:6f:ee: b1:a7:b3:16:06:a8:a6:35:e3:62:c0:91:30:9e:54:74:a7:34: 90:14:bf:33:44:c3:f7:a5:70:b4:40:81:3d:b4:b5:37:92:0c: 66:ef:08:fb:79:07:aa:ea:d1:bd:81:ae:73:55:ff:a1:2c:98: ef:01:9b:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1 Qjk0MzYyNDAeFw0yNTExMDMwNzI1NDJaFw0yNTExMTAwNzI1NDJaMBgxFjAUBgNV BAMTDTY5MDg1OGY2LTVlYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHL9ivpgKVA7GrHTd4TandBzJPLmiWUVwzMScqr3gYZhcgu+CvFkL0gJM2ABV lOJIn4iRpo8hj9llslmKpJRzxOUIJ11IcpvSrCKZO4UyVOk49ai/pKXY+XspMhAv pmCmpA8KshcHH7NBT/3OO+N4pzK9pPnwOTzl6Xau3fzCFDEtY5CZq2lHsgaSYjnS 0GR7zMC43PJDIQHuSs/cxcd02MCWh0jTnDyrATBFgexWLIrgQFwR4BPtlL8v+KQ/ ODWqEjkGRMLz+LdRDouK+GBMr1gTDvIz8vnFQ+9KhkQoMfSA9Y01KcsloUO/zivC LqOU+wJm5GeoCmOyhAZtwt7DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNM4AUDk8 u3EC3kk6pFKWACOMwB4wHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADdApeoOUcm9qbUTZw8I+gYk7y3A+yqsmBuWrpMf0HHuHjrJqJLxHCyR 2nNukcWRugY096LpgVkpHAmT3/mgBlYeUukYmxkli66b5D9YCksFBuo1iMNw66dl WAq6vVTVaFeosVCT5QKy+LSVC0SzHBFvV3o4P4BLfOWmY+AV2TgO7mLuwqYj188F KkYZDadniG0ZK7E++OlEnGbF8ByRmuryjBsbyoezzA8mu/xG+XAm06UOxFvu4nyR P0kQV3DS67VN/ihv7rGnsxYGqKY142LAkTCeVHSnNJAUvzNEw/elcLRAgT20tTeS DGbvCPt5B6rq0b2BrnNV/6EsmO8Bm9M= -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:08 2025 by rpki-client