$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json) Hash identifier: Ghh0kMg5FuT5UCBI2siID9f/Ylrdx7Zh6FNbXPV7eJo= Subject key identifier: 6E:AD:82:AF:EA:B9:35:66:99:4B:4A:83:4E:43:32:F4:58:D4:C5:A9 Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft Manifest number: 0412 Signing time: Wed 05 Nov 2025 00:29:32 +0000 Manifest this update: Wed 05 Nov 2025 00:29:32 +0000 Manifest next update: Wed 12 Nov 2025 00:29:32 +0000 Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: gqU40Lv21mjSlckPheIeJw8SScXRpoIwD0j36p+FV84=) 2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC Validity Not Before: Nov 5 00:29:32 2025 GMT Not After : Nov 12 00:29:32 2025 GMT Subject: CN=690a9a6c-2edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:a7:64:e2:17:cb:2c:a2:3c:60:31:3c:b2: 7c:ec:d5:fc:ed:0c:2a:bd:44:63:3f:23:5e:06:76: ff:0f:78:0b:dc:22:15:d2:f3:c1:57:78:2b:4a:8b: ae:95:ac:17:47:c9:35:8f:df:ef:2b:f1:b6:f9:5b: fb:6f:b8:1d:23:34:64:13:2d:52:81:76:eb:bf:ff: 63:82:c4:dc:86:00:af:89:4f:21:9d:82:c4:f8:47: f2:f1:df:35:b1:51:d4:48:b7:4b:55:ee:ca:8d:d4: 20:fc:5b:f1:f0:7e:6e:ac:6a:6f:e6:fa:bf:6a:5d: 3e:e1:a1:0a:7d:8c:25:2a:3d:97:3f:78:96:e9:57: a0:7a:ff:17:3b:d0:18:7a:18:7f:b4:85:b5:2f:14: 5c:da:1a:99:03:33:ea:29:7b:5a:4c:53:bf:c2:ec: 7b:17:a8:64:ec:86:24:eb:19:eb:68:dc:4a:14:df: c5:da:f9:1d:ce:45:51:56:c2:44:74:e5:d9:af:2f: e4:41:52:0a:96:9e:06:bd:16:4f:d0:b3:4b:8d:d5: b4:59:7a:bf:b4:32:40:55:c9:a5:41:5c:82:4c:66: a5:40:e9:f7:6e:a1:4e:37:b6:58:bc:58:68:bc:ea: 4d:75:64:b7:51:29:25:5b:67:59:09:2f:e1:d1:98: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:82:AF:EA:B9:35:66:99:4B:4A:83:4E:43:32:F4:58:D4:C5:A9 X509v3 Authority Key Identifier: keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:21:14:21:4a:72:81:e3:25:e4:f1:97:1a:8c:17:af:db:db: fc:d2:c5:e8:f2:7c:0d:16:0b:c5:bc:dc:b9:ab:3f:2f:e0:db: 8d:4f:be:e1:31:40:d3:44:3d:90:c9:cd:04:2c:f0:23:a2:d4: f6:6f:b1:d4:67:52:00:01:49:cb:bb:be:bb:cd:12:7c:f3:82: ae:2b:b3:d5:57:cf:77:a2:29:48:3f:c7:9b:6b:25:56:87:3a: 47:58:32:e3:b2:be:77:5f:d6:28:12:41:4b:6b:fc:15:e3:56: b2:ff:ba:ca:79:4b:1a:1a:71:47:2f:ed:40:ea:23:56:2e:b6: e2:07:9e:8c:aa:f9:85:b3:bd:f0:bb:4c:63:f1:47:43:bb:3e: 15:c7:4f:a6:ea:82:95:23:58:57:de:23:ea:87:29:4e:29:5d: 45:18:75:6a:c4:12:37:52:a9:6d:69:5b:59:c4:05:d3:12:4e: 84:cb:7d:98:0c:22:cf:13:c3:17:bb:1f:c9:2f:e3:8b:c2:12: ab:d6:49:0d:61:0e:62:fd:98:d1:58:c2:96:0a:d8:6d:e5:0f: de:79:f6:88:ea:ca:99:d4:39:87:cd:2c:80:71:b5:8d:7c:8a: 25:ae:ce:f9:d6:ee:f4:f3:0f:83:e0:8e:f3:8f:71:ca:f0:af: 65:03:72:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5 MkRERUJERkMwHhcNMjUxMTA1MDAyOTMyWhcNMjUxMTEyMDAyOTMyWjAYMRYwFAYD VQQDEw02OTBhOWE2Yy0yZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnqnZOIXyyyiPGAxPLJ87NX87QwqvURjPyNeBnb/D3gL3CIV0vPBV3grSouu lawXR8k1j9/vK/G2+Vv7b7gdIzRkEy1SgXbrv/9jgsTchgCviU8hnYLE+Efy8d81 sVHUSLdLVe7KjdQg/Fvx8H5urGpv5vq/al0+4aEKfYwlKj2XP3iW6Vegev8XO9AY ehh/tIW1LxRc2hqZAzPqKXtaTFO/wux7F6hk7IYk6xnraNxKFN/F2vkdzkVRVsJE dOXZry/kQVIKlp4GvRZP0LNLjdW0WXq/tDJAVcmlQVyCTGalQOn3bqFON7ZYvFho vOpNdWS3USklW2dZCS/h0Ziu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6tgq/q uTVmmUtKg05DMvRY1MWpMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2 ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY3Mi83QzVEM0ZERThCQ0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZj LWhNek1MbU5zMkdTM2V2ZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3IRQhSnKB4yXk8ZcajBev29v80sXo8nwNFgvFvNy5qz8v4NuNT77h MUDTRD2Qyc0ELPAjotT2b7HUZ1IAAUnLu767zRJ884KuK7PVV893oilIP8ebayVW hzpHWDLjsr53X9YoEkFLa/wV41ay/7rKeUsaGnFHL+1A6iNWLrbiB56MqvmFs73w u0xj8UdDuz4Vx0+m6oKVI1hX3iPqhylOKV1FGHVqxBI3UqltaVtZxAXTEk6Ey32Y DCLPE8MXux/JL+OLwhKr1kkNYQ5i/ZjRWMKWCtht5Q/eefaI6sqZ1DmHzSyAcbWN fIolrs751u708w+D4I7zj3HK8K9lA3LL -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:43 2025 by rpki-client