$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json) Hash identifier: X45DN6H6vJmV4LnItbACVC3L3gksqyXfKW4w/9bJwyg= Subject key identifier: C5:09:B4:D5:7F:49:AF:A8:5C:99:76:2A:89:8B:D8:4B:D6:64:3B:2A Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft Manifest number: 1AA0 Signing time: Sun 02 Nov 2025 16:20:19 +0000 Manifest this update: Sun 02 Nov 2025 16:20:19 +0000 Manifest next update: Sun 09 Nov 2025 16:20:19 +0000 Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: fetIgVmQJGl1A9JMKiTZXzLiJpocejFnb9ROvq2meKs=) 2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE=) 3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM=) 4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6873 (0x1ad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: Nov 2 16:20:19 2025 GMT Not After : Nov 9 16:20:19 2025 GMT Subject: CN=690784c3-36ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:8a:dd:70:b7:2f:8e:f2:98:8a:40:31:d7: 1d:97:67:c0:01:d0:34:5f:00:0a:83:e3:f6:3c:0a: 0d:dc:de:3e:a0:65:2b:59:a4:c3:e8:7c:30:c5:77: 91:6d:8a:d6:30:6b:33:57:ae:9a:99:f9:49:da:48: 68:de:6a:b3:0a:93:2f:3e:8b:e0:73:89:da:76:20: 1a:6c:04:14:94:27:55:dd:aa:c5:dd:4e:62:42:a6: 8a:07:93:be:b6:55:e4:08:85:b8:33:48:2f:e8:b6: ce:cd:64:4a:af:96:0b:40:0a:72:d8:4b:4d:81:10: 32:ef:19:0e:b2:ef:4e:47:f5:ad:ea:8a:dd:c9:c3: a7:ec:77:bf:2f:be:9c:b6:86:d4:0d:96:c7:33:79: aa:d2:54:86:4e:a7:f2:3f:7e:c4:4a:b5:c7:ae:99: bb:44:90:5d:a9:33:a5:38:c9:93:99:c4:32:5d:14: 89:b8:91:c5:14:21:bb:c4:f6:aa:79:e9:16:8c:5a: 12:32:9b:27:84:2e:8d:87:3b:96:9b:9c:36:07:74: 34:21:f8:d4:f6:72:97:2d:a9:1e:34:2f:c9:68:30: 32:f4:27:42:f5:d1:c8:76:a7:da:cb:a3:f2:57:41: 6e:80:ec:75:3d:d5:50:b8:f7:86:62:13:03:b8:27: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:B4:D5:7F:49:AF:A8:5C:99:76:2A:89:8B:D8:4B:D6:64:3B:2A X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:14:eb:d5:80:f8:f7:39:29:09:b7:66:40:06:bf:5e:7d: 03:2e:68:65:93:65:90:ad:dc:4f:8a:09:bc:cf:ec:fe:d6:ba: 2d:ee:a9:f6:41:8b:2b:ab:1b:45:55:50:91:42:78:bd:33:31: 2a:07:13:56:f7:3e:f3:07:2b:ae:01:c8:86:1e:9b:9c:f4:a0: 09:bd:03:10:ac:6f:6f:e0:9e:8a:0d:ed:5c:42:66:d4:20:9d: da:45:26:32:a6:dd:b5:87:48:61:5e:55:d3:0f:37:82:3a:d5: 8b:b3:11:25:12:a1:50:a2:45:0e:62:4f:47:9c:41:3a:a7:23: 54:80:a2:24:e9:df:bb:f4:61:b6:f9:f9:dc:cb:2f:4b:22:38: 84:8b:29:6d:0c:2b:2e:cb:fe:0e:59:d3:bb:26:87:8f:d1:c8: bc:b3:8d:0e:cb:bf:5b:22:88:76:18:73:61:ef:e2:2c:49:1a: 83:18:70:eb:5a:aa:a9:93:05:8c:6f:9b:31:a7:73:b2:2e:63: 07:73:1d:91:3d:30:a2:59:36:f9:48:a1:d4:41:04:3e:56:f8: 2b:ed:78:ae:04:14:44:9d:78:60:26:f8:66:e1:24:e2:e3:f5: f5:2d:82:49:b6:79:65:4a:b7:1e:85:f7:aa:04:d2:07:09:61: ea:a4:89:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjUxMTAyMTYyMDE5WhcNMjUxMTA5MTYyMDE5WjAYMRYwFAYD VQQDEw02OTA3ODRjMy0zNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgCK3XC3L47ymIpAMdcdl2fAAdA0XwAKg+P2PAoN3N4+oGUrWaTD6HwwxXeR bYrWMGszV66amflJ2kho3mqzCpMvPovgc4nadiAabAQUlCdV3arF3U5iQqaKB5O+ tlXkCIW4M0gv6LbOzWRKr5YLQApy2EtNgRAy7xkOsu9OR/Wt6ordycOn7He/L76c tobUDZbHM3mq0lSGTqfyP37ESrXHrpm7RJBdqTOlOMmTmcQyXRSJuJHFFCG7xPaq eekWjFoSMpsnhC6NhzuWm5w2B3Q0IfjU9nKXLakeNC/JaDAy9CdC9dHIdqfay6Py V0FugOx1PdVQuPeGYhMDuCcHnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUJtNV/ Sa+oXJl2KomL2EvWZDsqMB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA3Ny9EQjdCNzAwNjQ4MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJG SlU2aDVIaUl3UVAwVTJJaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAghTr1YD49zkpCbdmQAa/Xn0DLmhlk2WQrdxPigm8z+z+1rot7qn2 QYsrqxtFVVCRQni9MzEqBxNW9z7zByuuAciGHpuc9KAJvQMQrG9v4J6KDe1cQmbU IJ3aRSYypt21h0hhXlXTDzeCOtWLsxElEqFQokUOYk9HnEE6pyNUgKIk6d+79GG2 +fncyy9LIjiEiyltDCsuy/4OWdO7JoeP0ci8s40Oy79bIoh2GHNh7+IsSRqDGHDr WqqpkwWMb5sxp3OyLmMHcx2RPTCiWTb5SKHUQQQ+Vvgr7XiuBBREnXhgJvhm4STi 4/X1LYJJtnllSrcehfeqBNIHCWHqpIkN -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:20 2025 by rpki-client