$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: ofso40X2TgmtbEWYwcWYoUcTIyK+tCRBGUKt26wFEdE= Subject key identifier: 5B:41:0E:70:0C:98:F5:D0:E5:F9:F4:B9:FD:1F:3F:04:C3:3F:28:79 Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 09BD Signing time: Tue 04 Nov 2025 20:05:42 +0000 Manifest this update: Tue 04 Nov 2025 20:05:42 +0000 Manifest next update: Tue 11 Nov 2025 20:05:42 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: tlH4wv/8k7e9fbKVAobmL61PcfXeJ2ov/StubmHhnU4=) 2: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: ylXeGQVKEpyBpdJm+bvsrD7tk3lV9xXY1bBsN7fiPY0=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: nwk0Qb0D2pWgRwQM08AvCns/X8x+3fZwLOgEyevfH8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Nov 4 20:05:42 2025 GMT Not After : Nov 11 20:05:42 2025 GMT Subject: CN=690a5c96-0d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:c2:73:f5:3e:c8:74:de:52:d0:9a:c8:d9: 8b:5e:04:c4:ee:76:78:8b:1b:e3:a0:52:01:1f:5c: 41:cc:8d:b0:a2:36:e0:8e:17:82:7b:ca:88:bf:59: 71:77:d2:3b:7d:69:cd:e5:ec:51:96:c0:1b:7f:4e: 72:91:b1:4e:2f:84:37:30:7d:c5:05:d0:87:f3:0c: 23:6f:0d:30:aa:2f:82:db:cd:9d:bb:e5:5d:85:d6: 14:40:84:06:9f:3b:f8:c5:d6:dc:ab:c4:60:ef:e1: 0c:c8:3d:7d:9e:eb:f4:22:ba:0b:37:88:bc:d0:3d: e3:3e:24:e4:7b:84:9c:dd:9a:a7:1f:61:55:49:73: a9:63:41:bf:af:64:df:ec:b6:c6:16:58:97:1b:e0: 04:2a:f4:f4:6b:b2:c0:f2:6b:2d:b5:c9:0f:de:38: be:12:9f:52:79:49:ec:ea:9f:e5:f5:c7:30:f8:a0: 99:50:cd:44:19:06:f5:85:3e:fe:b7:d8:ce:d3:f1: 30:5c:5f:d4:11:22:a9:f6:f4:7b:6e:70:b7:d7:75: 22:67:cb:61:63:ed:5c:49:f1:3b:99:9a:3e:00:29: 17:8d:04:09:1b:ed:bf:b5:c1:60:1e:cd:ec:64:41: c5:5e:2a:8d:af:fb:71:7d:a4:5b:28:02:f3:9d:78: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:41:0E:70:0C:98:F5:D0:E5:F9:F4:B9:FD:1F:3F:04:C3:3F:28:79 X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:b5:d0:75:62:f8:e5:fa:2b:09:d3:de:cd:2a:cd:d2:94: eb:cf:28:1a:2a:97:06:b8:9e:f0:26:72:99:2a:1c:9f:84:59: f6:a7:48:95:ae:ac:a7:93:75:c5:51:60:13:79:96:97:d2:e7: 6d:b5:0b:1b:4b:4e:b1:14:33:56:a1:1d:24:44:29:d9:4a:b5: e4:cb:2a:0a:f1:ef:a8:8c:53:76:22:f8:bf:8b:2b:22:e8:6e: c3:d9:73:7a:42:f2:ee:5c:1d:54:ac:01:2b:46:09:b6:73:70: c0:cd:7b:a8:fd:66:ba:2d:e3:d3:68:68:dd:c5:b0:f0:6d:84: e9:01:cc:e4:7e:22:5d:be:15:62:30:58:dd:88:97:37:d8:13: 70:a8:cb:8f:15:83:cb:d3:85:fc:e5:c7:36:ec:4f:6b:1d:36: ba:81:dd:63:4d:87:92:4b:5c:25:7d:71:a8:a9:43:5e:3b:65: 32:3f:05:d6:90:9d:f4:a7:57:53:78:41:47:ef:a4:ba:77:7c: b7:a0:76:9e:f7:87:60:9a:fa:6a:ba:2d:1d:83:9b:d4:17:8d: e9:a0:ed:09:b5:36:5d:1f:b0:18:cb:14:52:5c:53:34:23:2c: 02:0e:db:66:6e:da:9c:ab:64:66:f1:0b:99:be:f1:cc:19:75: 84:59:85:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjUxMTA0MjAwNTQyWhcNMjUxMTExMjAwNTQyWjAYMRYwFAYD VQQDEw02OTBhNWM5Ni0wZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4fCc/U+yHTeUtCayNmLXgTE7nZ4ixvjoFIBH1xBzI2wojbgjheCe8qIv1lx d9I7fWnN5exRlsAbf05ykbFOL4Q3MH3FBdCH8wwjbw0wqi+C282du+VdhdYUQIQG nzv4xdbcq8Rg7+EMyD19nuv0IroLN4i80D3jPiTke4Sc3ZqnH2FVSXOpY0G/r2Tf 7LbGFliXG+AEKvT0a7LA8msttckP3ji+Ep9SeUns6p/l9ccw+KCZUM1EGQb1hT7+ t9jO0/EwXF/UESKp9vR7bnC313UiZ8thY+1cSfE7mZo+ACkXjQQJG+2/tcFgHs3s ZEHFXiqNr/txfaRbKALznXj7awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtBDnAM mPXQ5fn0uf0fPwTDPyh5MB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh/LXQdWL45forCdPezSrN0pTrzygaKpcGuJ7wJnKZKhyfhFn2p0iV rqynk3XFUWATeZaX0udttQsbS06xFDNWoR0kRCnZSrXkyyoK8e+ojFN2Ivi/iysi 6G7D2XN6QvLuXB1UrAErRgm2c3DAzXuo/Wa6LePTaGjdxbDwbYTpAczkfiJdvhVi MFjdiJc32BNwqMuPFYPL04X85cc27E9rHTa6gd1jTYeSS1wlfXGoqUNeO2UyPwXW kJ30p1dTeEFH76S6d3y3oHae94dgmvpqui0dg5vUF43poO0JtTZdH7AYyxRSXFM0 IywCDttmbtqcq2Rm8QuZvvHMGXWEWYW5 -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:31 2025 by rpki-client