$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft File: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json) Hash identifier: TvSg2I1G+vW3vZASgsMJeg1THLzO6zpdAnkIuSOvyPA= Subject key identifier: 46:00:30:4A:95:25:80:79:00:5B:FC:3A:9F:90:69:DE:DA:E8:68:9F Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0EA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft Manifest number: 0E9D Signing time: Tue 04 Nov 2025 17:46:00 +0000 Manifest this update: Tue 04 Nov 2025 17:45:59 +0000 Manifest next update: Tue 11 Nov 2025 17:45:59 +0000 Files and hashes: 1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: /9W+sMo1WaiFAGyRb8kLBVqu70w1P/ZdpqFxOCiyXoM=) 2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Nov 4 17:45:59 2025 GMT Not After : Nov 11 17:45:59 2025 GMT Subject: CN=690a3bd8-7ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:02:ea:70:65:22:f1:b5:de:3b:87:0e:04: da:63:84:c1:46:bc:31:01:d6:08:9b:cd:60:2d:d0: cb:d4:ff:b6:38:64:77:cc:f7:e4:e1:42:70:e3:4c: 37:c5:e5:40:63:da:c7:99:66:d1:98:da:0c:de:fb: bb:f3:dc:bf:cb:21:0a:92:88:b1:4a:0c:11:36:9e: c4:05:16:8d:66:2a:fa:c3:a5:3d:cb:48:b4:6c:8a: 79:09:61:10:5a:75:95:35:e9:fc:79:e5:4a:82:17: 97:90:a5:23:fc:f3:0d:85:8b:ea:c0:2e:ca:ff:0a: 16:19:ed:c8:ed:7b:63:1e:e1:68:a8:71:d9:2b:7d: 54:2b:e7:87:a3:34:a0:9b:b1:56:1b:28:55:ad:2d: 60:50:aa:80:5c:b9:7c:c5:6d:55:03:6a:5e:12:a6: bd:5e:6e:b7:bc:ce:5f:15:af:97:89:12:79:3f:ba: 20:37:91:ef:8d:94:03:92:80:3f:ec:7e:89:81:ac: 9c:26:ec:cc:f5:90:2e:39:17:69:1f:cc:06:d2:5e: a3:be:cd:a0:89:98:09:d1:26:77:b6:f9:dc:8b:8d: b6:c0:b4:39:c7:0f:69:5b:bb:10:63:53:13:c2:6b: 9d:f9:80:73:fb:5f:20:3d:e4:1b:26:77:0e:47:ac: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:00:30:4A:95:25:80:79:00:5B:FC:3A:9F:90:69:DE:DA:E8:68:9F X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6e:08:84:50:33:05:ab:c1:37:89:45:d0:3b:44:e6:af:bd: b6:d2:fb:c5:ea:bf:90:db:d9:e3:14:ee:82:64:3b:a5:ff:69: 19:93:b1:66:32:ff:d1:48:bf:67:4a:71:4b:df:6f:b7:38:23: 61:ed:0e:91:ed:59:8b:75:b4:3d:b8:73:02:04:44:21:04:8d: 80:ca:97:0b:5c:7b:c5:eb:30:b5:58:1f:87:65:d0:a7:d0:30: e0:37:c4:54:b9:6e:e6:d1:0b:ab:ce:d1:96:f7:15:53:3b:12: b3:34:6e:4d:05:40:3a:a7:d2:b3:9f:71:25:1b:51:98:b9:a0: 23:47:f5:97:40:c1:16:b8:93:df:40:91:2f:0d:57:b8:e9:ce: 3b:9d:d2:58:9c:78:cf:25:73:1e:77:b3:66:c6:35:52:4c:ed: ff:fb:6d:8f:7c:ad:5b:01:bc:5e:37:bf:df:e5:34:f1:79:f6: 65:40:3b:cf:29:b3:8b:0b:ba:ed:d7:49:3d:bf:a6:7c:13:a1: fe:78:d1:75:53:31:f0:83:a2:fd:f3:ed:cb:95:e6:5c:33:79: c1:71:7b:f0:99:51:e2:97:78:ab:ec:4b:95:65:1b:78:4b:11: 64:41:61:62:6d:43:8c:9f:50:94:ff:c8:e5:5c:e6:2b:fc:ed: 8d:6a:70:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUxMTA0MTc0NTU5WhcNMjUxMTExMTc0NTU5WjAYMRYwFAYD VQQDEw02OTBhM2JkOC03YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFQC6nBlIvG13juHDgTaY4TBRrwxAdYIm81gLdDL1P+2OGR3zPfk4UJw40w3 xeVAY9rHmWbRmNoM3vu789y/yyEKkoixSgwRNp7EBRaNZir6w6U9y0i0bIp5CWEQ WnWVNen8eeVKgheXkKUj/PMNhYvqwC7K/woWGe3I7XtjHuFoqHHZK31UK+eHozSg m7FWGyhVrS1gUKqAXLl8xW1VA2peEqa9Xm63vM5fFa+XiRJ5P7ogN5HvjZQDkoA/ 7H6JgaycJuzM9ZAuORdpH8wG0l6jvs2giZgJ0SZ3tvnci422wLQ5xw9pW7sQY1MT wmud+YBz+18gPeQbJncOR6xn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYAMEqV JYB5AFv8Op+Qad7a6GifMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDE4RS9GQTU2OEU1RTlFMTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FC V3RzSjhhT0dXTHpZc1g5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtbgiEUDMFq8E3iUXQO0Tmr7220vvF6r+Q29njFO6CZDul/2kZk7Fm Mv/RSL9nSnFL32+3OCNh7Q6R7VmLdbQ9uHMCBEQhBI2AypcLXHvF6zC1WB+HZdCn 0DDgN8RUuW7m0QurztGW9xVTOxKzNG5NBUA6p9Kzn3ElG1GYuaAjR/WXQMEWuJPf QJEvDVe46c47ndJYnHjPJXMed7NmxjVSTO3/+22PfK1bAbxeN7/f5TTxefZlQDvP KbOLC7rt10k9v6Z8E6H+eNF1UzHwg6L98+3LleZcM3nBcXvwmVHil3ir7EuVZRt4 SxFkQWFibUOMn1CU/8jlXOYr/O2NanCA -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:06 2025 by rpki-client