$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: rZB/jXu0HVqiGatOr+tWmy8zehuOvjwSjY5Sjj8Avc8= Subject key identifier: 23:D5:E2:63:08:37:DB:93:43:ED:8D:44:8A:21:8B:D3:17:71:11:A4 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0279 Signing time: Wed 05 Nov 2025 01:44:22 +0000 Manifest this update: Wed 05 Nov 2025 01:44:21 +0000 Manifest next update: Wed 12 Nov 2025 01:44:21 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: q2QIYyRjvlO0oiirgIb9w4Bo2QVyXeH1dvPF3yftLAk=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: ujc0MMs38JAyLv/lgGmTZJVWFsrRIcXX0fImBXf2Gng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Nov 5 01:44:21 2025 GMT Not After : Nov 12 01:44:21 2025 GMT Subject: CN=690aabf5-30d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:3e:05:31:ab:d9:7e:9b:d2:1d:4d:27:7d: a7:5b:14:2b:aa:73:2f:41:dd:70:ac:5a:b0:e0:e5: 85:fa:08:e3:74:97:60:0d:dc:1b:2d:c0:8f:72:5d: 93:9a:43:8c:7a:ab:85:fa:91:1e:4c:49:f4:01:9d: 0f:51:65:93:a2:6b:62:a1:cd:54:52:9a:f3:98:dd: 90:60:3d:e3:46:31:1c:c8:8a:52:70:3f:c9:2f:d6: 97:63:ae:0c:d1:6e:8e:d1:db:ab:c7:e8:f5:20:50: 79:50:10:c8:aa:cc:98:52:ed:da:4d:ce:b6:3d:20: b4:0b:e9:bb:61:33:8f:32:bc:17:e9:48:d9:a3:86: 1c:54:76:61:fa:ac:79:68:48:a7:4a:81:dc:46:26: 07:56:a8:e0:c6:8a:96:90:0e:dd:cb:d5:ba:dc:8f: 1e:37:11:66:75:ab:5c:94:d3:6b:9f:a0:2b:d9:5a: 5e:0b:48:7b:7f:eb:07:b1:71:45:bd:3d:b0:0c:ac: 7a:91:8e:9d:b0:ed:f6:f4:0a:76:f8:05:65:fe:e6: 74:3f:13:3d:14:bf:b6:23:fd:8f:84:2c:90:43:af: 2e:6b:06:2a:ca:fc:ef:cc:29:3d:ac:88:26:d7:c0: 44:26:5d:f6:62:ef:81:d6:77:64:6c:47:b6:59:50: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D5:E2:63:08:37:DB:93:43:ED:8D:44:8A:21:8B:D3:17:71:11:A4 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4b:44:78:e9:94:70:f2:2a:82:e5:10:0c:4c:63:bc:8b:e0: fc:02:6b:2d:60:a1:48:9a:1f:d1:a5:32:9a:51:45:e1:a7:5d: cf:3d:3d:c2:89:f2:f5:92:2e:56:53:5b:c8:6d:0a:52:d1:f1: 02:c7:e5:8d:88:f4:24:53:d9:da:19:19:77:2b:f5:26:4d:d9: c2:92:7e:ab:03:91:30:b1:56:a7:33:7e:a6:ab:a9:70:25:df: 80:b4:d5:5f:a2:c2:53:d3:fe:ff:0e:c8:80:b7:fe:c0:e0:8d: 49:17:64:b9:a2:78:88:5a:65:03:37:22:63:2e:32:72:25:8c: 56:24:da:68:32:5d:42:34:58:7c:87:64:3e:2a:19:1f:0c:84: 4e:bd:95:c2:5d:1b:72:be:bd:56:20:63:27:26:b4:25:6e:48: 5b:7b:db:15:72:5b:49:6c:b4:d7:38:d9:e4:0d:d1:5d:fe:b5: f0:28:76:7b:ca:c8:45:49:3d:7a:c2:7c:79:f9:d7:8c:b7:70: 01:8a:fe:dd:94:69:26:c3:be:7d:47:b7:90:15:ba:f9:60:50: 17:ed:c2:82:43:16:ca:7d:66:11:ad:fa:52:16:98:e4:af:86: 64:d1:58:e6:e2:75:f8:3e:5a:bb:69:67:e4:a9:5c:d5:7f:4c: ad:b9:0a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjUxMTA1MDE0NDIxWhcNMjUxMTEyMDE0NDIxWjAYMRYwFAYD VQQDEw02OTBhYWJmNS0zMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriI+BTGr2X6b0h1NJ32nWxQrqnMvQd1wrFqw4OWF+gjjdJdgDdwbLcCPcl2T mkOMequF+pEeTEn0AZ0PUWWTomtioc1UUprzmN2QYD3jRjEcyIpScD/JL9aXY64M 0W6O0durx+j1IFB5UBDIqsyYUu3aTc62PSC0C+m7YTOPMrwX6UjZo4YcVHZh+qx5 aEinSoHcRiYHVqjgxoqWkA7dy9W63I8eNxFmdatclNNrn6Ar2VpeC0h7f+sHsXFF vT2wDKx6kY6dsO329Ap2+AVl/uZ0PxM9FL+2I/2PhCyQQ68uawYqyvzvzCk9rIgm 18BEJl32Yu+B1ndkbEe2WVAkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPV4mMI N9uTQ+2NRIohi9MXcRGkMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLS0R46ZRw8iqC5RAMTGO8i+D8AmstYKFImh/RpTKaUUXhp13PPT3C ifL1ki5WU1vIbQpS0fECx+WNiPQkU9naGRl3K/UmTdnCkn6rA5EwsVanM36mq6lw Jd+AtNVfosJT0/7/DsiAt/7A4I1JF2S5oniIWmUDNyJjLjJyJYxWJNpoMl1CNFh8 h2Q+KhkfDIROvZXCXRtyvr1WIGMnJrQlbkhbe9sVcltJbLTXONnkDdFd/rXwKHZ7 yshFST16wnx5+deMt3ABiv7dlGkmw759R7eQFbr5YFAX7cKCQxbKfWYRrfpSFpjk r4Zk0Vjm4nX4Plq7aWfkqVzVf0ytuQrV -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:58 2025 by rpki-client