$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: mqpy8mzCjC3oGOM/jtMzQ196kf/p0e4M60mIPAkaZmg= Subject key identifier: C1:68:85:4C:FD:E3:11:0B:6B:C5:99:4D:6E:A7:70:F4:CC:A5:46:B7 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 04AE Signing time: Wed 05 Nov 2025 00:06:10 +0000 Manifest this update: Wed 05 Nov 2025 00:06:10 +0000 Manifest next update: Wed 12 Nov 2025 00:06:10 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: 1aZVLJ1buUkonrhaFad397asaP32TFZIna0CMgY3S64=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=) 3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Nov 5 00:06:10 2025 GMT Not After : Nov 12 00:06:10 2025 GMT Subject: CN=690a94f2-f94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:75:ee:98:46:79:4c:80:f9:e2:f1:69:ad: 16:48:d6:eb:35:d4:68:ff:70:76:23:e4:21:ca:17: 26:58:fb:b0:5d:b9:dd:cb:14:a3:bd:8b:cb:ab:c8: 86:6c:48:1c:8a:c2:80:f4:20:90:d0:4a:77:a5:d0: 00:bd:7c:fd:8c:62:ad:ae:d8:02:26:8a:06:56:0f: 0f:86:22:9b:bf:90:1f:07:ee:75:ad:74:1f:cc:ca: e8:fa:6a:ff:49:72:ef:cb:fa:6b:d5:a3:2f:89:b8: 1a:50:a3:09:a0:a9:28:f7:9f:e3:fc:46:1e:39:cf: 6c:a2:85:6e:36:75:49:c7:dd:0f:8c:ba:41:26:02: f7:b3:7c:7f:b7:7e:1d:38:d7:05:2d:48:c0:9a:2c: d5:c7:7d:72:0a:03:2e:e3:f7:67:f1:9b:23:c7:26: a5:00:e5:07:4b:6e:ac:f1:c9:f9:09:fd:16:12:4d: a0:36:32:cd:01:ab:df:ca:e8:56:78:88:3b:70:e8: d2:23:5a:c2:4b:54:f5:8a:e1:44:88:87:39:d3:05: 53:9f:de:b6:bb:45:9f:e2:a9:7c:f5:cb:21:aa:ce: d8:b6:51:a8:46:b4:d4:66:9c:cf:3d:03:1b:c9:6f: 70:70:89:d8:2f:80:f9:89:80:3a:00:a2:f6:f6:24: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:85:4C:FD:E3:11:0B:6B:C5:99:4D:6E:A7:70:F4:CC:A5:46:B7 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:6d:50:f9:0d:cf:28:97:56:c2:b5:64:09:7f:ff:a6:b1: 9f:06:68:36:33:0e:ea:1a:91:7b:bf:99:21:11:88:05:d2:a4: 15:a8:5d:58:db:63:05:34:72:a5:c6:0e:42:c8:45:15:59:f1: 7f:5b:12:f1:cf:d7:8a:12:d8:bf:30:e9:3b:7d:95:38:91:85: 73:5b:06:d2:b6:47:bb:f3:0c:46:3a:47:1c:db:2f:73:3e:43: 7b:c6:7c:8f:69:b7:d7:7e:d5:a3:02:03:2d:0b:96:52:bd:c7: 9e:08:3c:34:65:f3:d2:f0:d7:47:5d:ec:2b:ad:19:dc:9c:ac: 8c:62:d0:ec:e8:93:be:7f:f8:57:ab:69:30:f8:66:fe:3c:69: 57:0b:72:f5:af:88:b0:f9:92:22:db:49:6f:22:cb:65:66:f7: 72:29:30:4a:52:3b:32:2c:3c:d6:4f:df:6e:d4:4d:bd:df:f6: 54:4e:7f:95:48:a7:6e:64:87:c7:4a:f8:31:20:33:33:29:87: ee:95:f0:59:7e:6f:5b:3f:b8:12:55:a8:2e:e5:5c:41:05:ec: 27:b9:7f:b2:81:fc:b4:5b:99:e8:2e:98:0d:b6:14:1a:c1:2e: 3f:29:a1:37:41:e6:be:4e:0d:e3:3d:e5:72:45:89:ec:fd:b2: 04:24:40:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjUxMTA1MDAwNjEwWhcNMjUxMTEyMDAwNjEwWjAYMRYwFAYD VQQDEw02OTBhOTRmMi1mOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/517phGeUyA+eLxaa0WSNbrNdRo/3B2I+QhyhcmWPuwXbndyxSjvYvLq8iG bEgcisKA9CCQ0Ep3pdAAvXz9jGKtrtgCJooGVg8PhiKbv5AfB+51rXQfzMro+mr/ SXLvy/pr1aMvibgaUKMJoKko95/j/EYeOc9sooVuNnVJx90PjLpBJgL3s3x/t34d ONcFLUjAmizVx31yCgMu4/dn8ZsjxyalAOUHS26s8cn5Cf0WEk2gNjLNAavfyuhW eIg7cOjSI1rCS1T1iuFEiIc50wVTn962u0Wf4ql89cshqs7YtlGoRrTUZpzPPQMb yW9wcInYL4D5iYA6AKL29iRXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFohUz9 4xELa8WZTW6ncPTMpUa3MB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzmG1Q+Q3PKJdWwrVkCX//prGfBmg2Mw7qGpF7v5khEYgF0qQVqF1Y 22MFNHKlxg5CyEUVWfF/WxLxz9eKEti/MOk7fZU4kYVzWwbStke78wxGOkcc2y9z PkN7xnyPabfXftWjAgMtC5ZSvceeCDw0ZfPS8NdHXewrrRncnKyMYtDs6JO+f/hX q2kw+Gb+PGlXC3L1r4iw+ZIi20lvIstlZvdyKTBKUjsyLDzWT99u1E293/ZUTn+V SKduZIfHSvgxIDMzKYfulfBZfm9bP7gSVagu5VxBBewnuX+ygfy0W5noLpgNthQa wS4/KaE3Qea+Tg3jPeVyRYns/bIEJEDF -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:35 2025 by rpki-client