$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json) Hash identifier: NByah/NS2+7COvlRbzOkEFSGtg1wM9IjqaXVjje+PDk= Subject key identifier: 42:DC:5F:A1:E4:63:26:FE:24:41:65:84:57:BF:9A:FE:8C:71:6C:96 Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft Manifest number: 13FA Signing time: Tue 04 Nov 2025 17:01:22 +0000 Manifest this update: Tue 04 Nov 2025 17:01:22 +0000 Manifest next update: Tue 11 Nov 2025 17:01:22 +0000 Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: dXktFj+PLVCXKAvViTK9qkYVRLPDZg72prByT+TRYZ0=) 2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014 Validity Not Before: Nov 4 17:01:22 2025 GMT Not After : Nov 11 17:01:22 2025 GMT Subject: CN=690a3162-96b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:0d:d8:a8:77:51:6d:81:25:58:05:09:2a: d8:7b:31:cc:58:56:a4:56:ad:bb:c4:53:10:6d:35: 9f:97:d2:e4:10:ea:84:bd:f4:a8:28:23:56:dd:36: 27:f5:2c:2e:86:20:9d:b5:12:59:75:4a:22:90:80: bf:8e:7f:ea:2f:70:3b:93:34:de:2b:99:bb:1e:34: bd:97:b2:df:98:02:da:d1:49:b1:8a:a0:87:fc:ee: 22:2d:02:0b:58:97:15:19:fb:8c:8c:e9:1f:d7:70: fe:4a:21:e6:20:12:d5:c4:f8:84:24:f8:91:27:52: da:98:c2:d0:1a:8a:fc:da:09:94:92:81:7d:8b:5a: 6a:41:c8:b8:c2:af:68:b2:4d:b7:7a:0c:f4:ae:34: bf:61:8f:55:69:14:3a:b0:22:fb:64:ce:70:95:77: 91:49:64:59:06:68:de:98:ec:31:62:ed:7c:cf:61: a0:9a:eb:55:c8:53:12:c7:63:4e:62:9a:3b:01:7d: 52:19:50:3a:95:26:5f:9d:28:f1:dc:6c:b1:63:ec: d6:e0:36:d8:46:4d:53:1d:e7:61:d2:eb:46:f2:c0: f6:38:bb:4a:f6:df:c7:80:c4:fd:af:df:e4:7f:4a: 7e:dc:6d:2e:f9:86:a4:ed:6c:8e:2f:c5:bc:d3:c4: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:5F:A1:E4:63:26:FE:24:41:65:84:57:BF:9A:FE:8C:71:6C:96 X509v3 Authority Key Identifier: keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:04:ee:ca:a4:aa:d3:4b:51:2b:58:63:3d:96:87:c9:2c: 38:db:50:9d:f3:a7:93:cd:b5:c7:33:81:c8:39:69:2f:43:32: 43:81:82:d2:d6:94:e2:b8:07:56:57:fe:12:e8:63:1d:ca:4c: 17:fa:9b:3b:92:0b:8a:c7:77:38:b7:ac:39:aa:63:aa:46:e6: e7:ff:45:e3:47:f0:8d:63:39:2b:00:94:fd:60:fe:3e:c5:2f: aa:43:b0:6a:7c:9a:40:5a:ef:5e:ae:c6:58:3e:fd:fa:33:50: 39:e5:88:39:40:c9:0f:63:24:f0:68:25:14:de:c8:1d:0e:db: 8e:ca:97:b8:15:4f:d4:e4:82:b5:b9:e1:9f:93:14:48:ef:15: e6:f5:32:81:0f:ee:a0:41:e4:b5:01:c6:f1:d4:6e:37:d8:b7: f9:db:82:6b:7d:9e:f8:03:65:c4:b3:c0:9c:17:b2:a3:ed:43: aa:8e:2c:cd:41:5e:da:a9:85:cc:d6:dc:5f:df:05:b1:24:05: 4b:0c:64:d1:ea:81:68:7d:e0:2c:79:fb:48:a6:16:ba:d7:a3: 1b:a2:4d:7f:13:72:9d:f3:38:1f:ee:37:90:ec:8f:e4:cc:9d: b4:ef:cc:38:92:b4:f8:32:8c:35:26:00:b5:ff:ce:6a:14:0e: e3:a6:54:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx ODVGMjkwMTQwHhcNMjUxMTA0MTcwMTIyWhcNMjUxMTExMTcwMTIyWjAYMRYwFAYD VQQDEw02OTBhMzE2Mi05NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QsN2Kh3UW2BJVgFCSrYezHMWFakVq27xFMQbTWfl9LkEOqEvfSoKCNW3TYn 9SwuhiCdtRJZdUoikIC/jn/qL3A7kzTeK5m7HjS9l7LfmALa0UmxiqCH/O4iLQIL WJcVGfuMjOkf13D+SiHmIBLVxPiEJPiRJ1LamMLQGor82gmUkoF9i1pqQci4wq9o sk23egz0rjS/YY9VaRQ6sCL7ZM5wlXeRSWRZBmjemOwxYu18z2GgmutVyFMSx2NO Ypo7AX1SGVA6lSZfnSjx3GyxY+zW4DbYRk1THedh0utG8sD2OLtK9t/HgMT9r9/k f0p+3G0u+Yak7WyOL8W808RR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELcX6Hk Yyb+JEFlhFe/mv6McWyWMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2 d2FZMEVwaGxYYWdZWHlrQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCzwTuyqSq00tRK1hjPZaHySw421Cd86eTzbXHM4HIOWkvQzJDgYLS 1pTiuAdWV/4S6GMdykwX+ps7kguKx3c4t6w5qmOqRubn/0XjR/CNYzkrAJT9YP4+ xS+qQ7BqfJpAWu9ersZYPv36M1A55Yg5QMkPYyTwaCUU3sgdDtuOype4FU/U5IK1 ueGfkxRI7xXm9TKBD+6gQeS1Acbx1G432Lf524JrfZ74A2XEs8CcF7Kj7UOqjizN QV7aqYXM1txf3wWxJAVLDGTR6oFofeAseftIpha616Mbok1/E3Kd8zgf7jeQ7I/k zJ2078w4krT4Mow1JgC1/85qFA7jplQW -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:49 2025 by rpki-client