$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: pegOxpfxH3ngPiiFL8CKBWceX2DlvKDcYRbF4vPGS1k= Subject key identifier: A2:42:93:81:BF:DB:13:39:60:E5:D6:61:2E:39:42:5B:32:6C:DD:98 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 01D0 Signing time: Mon 17 Nov 2025 00:57:58 +0000 Manifest this update: Mon 17 Nov 2025 00:57:57 +0000 Manifest next update: Mon 24 Nov 2025 00:57:57 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: HjOltp4JFShrLSEk1re+WBPWRjAMUXXL4fbwN1hXEOE=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 00:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Nov 17 00:57:57 2025 GMT Not After : Nov 24 00:57:57 2025 GMT Subject: CN=691a7315-ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:08:c1:46:6c:79:4e:cb:60:1f:32:07:b6: 87:79:2a:72:41:45:ab:51:00:22:92:40:e4:0f:4f: 5e:e9:c3:67:8c:0b:33:a0:19:3f:94:c1:e5:d1:9f: 1f:14:98:e6:f8:72:63:c4:b4:67:e5:47:fb:fc:2a: ae:c0:c4:1d:0c:5f:cb:ab:1f:b2:91:3f:87:a1:b7: c4:75:ae:cc:52:63:b8:81:1f:f4:35:e8:61:f7:05: f4:f9:84:df:21:49:11:be:76:5c:41:ce:d1:cc:85: 11:80:2d:6c:3b:89:da:24:2c:56:35:07:f4:aa:ce: 04:a9:7d:5e:0f:38:f8:d4:ec:41:be:96:ea:e5:85: dd:5c:90:4c:a2:06:ce:7c:1c:09:5f:22:a6:14:84: 1d:ee:8e:b2:5f:d3:a0:8f:82:ae:b1:26:7e:cf:2c: 6c:ce:8b:19:df:6e:c4:5d:5f:14:b5:a4:91:18:de: d1:89:15:15:ff:3e:9d:fa:5a:8c:b9:6a:a7:50:f6: 25:1d:f5:9f:4a:b7:96:fc:4b:6e:8f:48:30:1b:f7: 48:b1:68:f1:88:11:b3:f7:2d:a5:e4:c7:d2:f9:8a: c3:c5:44:cc:7e:f4:e4:b8:c1:bb:28:85:b6:01:1a: 14:28:e8:b7:48:4e:a0:b6:03:15:16:3d:57:69:17: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:93:81:BF:DB:13:39:60:E5:D6:61:2E:39:42:5B:32:6C:DD:98 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:9e:b7:0c:8c:51:8f:68:9d:a6:d6:01:44:0a:87:06:4f: 14:96:be:72:77:a3:7b:72:01:97:5a:b3:e1:57:cf:f1:8f:16: a0:32:9e:8d:7c:ed:c7:b8:f3:30:36:ce:95:e9:e4:ac:52:b9: 86:87:43:25:4d:2b:4d:c4:14:b8:91:c3:24:a7:85:87:c2:6d: 74:2a:a5:a3:96:fa:d5:da:f6:d3:4c:3b:e3:4e:a9:91:5f:cf: 78:c3:b6:54:9a:88:8e:ec:6d:78:51:03:22:38:85:c7:ec:c3: 44:c1:ac:d6:12:d5:0a:8b:9c:63:1a:2f:d4:2e:ca:9c:dd:9b: 9e:19:f0:b1:bf:ec:b2:7d:21:cd:9e:36:3a:67:48:94:41:ca: 83:db:be:ab:d4:34:41:19:80:48:02:50:5b:a8:40:87:f8:34: 69:1f:79:93:65:2f:2d:a0:ea:c2:1c:2a:3f:2d:64:c2:d4:7c: a4:5c:17:f6:54:a8:b9:8d:5f:bc:d0:25:33:4b:04:83:60:0b: 7c:00:b4:1d:ff:34:a8:66:c2:f3:ed:49:34:66:b8:a8:74:46: 20:53:a2:21:63:4d:3c:ee:ee:d3:c2:cb:a2:94:72:f2:1c:72: 03:cf:fd:f8:68:32:55:97:9f:08:8e:80:01:f8:d1:04:39:72: 54:de:61:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUxMTE3MDA1NzU3WhcNMjUxMTI0MDA1NzU3WjAYMRYwFAYD VQQDEw02OTFhNzMxNS1jYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMsIwUZseU7LYB8yB7aHeSpyQUWrUQAikkDkD09e6cNnjAszoBk/lMHl0Z8f FJjm+HJjxLRn5Uf7/CquwMQdDF/Lqx+ykT+HobfEda7MUmO4gR/0Nehh9wX0+YTf IUkRvnZcQc7RzIURgC1sO4naJCxWNQf0qs4EqX1eDzj41OxBvpbq5YXdXJBMogbO fBwJXyKmFIQd7o6yX9Ogj4KusSZ+zyxszosZ327EXV8UtaSRGN7RiRUV/z6d+lqM uWqnUPYlHfWfSreW/Etuj0gwG/dIsWjxiBGz9y2l5MfS+YrDxUTMfvTkuMG7KIW2 ARoUKOi3SE6gtgMVFj1XaRdqwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJCk4G/ 2xM5YOXWYS45QlsybN2YMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChRJ63DIxRj2idptYBRAqHBk8Ulr5yd6N7cgGXWrPhV8/xjxagMp6N fO3HuPMwNs6V6eSsUrmGh0MlTStNxBS4kcMkp4WHwm10KqWjlvrV2vbTTDvjTqmR X894w7ZUmoiO7G14UQMiOIXH7MNEwazWEtUKi5xjGi/ULsqc3ZueGfCxv+yyfSHN njY6Z0iUQcqD276r1DRBGYBIAlBbqECH+DRpH3mTZS8toOrCHCo/LWTC1HykXBf2 VKi5jV+80CUzSwSDYAt8ALQd/zSoZsLz7Uk0ZriodEYgU6IhY0087u7TwsuilHLy HHIDz/34aDJVl58IjoAB+NEEOXJU3mHk -----END CERTIFICATE-----Generated at Tue Nov 18 07:02:50 2025 by rpki-client