$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: EE6+5K7xW3hU+i65zVqypilLd0hWpFUV1psUOLMN8hI= Subject key identifier: 8B:51:FB:C2:25:60:C3:86:1D:01:8A:7F:87:45:38:1B:39:6F:D2:F5 Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 04:33:57 +0000 Manifest this update: Mon 03 Nov 2025 04:33:57 +0000 Manifest next update: Mon 10 Nov 2025 04:33:57 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: A0du1Rh5BZN6uYwqXZOeMuycN4wsoHEsH69JyW7TT/g=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Nov 3 04:33:57 2025 GMT Not After : Nov 10 04:33:57 2025 GMT Subject: CN=690830b5-d5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:26:4e:42:05:c5:fd:f3:62:88:3f:21:11: eb:92:f2:18:59:bd:35:29:7b:dd:65:39:34:b0:35: 11:ad:a4:04:d8:2e:bc:1a:1b:be:61:c4:d4:72:7b: dd:47:f7:7f:a6:fe:70:d5:c3:01:6e:50:74:31:4b: d9:2c:c3:d4:dd:90:a8:bc:b3:b0:ec:ac:ad:71:f0: bf:be:84:92:5c:70:20:be:63:90:8e:14:ff:31:b9: 00:11:a9:cb:e8:36:44:d8:44:f2:10:48:6e:c4:84: b0:27:c3:41:20:24:d8:14:d6:dc:14:8f:62:f3:e1: 79:4a:3f:02:6e:09:f5:d1:3d:93:f0:1a:3e:8b:ce: 08:db:a0:84:1b:52:4a:87:c9:31:4b:b3:22:b9:db: ec:ee:00:76:3b:76:34:c1:cd:20:8f:d7:47:02:3a: 63:b3:c4:0b:95:81:c2:90:b5:d4:61:60:f5:61:78: 20:3c:51:59:dc:1c:1f:8a:6d:7c:14:e8:1d:51:ed: e6:79:24:72:cc:a7:bc:e8:3a:83:69:09:19:23:2c: e6:0c:a9:47:da:e5:16:17:52:fa:82:a4:4d:0d:92: eb:f6:27:4b:e3:39:ce:67:1c:7f:ef:d7:8d:5e:a6: a9:91:39:96:5e:79:64:e6:e0:4f:03:99:dc:6a:5e: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:FB:C2:25:60:C3:86:1D:01:8A:7F:87:45:38:1B:39:6F:D2:F5 X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:07:5f:e3:35:3d:bb:12:c4:34:68:c4:6b:fa:7a:bb:69: bc:1d:92:91:47:b6:2f:aa:db:0f:98:05:92:72:05:56:d8:ac: 58:cf:94:cb:00:68:d8:ae:95:f8:99:41:70:cb:65:37:f3:fb: 64:f5:29:f7:38:e0:75:64:77:41:51:bd:24:97:fc:42:c4:5b: 83:57:ed:61:5e:89:8e:ca:97:0d:9b:70:e0:06:cb:8c:a9:2f: 1f:56:6a:84:64:29:03:99:bc:64:ab:54:af:7e:8b:11:31:28: 58:26:ab:2f:6d:5d:e0:1a:e9:e2:c0:ad:dd:50:ca:36:68:86: 1e:b7:24:fc:97:c6:5a:da:bd:16:4f:cc:d8:8a:4a:75:37:68: 89:7a:39:40:2d:07:87:2d:d2:a7:2c:9b:19:03:62:67:f5:72: e6:c8:7c:7c:d2:6a:64:d6:f7:ee:66:94:f2:16:69:9b:6a:de: 18:3b:01:2d:c4:c6:21:06:eb:2a:b4:69:59:eb:cc:ed:8a:6c: 49:84:0f:3c:27:40:11:17:a5:b2:6b:a5:3e:87:94:b1:c4:7c: d8:c4:00:ca:7b:aa:3c:7b:0f:d3:2d:22:b4:8e:51:11:00:d8: 16:f9:c9:bb:d6:0e:f3:25:82:7b:63:f1:a4:75:7b:82:05:95: be:5e:40:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUxMTAzMDQzMzU3WhcNMjUxMTEwMDQzMzU3WjAYMRYwFAYD VQQDEw02OTA4MzBiNS1kNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsAmTkIFxf3zYog/IRHrkvIYWb01KXvdZTk0sDURraQE2C68Ghu+YcTUcnvd R/d/pv5w1cMBblB0MUvZLMPU3ZCovLOw7KytcfC/voSSXHAgvmOQjhT/MbkAEanL 6DZE2ETyEEhuxISwJ8NBICTYFNbcFI9i8+F5Sj8Cbgn10T2T8Bo+i84I26CEG1JK h8kxS7Miudvs7gB2O3Y0wc0gj9dHAjpjs8QLlYHCkLXUYWD1YXggPFFZ3Bwfim18 FOgdUe3meSRyzKe86DqDaQkZIyzmDKlH2uUWF1L6gqRNDZLr9idL4znOZxx/79eN XqapkTmWXnlk5uBPA5ncal5hSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItR+8Il YMOGHQGKf4dFOBs5b9L1MB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAofAdf4zU9uxLENGjEa/p6u2m8HZKRR7YvqtsPmAWScgVW2KxYz5TL AGjYrpX4mUFwy2U38/tk9Sn3OOB1ZHdBUb0kl/xCxFuDV+1hXomOypcNm3DgBsuM qS8fVmqEZCkDmbxkq1SvfosRMShYJqsvbV3gGuniwK3dUMo2aIYetyT8l8Za2r0W T8zYikp1N2iJejlALQeHLdKnLJsZA2Jn9XLmyHx80mpk1vfuZpTyFmmbat4YOwEt xMYhBusqtGlZ68ztimxJhA88J0ARF6Wya6U+h5SxxHzYxADKe6o8ew/TLSK0jlER ANgW+cm71g7zJYJ7Y/GkdXuCBZW+XkDR -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:42 2025 by rpki-client