$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: P8raDsqOCpwhdGhI3HmtLpbTJDS8kK3OCX2gAz3Qesk= Subject key identifier: EA:8C:C7:EB:CB:EA:0D:14:08:CA:BA:D9:C0:64:8B:57:84:BC:9B:B7 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 0852 Signing time: Sun 02 Nov 2025 20:41:30 +0000 Manifest this update: Sun 02 Nov 2025 20:41:29 +0000 Manifest next update: Sun 09 Nov 2025 20:41:29 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: 2AHFwZhupA6lS5y3+YNtHmLtxCK0cVRDdeaFR3cywsY=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: sI83SKQ1KIXzAI6k70Vt5zWHUlxvGed2ohcbiQweEnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Nov 2 20:41:29 2025 GMT Not After : Nov 9 20:41:29 2025 GMT Subject: CN=6907c1f9-8ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:56:69:1f:a6:c5:2a:27:2b:2a:6b:ce:43: 09:37:d4:b2:d1:ad:4e:08:0f:90:81:aa:f9:3e:4d: 81:14:9f:11:8f:19:d5:a8:1a:f0:cf:0b:81:98:f8: 77:39:fa:4e:06:7a:c2:32:1a:28:0e:05:69:0e:b5: 6a:77:8e:f3:3d:32:47:74:d4:5b:31:bc:5c:17:be: 71:c9:53:56:90:74:74:74:b4:fc:2c:1c:71:10:56: 26:00:59:00:5a:48:cd:69:c5:ac:ae:dc:9f:c3:64: 3e:0e:ef:a8:a6:09:51:18:58:6e:95:a8:91:a3:14: 73:65:81:e3:64:a1:ed:4b:82:80:dc:88:52:28:5e: 34:bb:c3:0d:8b:c7:27:f7:92:fd:6d:75:d3:2b:86: 73:75:b0:39:3c:7b:db:39:f6:c6:f9:72:d5:6f:45: 88:1b:d1:eb:08:a8:f6:86:a4:a2:9f:36:a9:3c:9a: b4:c0:c0:bb:67:02:5f:7d:10:3e:1d:44:6b:9c:3e: 10:e5:c7:a7:f2:8e:0d:92:f6:ae:71:9f:cf:26:4d: f2:3c:a4:f7:c7:b4:43:d8:8b:09:a4:11:a4:ad:05: 0e:ba:28:91:e3:2b:e1:27:0e:8f:29:0b:c6:d7:cc: 36:c5:a7:b9:63:06:40:e3:53:f5:81:99:07:7d:fa: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:C7:EB:CB:EA:0D:14:08:CA:BA:D9:C0:64:8B:57:84:BC:9B:B7 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:07:13:46:a4:69:71:f4:dc:34:8c:6b:d9:dd:da:82:08:05: 6a:7e:7f:f3:74:65:98:24:44:10:9c:76:35:91:29:b4:19:38: be:12:c8:28:f3:11:1e:0e:34:31:c9:9f:b8:73:35:5d:b2:07: 3d:51:73:0a:61:03:9c:0d:34:cf:0e:8d:a0:85:75:0f:36:1b: d6:31:da:cb:66:e0:df:23:27:a3:9f:ac:4e:02:99:ea:13:f5: 97:40:7b:9c:78:05:a7:72:5a:e7:db:a8:93:ab:a7:8d:f0:d8: e8:a1:cf:c0:bb:72:2b:b0:2e:8e:bb:10:7e:fa:15:5f:ea:5c: e4:b0:f8:7a:70:60:8c:1b:4d:f7:3e:4a:63:f9:7c:c0:b0:bf: c2:2b:b2:60:1e:89:f8:91:05:0c:a6:47:76:ce:ce:25:b7:47: a7:88:a4:d2:5c:e9:62:62:36:b2:42:1a:3d:1f:54:bc:41:4a: 16:7a:28:31:c8:32:72:bb:1a:d3:1a:bf:05:01:ff:f0:42:b8: b8:c2:c3:2e:15:b3:f0:d8:c6:9d:7a:fa:58:28:be:75:99:c0: 0e:cf:ec:9b:5c:1d:15:97:39:a5:ec:fe:b9:01:ba:3a:0d:af: 65:96:ec:24:c3:f8:63:70:8e:2f:be:0f:cf:ba:7f:ed:02:b7: 3a:13:52:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUxMTAyMjA0MTI5WhcNMjUxMTA5MjA0MTI5WjAYMRYwFAYD VQQDEw02OTA3YzFmOS04ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydVWaR+mxSonKyprzkMJN9Sy0a1OCA+Qgar5Pk2BFJ8RjxnVqBrwzwuBmPh3 OfpOBnrCMhooDgVpDrVqd47zPTJHdNRbMbxcF75xyVNWkHR0dLT8LBxxEFYmAFkA WkjNacWsrtyfw2Q+Du+opglRGFhulaiRoxRzZYHjZKHtS4KA3IhSKF40u8MNi8cn 95L9bXXTK4ZzdbA5PHvbOfbG+XLVb0WIG9HrCKj2hqSinzapPJq0wMC7ZwJffRA+ HURrnD4Q5cen8o4NkvaucZ/PJk3yPKT3x7RD2IsJpBGkrQUOuiiR4yvhJw6PKQvG 18w2xae5YwZA41P1gZkHffqI3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqMx+vL 6g0UCMq62cBki1eEvJu3MB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqBxNGpGlx9Nw0jGvZ3dqCCAVqfn/zdGWYJEQQnHY1kSm0GTi+Esgo 8xEeDjQxyZ+4czVdsgc9UXMKYQOcDTTPDo2ghXUPNhvWMdrLZuDfIyejn6xOApnq E/WXQHuceAWnclrn26iTq6eN8Njooc/Au3IrsC6OuxB++hVf6lzksPh6cGCMG033 Pkpj+XzAsL/CK7JgHon4kQUMpkd2zs4lt0eniKTSXOliYjayQho9H1S8QUoWeigx yDJyuxrTGr8FAf/wQri4wsMuFbPw2MadevpYKL51mcAOz+ybXB0Vlzml7P65Abo6 Da9lluwkw/hjcI4vvg/Pun/tArc6E1KG -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:04 2025 by rpki-client