$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: 7oemtMwrdL/SXDPIUgBPveTebNjSC5Dciz2/6Z188Iw= Subject key identifier: 06:AE:CB:0A:A1:20:1A:26:20:6A:9D:2B:BB:CC:F2:AE:0E:B3:0A:28 Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 01D2 Signing time: Wed 05 Nov 2025 02:56:05 +0000 Manifest this update: Wed 05 Nov 2025 02:56:05 +0000 Manifest next update: Wed 12 Nov 2025 02:56:05 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: QHIowAH//NlnxgcMio+mExhMBmZn/WAbuRpbft/2q3k=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: INPCDc0DcqgC408Ka6XEyt5LGDqlBDYRzaUMMyrzKIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: Nov 5 02:56:05 2025 GMT Not After : Nov 12 02:56:05 2025 GMT Subject: CN=690abcc5-98c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:bd:de:11:b3:63:38:39:b5:e8:1f:57:a0: 19:12:49:fc:2f:60:13:7e:86:e1:90:ab:16:d3:ae: f5:ba:d7:f3:ab:95:be:8b:f4:59:39:68:12:24:39: f1:ec:e5:cd:fd:1a:d3:e6:34:b0:7d:94:3d:e9:57: 3a:b5:4c:7b:9b:85:e9:d7:aa:a6:75:9a:58:61:a7: 62:93:7d:20:95:c5:08:ce:b1:4c:da:ca:f4:19:45: 0c:ae:e5:b5:3d:e6:53:0d:ba:a9:60:59:1f:0c:52: 40:15:f4:c6:23:63:c9:c0:49:6e:35:68:bd:23:7f: ca:ac:5c:a6:1b:b4:6b:e3:22:b8:92:ae:50:03:0a: 0b:4a:24:1e:e5:99:1c:cc:8b:38:73:84:9f:9e:2d: f8:01:af:f6:55:92:7e:d7:0e:d9:9f:47:e0:a2:2c: 4e:6a:65:c5:99:e6:68:38:13:54:4b:51:2a:51:4d: bd:fc:24:88:03:ac:9d:2e:73:9e:eb:b9:36:e4:78: b9:d6:b4:87:b9:da:d0:52:fc:6a:87:be:8a:0a:a1: a4:8b:51:cf:70:b9:2f:ba:57:d4:f2:7a:6f:79:ed: 99:88:42:76:29:00:b4:5e:ef:06:e1:48:87:88:e4: b5:ac:89:2a:7f:87:67:22:85:50:8c:4d:71:11:a6: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:CB:0A:A1:20:1A:26:20:6A:9D:2B:BB:CC:F2:AE:0E:B3:0A:28 X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:89:89:f1:9a:56:e5:ac:ac:47:69:16:8c:a1:4a:db:5e:8a: 4e:79:e4:3e:4f:b2:88:b9:9d:89:98:20:26:6d:1a:5d:8e:fc: 8a:0d:bd:e7:bf:33:0e:2f:38:54:e3:c1:d3:5b:8b:ab:be:c5: 7c:a6:83:40:81:5d:88:84:77:43:84:ef:12:29:f6:bf:66:5f: 0d:28:6d:a5:e9:e6:40:ed:6c:06:54:38:e7:31:86:3b:ce:3d: 9e:a5:d4:53:38:14:13:b5:44:2e:a6:b0:ca:dc:3c:6e:de:a0: bb:df:3d:ee:f6:38:b9:26:d0:1c:47:68:b8:c0:99:7e:fa:5d: a8:e9:b4:8f:dc:ea:2f:33:af:08:6e:cd:bc:18:5c:5f:9d:82: f1:d7:1e:3a:1a:8c:81:b3:30:09:6f:fa:e5:25:59:70:7a:b8: 08:4e:d0:27:fe:65:9f:a0:eb:77:c7:d9:08:f8:c0:22:5d:f3: 05:fa:a0:87:13:27:00:ea:bc:2c:5f:79:88:cc:36:b5:b3:20: da:bf:18:42:b2:98:c5:67:47:ea:84:92:e3:b7:a3:43:0b:85: cf:44:2f:63:7d:97:cb:42:46:b4:22:78:f6:26:a9:f1:79:87: 48:0b:02:da:f2:53:b1:8f:62:7d:0b:c3:8f:51:f3:4a:0c:08: ac:78:ed:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjUxMTA1MDI1NjA1WhcNMjUxMTEyMDI1NjA1WjAYMRYwFAYD VQQDEw02OTBhYmNjNS05OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjG93hGzYzg5tegfV6AZEkn8L2ATfobhkKsW0671utfzq5W+i/RZOWgSJDnx 7OXN/RrT5jSwfZQ96Vc6tUx7m4Xp16qmdZpYYadik30glcUIzrFM2sr0GUUMruW1 PeZTDbqpYFkfDFJAFfTGI2PJwEluNWi9I3/KrFymG7Rr4yK4kq5QAwoLSiQe5Zkc zIs4c4Sfni34Aa/2VZJ+1w7Zn0fgoixOamXFmeZoOBNUS1EqUU29/CSIA6ydLnOe 67k25Hi51rSHudrQUvxqh76KCqGki1HPcLkvulfU8npvee2ZiEJ2KQC0Xu8G4UiH iOS1rIkqf4dnIoVQjE1xEaYavwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAauywqh IBomIGqdK7vM8q4OswooMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFiYnxmlblrKxHaRaMoUrbXopOeeQ+T7KIuZ2JmCAmbRpdjvyKDb3n vzMOLzhU48HTW4urvsV8poNAgV2IhHdDhO8SKfa/Zl8NKG2l6eZA7WwGVDjnMYY7 zj2epdRTOBQTtUQuprDK3Dxu3qC73z3u9ji5JtAcR2i4wJl++l2o6bSP3OovM68I bs28GFxfnYLx1x46GoyBszAJb/rlJVlwergITtAn/mWfoOt3x9kI+MAiXfMF+qCH EycA6rwsX3mIzDa1syDavxhCspjFZ0fqhJLjt6NDC4XPRC9jfZfLQka0Inj2Jqnx eYdICwLa8lOxj2J9C8OPUfNKDAiseO23 -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:14 2025 by rpki-client