$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: AJCUAlYKQaADB2e1YI67c2lRBmklBBHUr2cnax6HrLk= Subject key identifier: 9D:A5:B9:1A:F3:B3:A4:18:46:3F:EE:2D:24:22:F7:9F:8F:A1:3D:01 Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 0287 Signing time: Wed 05 Nov 2025 02:21:50 +0000 Manifest this update: Wed 05 Nov 2025 02:21:49 +0000 Manifest next update: Wed 12 Nov 2025 02:21:49 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: dpKgndw6mN3zOkEb2xU/1Vs1F1iJ9hvc2CkA+kqBFl0=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: lvQ8BAOEHHI1X0qXH/UaJKBYn5+t8IOjYcFWQGKElqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Nov 5 02:21:49 2025 GMT Not After : Nov 12 02:21:49 2025 GMT Subject: CN=690ab4be-f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:61:9b:66:aa:ac:e0:18:f0:d8:52:59:1d: 32:5f:59:be:20:74:4c:c7:44:ce:6a:e6:d3:c0:85: bf:bc:f6:7b:92:4c:68:79:6e:68:85:01:3c:b5:af: 7f:7b:af:af:a5:b5:47:cf:24:7b:c0:99:47:d2:cb: 05:86:b1:dd:80:1c:65:ee:96:24:8e:76:93:f9:56: 9c:22:f1:d8:91:b3:c8:10:a2:85:8d:39:93:6f:3c: 28:f7:c0:a1:a4:d3:4b:3c:6c:a4:73:35:d4:a2:9b: a6:2f:95:64:53:f2:93:59:ca:13:8b:86:4c:3f:96: 4b:3b:34:37:58:f9:1b:78:d1:c6:96:11:dd:c3:29: 83:9e:5c:7a:3d:c1:ed:ac:9e:70:ab:98:f3:bc:79: dc:3e:11:89:ee:62:44:f7:73:3f:90:75:24:b3:2d: d4:04:41:93:a5:4b:ca:a8:e3:1a:1a:81:ad:3c:d2: 01:e2:0d:2b:43:96:60:89:6e:f4:84:3a:d8:ca:06: 48:a6:66:c6:46:a0:fa:a7:28:6c:16:a0:49:64:18: af:61:d3:83:56:de:f6:de:bd:5f:8a:95:15:29:51: f4:65:dd:df:5b:46:23:45:63:19:64:5e:d2:51:bd: dd:6c:df:f0:5f:28:a4:27:c2:49:06:70:23:16:b0: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A5:B9:1A:F3:B3:A4:18:46:3F:EE:2D:24:22:F7:9F:8F:A1:3D:01 X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e3:42:62:93:7b:6a:a9:49:81:18:44:30:60:79:6c:bf:77: 39:b7:35:4a:2a:ae:bc:ed:40:04:55:ec:54:6c:64:22:48:51: 33:a5:2c:ea:ad:0e:38:ac:62:34:c3:a3:1c:4c:8e:4e:a3:36: 31:c0:bf:5c:ed:02:c3:9a:59:4a:ec:a1:b9:a1:c2:85:fd:1d: e1:c7:1f:59:3f:08:5b:17:33:26:94:18:a9:67:bb:d3:de:c3: a3:da:7c:db:7f:f5:b8:be:27:ee:a6:a7:9e:85:22:a3:cb:f9: 96:60:a2:9c:16:f3:5c:4c:bc:1c:72:58:2b:32:7f:42:63:96: 47:2c:7a:d9:23:fd:af:d4:ef:cb:1a:9d:bb:c0:3e:3c:b8:78: 69:61:da:fb:29:4d:76:c7:77:f5:c2:5a:00:b0:30:4b:14:8c: b0:c7:59:50:2c:3f:9d:48:e1:80:7d:08:68:f8:c1:ee:4c:83: 7c:5c:1e:08:0c:c0:44:01:7e:6e:75:cb:1f:68:f3:0b:48:80: 89:5f:4d:96:55:ba:92:04:92:ed:09:d1:2e:4f:6e:9e:d7:cf: 63:e1:9f:6f:5e:03:98:1b:b5:1a:7a:0f:80:eb:b7:5c:77:e5: cd:6b:4c:f5:b9:53:83:aa:3e:62:f5:11:3d:d4:8d:a1:18:04: 4f:64:a9:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlDODExMC8GA1UEBRMoQUREQjJCRjNDNDE4MjZENkQwRkJFOEQyQkYyRjA1MkQ5 OEE1RDk0OTAeFw0yNTExMDUwMjIxNDlaFw0yNTExMTIwMjIxNDlaMBgxFjAUBgNV BAMTDTY5MGFiNGJlLWYyY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxJmGbZqqs4Bjw2FJZHTJfWb4gdEzHRM5q5tPAhb+89nuSTGh5bmiFATy1r397 r6+ltUfPJHvAmUfSywWGsd2AHGXuliSOdpP5Vpwi8diRs8gQooWNOZNvPCj3wKGk 00s8bKRzNdSim6YvlWRT8pNZyhOLhkw/lks7NDdY+Rt40caWEd3DKYOeXHo9we2s nnCrmPO8edw+EYnuYkT3cz+QdSSzLdQEQZOlS8qo4xoaga080gHiDStDlmCJbvSE OtjKBkimZsZGoPqnKGwWoElkGK9h04NW3vbevV+KlRUpUfRl3d9bRiNFYxlkXtJR vd1s3/BfKKQnwkkGcCMWsPUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnaW5GvOz pBhGP+4tJCL3n4+hPQEwHwYDVR0jBBgwFoAUrdsr88QYJtbQ++jSvy8FLZil2Ukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUM4LzM4QjM4RTVFOERE NzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJV ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRzcjg4UVlKdGJRLS1qU3Z5OEZMWmlsMlVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUM4LzM4QjM4RTVFOERENzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRi US0talN2eThGTFppbDJVay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3jQmKTe2qpSYEYRDBgeWy/dzm3NUoqrrztQARV7FRsZCJIUTOlLOqt DjisYjTDoxxMjk6jNjHAv1ztAsOaWUrsobmhwoX9HeHHH1k/CFsXMyaUGKlnu9Pe w6PafNt/9bi+J+6mp56FIqPL+ZZgopwW81xMvBxyWCsyf0Jjlkcsetkj/a/U78sa nbvAPjy4eGlh2vspTXbHd/XCWgCwMEsUjLDHWVAsP51I4YB9CGj4we5Mg3xcHggM wEQBfm51yx9o8wtIgIlfTZZVupIEku0J0S5Pbp7Xz2Phn29eA5gbtRp6D4Drt1x3 5c1rTPW5U4OqPmL1ET3UjaEYBE9kqZU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:06 2025 by rpki-client