$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: AykqRXUog1entYi2y8/lcJxK/QLBPMXo0OOR41A3MYM= Subject key identifier: E2:CA:9D:62:F0:0F:3B:3A:B3:F2:39:A0:79:52:41:1B:C3:40:9D:9D Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 1851 Signing time: Sun 02 Nov 2025 16:31:25 +0000 Manifest this update: Sun 02 Nov 2025 16:31:24 +0000 Manifest next update: Sun 09 Nov 2025 16:31:24 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: 7r7/PLGp/UCowY4HVir7viiocJ7bA/oUXCcbBP+7Oh4=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: c58kYquiR7PhXwHG1m2k+88ex1+jC31dtd+q7AHBr2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6243 (0x1863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Nov 2 16:31:24 2025 GMT Not After : Nov 9 16:31:24 2025 GMT Subject: CN=6907875d-a93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:0e:02:08:ed:79:8d:94:92:e4:49:c7:03: 2d:42:f3:60:0b:a6:b8:a0:1b:18:e1:cb:77:0e:dc: e0:8d:1d:cb:93:5c:d3:94:e3:ba:85:0e:ac:31:1d: 75:76:95:8c:88:2e:9f:1e:7b:bd:23:c4:70:b1:66: 4a:11:01:9a:5f:b5:8d:30:85:a1:87:e6:c5:a1:d9: 8e:23:b8:68:47:96:c8:f8:0b:5b:a7:c8:3a:9c:17: 17:17:cf:7b:7e:5d:d3:76:f5:5e:d6:b1:4f:63:3a: 9b:ae:31:87:f5:c6:83:2e:8e:33:d0:51:fe:19:70: 9f:20:01:ac:70:c9:71:dc:7f:7f:6e:86:c6:76:84: 75:c6:6b:36:af:18:5b:52:f0:bc:50:db:4d:57:5a: 2f:a0:cc:d0:21:ff:4b:99:3f:83:2a:84:4b:f3:f5: f0:58:62:e2:d1:d1:f7:f0:e7:d6:2a:fa:1a:28:5d: 2f:3d:a5:ee:4a:03:e3:9a:d6:a8:67:82:3d:0f:01: 8f:14:ba:7f:e9:24:52:c5:da:0f:47:bf:2f:c3:d1: 12:d2:4a:35:9d:3e:20:76:3d:e1:e1:72:c1:eb:c6: 3d:4b:16:6d:cb:20:de:c6:e8:f6:c1:92:11:09:a3: 1a:7c:7b:f0:77:9a:6c:39:bb:b4:c3:ec:98:9b:6b: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:9D:62:F0:0F:3B:3A:B3:F2:39:A0:79:52:41:1B:C3:40:9D:9D X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:17:75:5c:0f:21:00:98:ae:e0:90:07:9b:29:09:54:56: 3e:e4:c8:26:85:77:08:e9:f5:e3:b7:60:71:17:b4:20:b9:bb: c1:15:c7:1c:8c:ce:a7:8d:31:21:8e:00:a6:e3:39:ae:71:b2: 7f:b5:c4:ba:78:0e:7d:e7:23:02:57:f0:e3:19:a1:4c:d3:b5: 09:40:8a:c0:61:42:65:e0:bd:d5:ad:fd:c7:94:b9:58:d7:e1: f5:e6:1f:f8:f9:73:53:6f:6e:6e:e3:8f:a4:1d:20:3f:01:19: bc:ea:c3:ea:9f:93:e7:cc:c0:9b:2e:b7:ee:11:00:dd:50:35: be:0b:1b:89:87:d3:24:27:50:51:f1:3c:f0:48:88:4a:f7:86: e8:79:f3:b0:95:78:0f:25:ee:79:97:f3:bc:3a:8f:b3:86:7d: 6b:13:29:1b:38:f7:ab:f0:16:24:10:cf:29:47:6a:9d:61:02: 97:50:8d:01:11:32:ef:c1:44:ba:cd:4f:80:5c:36:4d:2f:45: f9:d1:c2:10:55:e6:f7:67:1c:7c:44:e5:0c:0e:87:61:e3:8d: e1:0b:f5:c6:a1:a0:80:3b:05:7e:c8:8d:00:96:aa:03:23:1c: ef:1e:0d:b3:7c:7c:cc:f8:e1:52:19:bf:f1:11:0f:5a:0b:97: 29:87:25:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUxMTAyMTYzMTI0WhcNMjUxMTA5MTYzMTI0WjAYMRYwFAYD VQQDEw02OTA3ODc1ZC1hOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXgOAgjteY2UkuRJxwMtQvNgC6a4oBsY4ct3DtzgjR3Lk1zTlOO6hQ6sMR11 dpWMiC6fHnu9I8RwsWZKEQGaX7WNMIWhh+bFodmOI7hoR5bI+Atbp8g6nBcXF897 fl3TdvVe1rFPYzqbrjGH9caDLo4z0FH+GXCfIAGscMlx3H9/bobGdoR1xms2rxhb UvC8UNtNV1ovoMzQIf9LmT+DKoRL8/XwWGLi0dH38OfWKvoaKF0vPaXuSgPjmtao Z4I9DwGPFLp/6SRSxdoPR78vw9ES0ko1nT4gdj3h4XLB68Y9SxZtyyDexuj2wZIR CaMafHvwd5psObu0w+yYm2tR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLKnWLw Dzs6s/I5oHlSQRvDQJ2dMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspxd1XA8hAJiu4JAHmykJVFY+5MgmhXcI6fXjt2BxF7QgubvBFccc jM6njTEhjgCm4zmucbJ/tcS6eA595yMCV/DjGaFM07UJQIrAYUJl4L3Vrf3HlLlY 1+H15h/4+XNTb25u44+kHSA/ARm86sPqn5PnzMCbLrfuEQDdUDW+CxuJh9MkJ1BR 8TzwSIhK94boefOwlXgPJe55l/O8Oo+zhn1rEykbOPer8BYkEM8pR2qdYQKXUI0B ETLvwUS6zU+AXDZNL0X50cIQVeb3Zxx8ROUMDodh443hC/XGoaCAOwV+yI0AlqoD IxzvHg2zfHzM+OFSGb/xEQ9aC5cphyVm -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:09 2025 by rpki-client