$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: MnHEsCdRXdFOvrK1rdcYGb1GdOzHQO34R88BVtepUks= Subject key identifier: F4:EE:CF:B1:7E:D4:40:94:89:CC:63:4B:26:FC:C2:01:17:0F:C0:87 Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 0945 Signing time: Sun 02 Nov 2025 20:08:37 +0000 Manifest this update: Sun 02 Nov 2025 20:08:37 +0000 Manifest next update: Sun 09 Nov 2025 20:08:37 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: E8JiBuxcmrmYAg+/PCclRyauLz+Y+YruC33zCa2Ay9s=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Nov 2 20:08:37 2025 GMT Not After : Nov 9 20:08:37 2025 GMT Subject: CN=6907ba45-53c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:9b:7f:90:89:d4:10:b6:43:ed:51:75:e6: 49:c3:88:ba:49:93:18:19:8f:9e:ab:d0:89:ef:22: 5d:a3:ec:78:82:fc:45:80:0c:76:2b:05:aa:c2:b2: 3c:4b:e8:94:c1:45:ca:73:59:15:d3:57:8a:4e:7a: 5f:a9:73:3b:7f:bc:27:99:6b:81:a2:58:a6:cf:da: 1a:5d:5b:6c:d5:72:c3:dd:69:82:cb:d6:ec:11:2f: c7:47:39:da:e5:c8:3b:a5:cc:29:b6:f3:15:45:7d: 94:b4:d4:79:eb:87:84:79:e7:86:81:5b:29:59:39: d8:e1:33:4d:1a:8d:70:fd:ad:af:3e:3c:0c:33:e9: 9f:df:81:d6:93:69:ea:d3:e5:91:a8:d0:81:43:c5: 19:36:af:d7:26:37:1e:44:4a:34:7d:e0:c9:54:ce: 44:ee:59:35:b8:13:70:e2:26:1a:63:8f:0e:e3:36: 66:0b:ad:67:a3:34:6b:e7:1e:b2:6d:9a:d2:70:18: 3d:f7:a6:17:cb:a7:27:51:b2:38:35:1c:99:7f:1c: b9:e9:c3:c7:3a:cb:2e:6b:8b:9f:f0:6f:fd:94:7a: 19:8c:0a:a6:50:35:8c:0e:3d:90:60:59:4a:7f:ba: 52:d9:da:b1:5c:7f:2d:12:97:fa:76:cf:e8:62:fb: c0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EE:CF:B1:7E:D4:40:94:89:CC:63:4B:26:FC:C2:01:17:0F:C0:87 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2c:88:1b:11:0d:6e:3a:7a:3f:15:5d:d3:52:ae:16:20:32: 07:07:f9:fc:14:9e:e3:4a:54:e2:84:39:0b:85:73:5e:73:5f: 64:e5:c9:40:ef:5a:b6:70:c9:83:15:2a:fe:d1:9e:2a:cc:f4: 60:70:ff:6d:53:02:be:a0:28:ee:39:2e:f0:72:11:de:dc:15: f9:99:b7:d9:b1:e8:89:63:d0:d8:2d:cb:12:6b:a0:e4:ca:b8: 3a:e5:86:19:ab:b9:2c:81:cd:29:ea:16:38:97:07:1f:28:82: 24:2c:2f:f7:cd:a9:c0:d3:c5:06:ea:1c:83:9b:51:b8:ca:51: b5:3f:2d:5e:22:ec:e1:c6:f5:50:c1:20:98:62:88:49:29:1a: bd:90:75:2d:e5:b4:02:21:5d:2a:38:26:98:b2:bc:0f:08:e8: 8c:97:cd:09:61:05:b3:5d:46:ab:12:ed:3e:57:ea:3e:b8:cd: 62:13:cf:6c:73:9a:e5:71:76:9c:d8:83:2c:51:b4:00:e4:01: 2d:e7:19:b2:b8:c0:ee:01:20:6e:c0:86:94:95:66:26:74:75: a9:98:93:e5:f9:bf:2b:5c:a5:4d:a1:7e:6a:c8:d2:80:c8:5a: 0f:0f:0d:88:01:4f:2c:e9:70:72:ad:5a:e8:7b:f9:e8:6b:49: 56:d8:52:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjUxMTAyMjAwODM3WhcNMjUxMTA5MjAwODM3WjAYMRYwFAYD VQQDEw02OTA3YmE0NS01M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8USbf5CJ1BC2Q+1RdeZJw4i6SZMYGY+eq9CJ7yJdo+x4gvxFgAx2KwWqwrI8 S+iUwUXKc1kV01eKTnpfqXM7f7wnmWuBolimz9oaXVts1XLD3WmCy9bsES/HRzna 5cg7pcwptvMVRX2UtNR564eEeeeGgVspWTnY4TNNGo1w/a2vPjwMM+mf34HWk2nq 0+WRqNCBQ8UZNq/XJjceREo0feDJVM5E7lk1uBNw4iYaY48O4zZmC61nozRr5x6y bZrScBg996YXy6cnUbI4NRyZfxy56cPHOssua4uf8G/9lHoZjAqmUDWMDj2QYFlK f7pS2dqxXH8tEpf6ds/oYvvAhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTuz7F+ 1ECUicxjSyb8wgEXD8CHMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGLIgbEQ1uOno/FV3TUq4WIDIHB/n8FJ7jSlTihDkLhXNec19k5clA 71q2cMmDFSr+0Z4qzPRgcP9tUwK+oCjuOS7wchHe3BX5mbfZseiJY9DYLcsSa6Dk yrg65YYZq7ksgc0p6hY4lwcfKIIkLC/3zanA08UG6hyDm1G4ylG1Py1eIuzhxvVQ wSCYYohJKRq9kHUt5bQCIV0qOCaYsrwPCOiMl80JYQWzXUarEu0+V+o+uM1iE89s c5rlcXac2IMsUbQA5AEt5xmyuMDuASBuwIaUlWYmdHWpmJPl+b8rXKVNoX5qyNKA yFoPDw2IAU8s6XByrVroe/noa0lW2FJZ -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:52 2025 by rpki-client