$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: gI4K8H81ypm5JDYcH54ukxc8aw+/7slJ9/Qn+DKyxV0= Subject key identifier: 3E:5B:D8:8B:8B:68:63:B1:7F:52:D7:32:11:F3:99:E1:C9:4F:A3:06 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 0121 Signing time: Wed 05 Nov 2025 04:51:56 +0000 Manifest this update: Wed 05 Nov 2025 04:51:56 +0000 Manifest next update: Wed 12 Nov 2025 04:51:56 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: U5yqlWWHtJTVfMwjdzlbZj/UAO++7ReYuSD2VjrwSnM=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Nov 5 04:51:56 2025 GMT Not After : Nov 12 04:51:56 2025 GMT Subject: CN=690ad7ec-50d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f3:30:c7:26:29:d6:ad:93:f9:30:04:da:99: a7:07:fd:40:05:ec:47:4c:96:dd:45:32:bc:ca:2d: 98:b9:98:0a:fc:d8:4d:18:3d:47:cd:b2:5b:cb:96: 62:0a:02:fd:93:1f:83:bb:59:20:a9:63:55:f9:c9: bb:02:41:81:73:ed:3c:17:41:c7:4d:97:8f:49:92: 76:74:8b:f1:ea:72:22:6d:61:3c:27:e3:63:73:e6: 14:f3:37:d8:ec:aa:d7:f3:46:9e:a5:61:4d:bc:28: 88:e2:2e:32:7f:4c:56:86:e7:4b:d5:f4:97:91:f9: d6:fb:df:49:e4:20:9e:b7:16:c1:6b:99:65:47:40: e4:44:4a:53:50:04:e4:13:25:22:32:f7:b5:cf:7a: cc:98:5c:b3:72:00:32:dd:65:13:ed:a8:a8:f2:38: 50:72:62:95:05:04:b7:74:1e:41:0b:db:21:c2:69: ab:2c:b4:4e:1e:d0:ad:e5:cc:19:cc:54:00:9d:26: 4c:f9:1f:69:aa:cf:c1:70:c1:9f:c7:e1:c8:20:01: 93:d1:50:76:f7:4c:12:3f:d6:1c:10:e3:e3:9f:e9: 03:e2:80:f2:29:db:4c:34:6e:4e:e7:12:cc:27:ee: 22:0f:a3:f6:f1:c7:24:1c:a9:a5:bc:20:6c:7d:bf: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:D8:8B:8B:68:63:B1:7F:52:D7:32:11:F3:99:E1:C9:4F:A3:06 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:27:8d:e6:6f:3e:82:4e:1e:7e:26:88:a3:db:1a:79:50:a9: ed:92:0d:bc:81:4b:7f:21:60:4e:f8:54:83:bb:32:0d:5e:b9: f0:73:7c:5c:09:d3:f4:2f:82:bb:bd:bb:a5:a9:32:2a:b4:fe: e1:a8:92:d2:17:65:aa:32:d2:27:53:0c:31:64:b6:25:7d:b3: 09:95:61:29:23:fe:7c:d4:12:b9:b3:ba:ee:f3:24:16:cf:f1: e5:03:97:c0:be:fd:39:67:7b:56:3a:35:2e:af:a4:a3:19:a2: 7b:52:a4:e4:c2:06:89:e3:6a:c1:4f:db:d3:96:a4:05:90:11: 9a:8f:60:d3:9a:0b:ed:17:d6:69:01:2d:42:71:54:e6:1e:30: a2:7f:8b:4a:13:21:f6:f3:17:03:8f:c3:56:a2:0f:11:a2:53: 81:6e:f8:7c:23:64:c3:a3:90:e2:ae:5d:33:57:2d:1f:6b:a2: 2a:ee:be:53:fa:f9:31:79:c0:3a:a8:d1:71:e9:1c:9b:e7:73: 36:50:94:16:54:5b:f8:9c:05:5b:e4:41:fa:36:b2:0c:a9:d1: ca:56:48:9c:05:2b:32:43:e5:38:70:cb:72:af:53:07:af:e9: 99:d6:bd:46:62:5e:3d:d7:38:9a:2d:99:7d:50:f2:bf:4b:a8: 4c:1f:4e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUxMTA1MDQ1MTU2WhcNMjUxMTEyMDQ1MTU2WjAYMRYwFAYD VQQDEw02OTBhZDdlYy01MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fMwxyYp1q2T+TAE2pmnB/1ABexHTJbdRTK8yi2YuZgK/NhNGD1HzbJby5Zi CgL9kx+Du1kgqWNV+cm7AkGBc+08F0HHTZePSZJ2dIvx6nIibWE8J+Njc+YU8zfY 7KrX80aepWFNvCiI4i4yf0xWhudL1fSXkfnW+99J5CCetxbBa5llR0DkREpTUATk EyUiMve1z3rMmFyzcgAy3WUT7aio8jhQcmKVBQS3dB5BC9shwmmrLLROHtCt5cwZ zFQAnSZM+R9pqs/BcMGfx+HIIAGT0VB290wSP9YcEOPjn+kD4oDyKdtMNG5O5xLM J+4iD6P28cckHKmlvCBsfb+zMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5b2IuL aGOxf1LXMhHzmeHJT6MGMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0J43mbz6CTh5+Joij2xp5UKntkg28gUt/IWBO+FSDuzINXrnwc3xc CdP0L4K7vbulqTIqtP7hqJLSF2WqMtInUwwxZLYlfbMJlWEpI/581BK5s7ru8yQW z/HlA5fAvv05Z3tWOjUur6SjGaJ7UqTkwgaJ42rBT9vTlqQFkBGaj2DTmgvtF9Zp AS1CcVTmHjCif4tKEyH28xcDj8NWog8RolOBbvh8I2TDo5Dirl0zVy0fa6Iq7r5T +vkxecA6qNFx6Ryb53M2UJQWVFv4nAVb5EH6NrIMqdHKVkicBSsyQ+U4cMtyr1MH r+mZ1r1GYl491ziaLZl9UPK/S6hMH06U -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:00 2025 by rpki-client