$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: V2n0D1HZW7295E0OvFUzDA6R+id+hdLFTS1EY1UlgyU= Subject key identifier: 07:4E:AD:BB:B2:2E:CB:CA:23:59:98:18:12:F0:7E:15:8D:C6:0D:10 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 049C Signing time: Sun 02 Nov 2025 23:58:59 +0000 Manifest this update: Sun 02 Nov 2025 23:58:59 +0000 Manifest next update: Sun 09 Nov 2025 23:58:59 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: TPsuY1yIRAL3eJpz7Z/cnyB0gsYh+PXgcZy4CMOVH2E=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Nov 2 23:58:59 2025 GMT Not After : Nov 9 23:58:59 2025 GMT Subject: CN=6907f043-dd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:55:6d:82:22:a3:da:76:28:63:0d:76:74: da:93:1c:e8:fd:ed:88:c9:ca:e1:db:2b:d1:7a:23: 4d:3c:8a:39:29:b6:f4:3c:30:32:6a:93:06:9d:d9: d1:48:29:12:67:70:59:e7:ce:32:6e:ea:a8:3b:e6: f6:fc:e6:cd:e0:6f:8a:76:2e:fc:fb:27:c8:49:d0: a5:db:3f:f0:bb:89:d2:06:51:3d:a0:0c:90:4f:6e: 0f:33:2a:96:c4:24:cb:d3:a7:6d:c3:13:b1:85:18: 0a:9d:fd:aa:e0:73:9d:ef:08:33:b1:0e:ec:f5:80: 24:e4:e6:12:81:b3:f3:aa:4e:0a:dc:11:22:7f:fb: ad:7d:3c:04:0d:f1:39:a1:19:7e:e4:db:d6:c2:e0: 7e:28:9b:91:d7:9a:02:eb:a0:b1:5b:0d:e8:4d:73: 46:61:46:4e:31:ed:3a:b8:57:43:20:dc:c4:13:e9: 97:93:04:d3:08:09:cc:20:36:2e:af:5f:8d:ef:4a: 57:6c:3c:9f:e8:c0:2f:4f:0f:b5:53:9c:f3:10:55: 5f:34:10:4f:fe:b7:08:8c:74:e2:55:1d:0e:0c:ec: 3e:a5:6c:eb:57:0d:c7:b4:b9:ce:9b:f2:f6:01:ff: 31:ff:03:d7:8b:07:2c:f8:d4:56:3d:28:26:25:8d: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:AD:BB:B2:2E:CB:CA:23:59:98:18:12:F0:7E:15:8D:C6:0D:10 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:65:41:f6:0f:d3:ef:d0:47:29:7a:3b:58:cb:b3:5e:30:83: f2:c0:a8:5e:41:aa:b8:42:d3:88:fb:5d:47:91:90:41:de:f9: 5f:8f:75:fc:b0:97:b4:84:be:56:09:36:73:10:49:d3:92:17: c7:16:da:b4:5c:d2:3d:67:c9:02:6f:d6:b2:88:fe:65:e4:19: 1c:76:62:fb:e6:c3:0d:59:a7:45:6b:92:04:da:e0:e7:29:ba: c4:ef:5c:73:a6:27:1b:f2:a4:82:98:e0:ea:84:49:b1:fd:cd: 32:82:35:74:76:a4:af:bd:b8:20:b0:13:9b:af:4d:55:65:f6: 30:d2:da:8c:af:93:6c:46:c0:86:72:df:f1:1a:a3:24:b6:94: d8:e2:8d:eb:4d:da:d5:16:21:52:96:9c:8f:d9:c7:db:a9:7a: b9:72:1f:62:b7:a0:78:27:d7:2d:ce:0c:5a:dc:c3:f6:e4:56: 3e:3b:cb:d3:5d:2a:d0:d9:de:0e:8a:6d:45:8c:e3:2f:c6:d3: 96:4e:86:5b:1e:b0:5d:ef:27:1b:7a:25:85:e1:bc:83:6d:60: 40:c6:74:77:59:c0:95:da:fb:d6:3b:e9:75:7d:52:e2:22:ab: da:7c:13:81:91:7f:67:c4:15:6d:e7:e3:40:47:de:6a:ff:d8: f7:bc:31:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUxMTAyMjM1ODU5WhcNMjUxMTA5MjM1ODU5WjAYMRYwFAYD VQQDEw02OTA3ZjA0My1kZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeFVbYIio9p2KGMNdnTakxzo/e2Iycrh2yvReiNNPIo5Kbb0PDAyapMGndnR SCkSZ3BZ584ybuqoO+b2/ObN4G+Kdi78+yfISdCl2z/wu4nSBlE9oAyQT24PMyqW xCTL06dtwxOxhRgKnf2q4HOd7wgzsQ7s9YAk5OYSgbPzqk4K3BEif/utfTwEDfE5 oRl+5NvWwuB+KJuR15oC66CxWw3oTXNGYUZOMe06uFdDINzEE+mXkwTTCAnMIDYu r1+N70pXbDyf6MAvTw+1U5zzEFVfNBBP/rcIjHTiVR0ODOw+pWzrVw3HtLnOm/L2 Af8x/wPXiwcs+NRWPSgmJY0M9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdOrbuy LsvKI1mYGBLwfhWNxg0QMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArZUH2D9Pv0EcpejtYy7NeMIPywKheQaq4QtOI+11HkZBB3vlfj3X8 sJe0hL5WCTZzEEnTkhfHFtq0XNI9Z8kCb9ayiP5l5BkcdmL75sMNWadFa5IE2uDn KbrE71xzpicb8qSCmODqhEmx/c0ygjV0dqSvvbggsBObr01VZfYw0tqMr5NsRsCG ct/xGqMktpTY4o3rTdrVFiFSlpyP2cfbqXq5ch9it6B4J9ctzgxa3MP25FY+O8vT XSrQ2d4Oim1FjOMvxtOWToZbHrBd7ycbeiWF4byDbWBAxnR3WcCV2vvWO+l1fVLi IqvafBOBkX9nxBVt5+NAR95q/9j3vDG6 -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:50 2025 by rpki-client