$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: e/my+5OnziN98r9ASHItDNrx5BbB82f1AFisa5f9fXM= Subject key identifier: CF:9A:83:2C:76:15:4A:1E:14:E1:33:3E:71:17:1E:4E:58:8E:69:66 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 34E1 Signing time: Thu 30 Oct 2025 14:23:41 +0000 Manifest this update: Thu 30 Oct 2025 14:23:41 +0000 Manifest next update: Thu 06 Nov 2025 14:23:41 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: CXo7COw/p8zrN1ksEA76yjSjjA2smXqDYM8uNcBjDzU=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Oct 30 14:23:41 2025 GMT Not After : Nov 6 14:23:41 2025 GMT Subject: CN=690374ed-5118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:6f:90:6a:9a:81:16:3f:4f:29:e9:c1:71: a6:6d:b0:14:59:11:c1:ef:50:98:a1:2b:33:f4:c6: 68:20:ea:a6:d3:82:82:5d:71:e1:fa:b7:9a:ff:bf: fa:2c:2f:e0:e4:4a:1b:53:84:0a:fc:6d:91:9d:e9: a8:db:2a:94:f7:4e:0c:94:13:ff:d5:79:73:0a:81: fc:cd:f3:32:ca:ba:7c:14:85:a2:30:29:a4:aa:8c: 57:d3:22:e0:53:3f:21:8f:06:cb:e9:12:62:df:99: 41:2a:91:2b:d5:22:a5:e2:25:6f:cb:b5:1c:86:35: 95:fc:b8:a9:7c:4e:14:ca:e7:17:b1:1d:72:7e:8d: 06:f4:0d:b2:42:7f:6a:8f:da:ad:d0:39:79:08:82: ed:61:7d:19:3c:1b:d9:b2:55:de:51:26:24:84:5e: 08:6e:6d:56:94:02:4b:5c:64:41:6d:47:48:44:e4: e8:f1:a0:82:da:ba:51:5b:91:d5:76:57:60:88:d3: 50:33:4e:06:17:20:aa:54:17:44:ec:9f:88:2b:86: 6d:bc:d1:50:6b:a5:7e:93:1d:25:c3:60:4f:db:cc: c1:68:11:3e:0d:4c:19:c9:68:6d:d3:fc:c2:e7:7a: 2f:92:d1:28:07:92:7f:fe:34:f4:35:89:94:ff:a4: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:83:2C:76:15:4A:1E:14:E1:33:3E:71:17:1E:4E:58:8E:69:66 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:da:01:a0:33:95:fc:1c:c3:3d:14:1f:2b:ad:a9:b7:8a:84: 29:bb:77:c8:32:c6:76:1f:b2:eb:d3:ae:36:55:00:38:8f:d7: c8:d3:a2:7d:57:b6:82:49:71:f5:0f:60:0e:64:9a:8f:f4:a4: 59:f8:05:02:cb:ab:a7:f5:10:8f:75:ab:09:29:da:e6:af:1a: df:b8:f8:8e:d2:38:f3:ab:3a:b7:ba:32:a5:af:e7:43:88:ec: 20:5d:19:07:5a:d0:a7:87:dc:f6:63:63:3a:ea:37:a3:0b:3a: 28:7b:af:cb:73:f5:06:2e:f0:d6:90:49:46:21:f2:83:2a:5d: 16:04:ef:92:99:85:1b:56:8b:59:f3:b5:3b:67:7c:4b:5d:0a: 54:cd:b1:45:e7:38:5d:41:bc:34:89:c5:5a:7c:a8:5c:8c:32: d5:0e:6e:05:ca:f9:95:b7:69:dd:98:ce:a3:05:19:ee:6c:e5: 33:30:e2:e3:6f:aa:ab:7e:93:a7:42:70:16:4b:f3:ba:7c:c1: 37:5a:47:25:e6:26:83:03:de:eb:f1:eb:74:ef:cd:9d:bf:0c: f3:8d:69:41:32:8d:dd:4b:46:fb:cc:87:cb:27:69:37:2a:53: 41:80:56:e3:b7:b0:e0:02:1a:5d:42:ef:f3:01:e9:00:29:09: 4c:8e:aa:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjUxMDMwMTQyMzQxWhcNMjUxMTA2MTQyMzQxWjAYMRYwFAYD VQQDEw02OTAzNzRlZC01MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlpvkGqagRY/TynpwXGmbbAUWRHB71CYoSsz9MZoIOqm04KCXXHh+rea/7/6 LC/g5EobU4QK/G2Rnemo2yqU904MlBP/1XlzCoH8zfMyyrp8FIWiMCmkqoxX0yLg Uz8hjwbL6RJi35lBKpEr1SKl4iVvy7UchjWV/LipfE4UyucXsR1yfo0G9A2yQn9q j9qt0Dl5CILtYX0ZPBvZslXeUSYkhF4Ibm1WlAJLXGRBbUdIROTo8aCC2rpRW5HV dldgiNNQM04GFyCqVBdE7J+IK4ZtvNFQa6V+kx0lw2BP28zBaBE+DUwZyWht0/zC 53ovktEoB5J//jT0NYmU/6RZ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+agyx2 FUoeFOEzPnEXHk5YjmlmMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO2gGgM5X8HMM9FB8rram3ioQpu3fIMsZ2H7Lr0642VQA4j9fI06J9 V7aCSXH1D2AOZJqP9KRZ+AUCy6un9RCPdasJKdrmrxrfuPiO0jjzqzq3ujKlr+dD iOwgXRkHWtCnh9z2Y2M66jejCzooe6/Lc/UGLvDWkElGIfKDKl0WBO+SmYUbVotZ 87U7Z3xLXQpUzbFF5zhdQbw0icVafKhcjDLVDm4FyvmVt2ndmM6jBRnubOUzMOLj b6qrfpOnQnAWS/O6fME3Wkcl5iaDA97r8et0782dvwzzjWlBMo3dS0b7zIfLJ2k3 KlNBgFbjt7DgAhpdQu/zAekAKQlMjqqm -----END CERTIFICATE-----Generated at Thu Oct 30 16:17:25 2025 by rpki-client