$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft File: d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json) Hash identifier: rJOkHq9xxe8Cr/NGgFU/S9jgIRxeRuNYk5jfAz1b0Q0= Subject key identifier: 9A:2F:BA:B0:D9:8D:F8:45:1D:17:1E:C2:DD:8D:7E:5E:E5:A9:4D:ED Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B Certificate issuer: /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft Manifest number: A1 Signing time: Wed 05 Nov 2025 06:28:54 +0000 Manifest this update: Wed 05 Nov 2025 06:28:53 +0000 Manifest next update: Wed 12 Nov 2025 06:28:53 +0000 Files and hashes: 1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: pSQNs0cCtZIDCQGl/tDNNse0mGNLL0BMcZnw7zUxIUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Validity Not Before: Nov 5 06:28:53 2025 GMT Not After : Nov 12 06:28:53 2025 GMT Subject: CN=690aeea6-ae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:06:19:3e:6c:aa:7f:80:fb:06:17:b9:12: 14:77:39:b7:22:cd:26:1b:1e:cc:df:d8:8e:c1:64: 73:16:a7:35:c6:ca:ff:78:73:5d:cc:bd:6b:5a:64: 66:18:00:e5:66:f1:cc:1e:b3:4b:fa:e6:07:e7:17: eb:ca:ac:d1:b3:7a:c2:3e:a9:9f:4b:d0:44:db:47: 18:c6:f7:90:b9:a5:78:e2:99:63:b5:76:05:d5:8e: 90:b2:fc:5e:92:6e:bd:0b:62:bb:9a:80:67:f8:44: 46:46:27:b0:74:ac:b6:20:a5:62:5b:4d:07:53:16: 67:d2:95:b7:3c:a4:40:7f:51:cd:13:6a:ce:37:72: ff:43:c2:9e:60:91:08:03:2e:11:ce:a4:68:bb:56: 11:e9:e0:57:28:b2:06:72:a7:f9:e3:d6:54:4b:c1: 00:8e:5b:52:15:fc:e6:b1:cb:94:95:60:d7:00:f6: 0d:4c:64:39:20:64:bf:ff:7d:ad:47:ef:78:2f:8a: 19:f8:a6:ed:f1:30:a2:b3:5d:7b:7d:c5:cd:33:bc: 53:2a:a8:04:f9:97:9d:0a:ed:8b:7e:8c:a5:cb:30: a8:4c:e8:b7:50:14:f2:e8:f2:32:10:f9:b2:e9:d4: c4:c4:91:66:01:32:f5:4f:91:89:6a:02:3b:01:0b: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:BA:B0:D9:8D:F8:45:1D:17:1E:C2:DD:8D:7E:5E:E5:A9:4D:ED X509v3 Authority Key Identifier: keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:b2:31:00:65:10:1e:53:04:16:e0:83:b0:c5:33:ea:28: 06:17:cb:45:8b:3f:aa:c9:b6:4c:31:3a:68:28:9d:3a:11:3c: 01:60:06:81:ce:27:dc:f8:30:e6:d6:20:c9:5e:db:69:e3:88: cc:57:3f:15:00:e3:39:ca:5e:20:ec:cc:c4:86:5d:34:7f:65: 6b:e3:0b:96:8d:2e:9b:f8:48:47:b7:16:f3:e4:02:de:8d:44: f9:e6:ac:e6:1e:ed:5e:69:eb:cf:d5:e5:43:bc:f6:97:d0:05: a1:0e:26:5b:3a:85:b8:58:30:e5:59:a2:a6:c6:c4:f7:50:5a: b3:a8:88:57:26:47:a7:6c:78:13:7c:c2:38:ca:66:35:71:73: 4d:ee:3a:9c:15:ad:dc:f9:b1:52:8c:5f:08:91:d4:f8:7b:19: f4:b2:f9:b4:14:50:2d:54:aa:73:30:26:20:8a:eb:f2:90:5f: 7e:61:a1:5b:fe:83:23:cd:28:a9:ab:6b:75:ae:f8:f0:8c:05: c5:67:8c:41:d7:28:93:6b:4f:89:87:f6:43:9c:17:26:12:fd: 45:d9:17:e9:b2:cc:bd:27:db:0b:b8:72:17:06:90:d5:20:84: 81:14:6a:80:84:cd:6b:18:0d:c5:10:53:95:1c:34:a9:b3:7f: 3b:e8:b1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyMDcxMTAvBgNVBAUTKDc3N0RCODk3NDU3MEU5QjZDMDRFMjY1N0U2RDBBNTAz N0M3MTg4NkIwHhcNMjUxMTA1MDYyODUzWhcNMjUxMTEyMDYyODUzWjAYMRYwFAYD VQQDEw02OTBhZWVhNi1hZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvMGGT5sqn+A+wYXuRIUdzm3Is0mGx7M39iOwWRzFqc1xsr/eHNdzL1rWmRm GADlZvHMHrNL+uYH5xfryqzRs3rCPqmfS9BE20cYxveQuaV44pljtXYF1Y6Qsvxe km69C2K7moBn+ERGRiewdKy2IKViW00HUxZn0pW3PKRAf1HNE2rON3L/Q8KeYJEI Ay4RzqRou1YR6eBXKLIGcqf549ZUS8EAjltSFfzmscuUlWDXAPYNTGQ5IGS//32t R+94L4oZ+Kbt8TCis117fcXNM7xTKqgE+ZedCu2LfoylyzCoTOi3UBTy6PIyEPmy 6dTExJFmATL1T5GJagI7AQt+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJovurDZ jfhFHRcewt2Nfl7lqU3tMB8GA1UdIwQYMBaAFHd9uJdFcOm2wE4mV+bQpQN8cYhr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9CNDg4NjFDNkMy MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZiYkFUaVpYNXRDbEEzeHhp R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzMjRsMFZ3NmJiQVRpWlg1dENsQTN4eGlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjIwNy9CNDg4NjFDNkMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZi YkFUaVpYNXRDbEEzeHhpR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtbrIxAGUQHlMEFuCDsMUz6igGF8tFiz+qybZMMTpoKJ06ETwBYAaB zifc+DDm1iDJXttp44jMVz8VAOM5yl4g7MzEhl00f2Vr4wuWjS6b+EhHtxbz5ALe jUT55qzmHu1eaevP1eVDvPaX0AWhDiZbOoW4WDDlWaKmxsT3UFqzqIhXJkenbHgT fMI4ymY1cXNN7jqcFa3c+bFSjF8IkdT4exn0svm0FFAtVKpzMCYgiuvykF9+YaFb /oMjzSipq2t1rvjwjAXFZ4xB1yiTa0+Jh/ZDnBcmEv1F2Rfpssy9J9sLuHIXBpDV IISBFGqAhM1rGA3FEFOVHDSps3876LGZ -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:38 2025 by rpki-client