$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: pLkK0NUW7kpfBwfkf6An0pSb7nhrc52eCxEr/3DXKQA= Subject key identifier: B6:9B:9F:D9:73:7E:0A:E5:43:E4:01:C1:5C:AA:1B:65:C9:6D:DA:E8 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0167 Signing time: Mon 03 Nov 2025 04:26:11 +0000 Manifest this update: Mon 03 Nov 2025 04:26:11 +0000 Manifest next update: Mon 10 Nov 2025 04:26:11 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: iARyitxCqlrNM0zKBruSgcjX59iX9V3GdNFhl60vWV0=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: MOt4/rtczZ2XuWNA4OgwbPaAH6x2sV9WPLPyaiDEfR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Nov 3 04:26:11 2025 GMT Not After : Nov 10 04:26:11 2025 GMT Subject: CN=69082ee3-697a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:2e:55:2e:c6:fa:05:17:cc:3c:e4:1f:0e: 1b:32:57:ec:32:bb:9b:3f:a3:7b:25:2d:81:46:19: 4b:8b:14:6e:45:e5:bd:48:66:38:65:5f:38:d8:18: 69:29:a6:28:2a:a5:c0:df:19:b1:71:c3:a9:31:1f: aa:5c:3c:8d:3e:3e:5c:bb:fb:0c:35:e6:21:87:d7: f9:0f:ad:14:0b:f8:99:d5:62:62:c2:85:51:a5:08: 77:aa:db:b1:af:0a:07:76:eb:e0:ab:dc:03:52:95: 37:0a:a4:ca:56:c5:41:dd:9e:a5:b6:d7:e8:14:a2: 49:28:5f:f4:66:bb:95:84:e5:b6:d8:69:b7:a9:62: fd:23:c5:3d:7d:05:d9:64:e3:62:14:50:62:b1:f4: 5a:a0:7d:33:b3:34:fc:c3:e6:b3:de:2d:7f:ba:9d: c8:f4:64:01:29:74:66:d3:a0:4f:6c:61:b2:60:33: 91:06:8b:d8:21:69:14:56:ad:bd:95:d5:31:85:ba: 82:25:12:d7:16:4f:89:8b:3b:10:b3:33:8d:f1:87: b1:45:98:f4:77:48:0c:18:87:a2:0e:5f:1b:57:ee: 46:7c:73:e5:79:e3:2a:9a:a1:2b:fc:2b:52:78:2c: aa:83:04:b3:42:cb:91:a2:55:4a:0d:aa:ed:c6:3d: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9B:9F:D9:73:7E:0A:E5:43:E4:01:C1:5C:AA:1B:65:C9:6D:DA:E8 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b0:ba:b0:84:df:df:c1:0f:98:c7:d1:60:d6:30:fc:02:d4: 37:4c:8b:4d:fa:84:6c:84:20:05:1d:dd:d1:c3:2d:12:ec:6f: 9c:b1:11:dc:93:8b:e2:55:e9:70:5b:07:bf:7c:39:92:5b:f5: 79:ac:e7:1a:e1:74:f3:60:b1:ae:86:52:e7:83:9d:13:20:ab: 41:5d:4d:c0:bf:c2:ed:e3:06:76:0d:73:68:cc:50:a3:8c:57: e2:8d:2f:9d:b5:97:45:a6:91:e9:33:47:45:a0:44:3f:b6:cb: f5:c0:1b:9c:a8:3e:db:81:8b:fa:aa:22:59:55:5e:22:c4:d3: dc:cb:7f:33:0f:30:58:37:3f:b1:b5:34:71:b3:c9:37:7e:2b: 27:01:c2:5b:2b:33:68:29:19:80:72:fb:cb:e5:36:ee:2c:15: 0b:84:3d:45:c6:5a:75:0d:87:df:8d:4b:b9:31:98:c8:66:49: 86:88:d3:8a:d3:ad:13:86:f3:f8:a6:ae:97:28:bf:73:7c:5f: 4f:96:14:93:fb:68:56:10:d6:bb:98:c5:ae:8f:6d:b3:b6:10: 9d:34:12:15:87:0a:a1:b3:43:ee:77:41:6e:5d:c1:1e:91:f6: d5:85:c8:ef:ac:3f:bb:53:b0:6c:43:4d:5b:67:1c:70:ed:5c: 4c:87:0a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjUxMTAzMDQyNjExWhcNMjUxMTEwMDQyNjExWjAYMRYwFAYD VQQDEw02OTA4MmVlMy02OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtsuVS7G+gUXzDzkHw4bMlfsMrubP6N7JS2BRhlLixRuReW9SGY4ZV842Bhp KaYoKqXA3xmxccOpMR+qXDyNPj5cu/sMNeYhh9f5D60UC/iZ1WJiwoVRpQh3qtux rwoHduvgq9wDUpU3CqTKVsVB3Z6lttfoFKJJKF/0ZruVhOW22Gm3qWL9I8U9fQXZ ZONiFFBisfRaoH0zszT8w+az3i1/up3I9GQBKXRm06BPbGGyYDORBovYIWkUVq29 ldUxhbqCJRLXFk+JizsQszON8YexRZj0d0gMGIeiDl8bV+5GfHPleeMqmqEr/CtS eCyqgwSzQsuRolVKDartxj0O4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLabn9lz fgrlQ+QBwVyqG2XJbdroMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNsLqwhN/fwQ+Yx9Fg1jD8AtQ3TItN+oRshCAFHd3Rwy0S7G+csRHc k4viVelwWwe/fDmSW/V5rOca4XTzYLGuhlLng50TIKtBXU3Av8Lt4wZ2DXNozFCj jFfijS+dtZdFppHpM0dFoEQ/tsv1wBucqD7bgYv6qiJZVV4ixNPcy38zDzBYNz+x tTRxs8k3fisnAcJbKzNoKRmAcvvL5TbuLBULhD1Fxlp1DYffjUu5MZjIZkmGiNOK 060ThvP4pq6XKL9zfF9PlhST+2hWENa7mMWuj22zthCdNBIVhwqhs0Pud0FuXcEe kfbVhcjvrD+7U7BsQ01bZxxw7VxMhwpS -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:04 2025 by rpki-client