$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: P5VFl63rOFS32/DIc/EGaufMWJ6QT/agm3xkiREMWxU= Subject key identifier: 1D:0F:8B:06:14:E4:38:1F:7F:72:BC:B1:FD:E4:9C:37:0F:A4:A0:0D Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 02B8 Signing time: Mon 03 Nov 2025 01:24:35 +0000 Manifest this update: Mon 03 Nov 2025 01:24:34 +0000 Manifest next update: Mon 10 Nov 2025 01:24:34 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: H78MYDhuQVP21RORTLmLWQwvV0Btqu3vnkSY+pEVqfM=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: J9pQDV5DOJjkhb+4B/qx3A8bnj3R3w4sok+Lo0s4MxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Nov 3 01:24:34 2025 GMT Not After : Nov 10 01:24:34 2025 GMT Subject: CN=69080452-2e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:29:35:41:46:53:32:3a:cf:e7:22:dc:79: f8:86:41:14:e4:ea:c5:c8:3d:39:00:2b:8f:fe:69: d9:97:0d:3d:60:6e:58:00:89:45:9c:6b:58:5e:d1: 2d:ed:18:5e:79:25:10:5f:b7:0c:76:de:81:fc:1e: 33:2a:6d:35:6b:0e:a2:ca:7e:de:26:1e:14:12:18: 45:61:5e:de:cd:ba:c7:b8:b7:d4:ed:d9:c2:e9:96: 57:4c:4e:f5:4a:7d:fb:86:d2:f5:6b:a9:c7:04:16: db:cb:d6:60:79:67:ab:04:56:32:32:e1:5c:80:a2: 9f:2d:45:60:59:84:39:d6:15:31:7b:5b:de:74:30: 96:58:7b:c0:b4:01:9d:47:7f:76:c2:a7:22:f3:b8: be:fd:38:70:6e:ee:17:71:45:be:53:f9:8b:81:f7: ed:9f:d5:b6:b0:01:f9:40:f0:60:98:c6:d2:e1:18: 94:f6:50:93:e7:93:a0:30:c0:29:90:2f:2b:ea:85: 43:e5:9a:3c:3f:7d:ab:ee:8d:da:c7:a7:f0:98:31: 09:c4:72:fe:8c:01:62:1e:f9:3d:c6:dd:c7:46:db: 9f:26:3e:fd:6e:66:f9:ae:a3:ef:af:de:45:c1:15: 16:9e:83:3c:8f:4e:54:67:d8:53:0c:73:f6:9c:b0: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:8B:06:14:E4:38:1F:7F:72:BC:B1:FD:E4:9C:37:0F:A4:A0:0D X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fc:38:f7:8a:5c:0c:72:93:d1:f0:fe:4b:29:83:8e:72:fe: c0:20:0f:77:79:9b:ba:f8:cc:ea:74:41:f9:7c:cf:ec:02:94: 79:3f:02:c6:47:fd:0b:62:5f:f4:9c:52:91:ae:86:0a:f7:25: 56:f4:af:fd:87:fb:46:c4:cf:af:6e:64:0f:2e:38:18:b1:90: 95:df:a0:bd:2c:c4:92:f7:0c:a8:66:f6:98:41:0d:ef:4b:aa: 12:e7:f9:49:47:c6:8e:76:91:bd:b4:8b:17:ac:b1:e8:b7:91: 5b:c9:5e:9d:ae:d3:ec:d0:53:85:4e:e1:da:90:19:ef:e6:7b: 79:31:06:ea:1d:84:2f:6a:89:d8:d8:93:3e:da:81:94:92:78: 74:25:8b:53:ea:a4:8b:a0:a4:06:37:42:87:3e:30:13:d7:dd: bd:32:98:d3:83:f0:bb:6f:cb:86:6c:b0:21:96:ce:a3:c0:07: f9:ef:69:39:a0:77:05:6f:4e:9c:3d:89:f0:29:8b:d6:06:3c: 52:74:8b:1d:64:98:2b:14:5c:71:91:6f:31:d4:aa:2c:98:1d: 9c:c4:07:87:12:30:73:07:ae:f5:50:d3:9c:cb:a4:b8:02:7f: 7b:e3:47:bc:37:2b:0a:ec:6d:ad:ed:bd:5c:00:0e:fb:6e:3a: 1d:1c:09:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUxMTAzMDEyNDM0WhcNMjUxMTEwMDEyNDM0WjAYMRYwFAYD VQQDEw02OTA4MDQ1Mi0yZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZopNUFGUzI6z+ci3Hn4hkEU5OrFyD05ACuP/mnZlw09YG5YAIlFnGtYXtEt 7RheeSUQX7cMdt6B/B4zKm01aw6iyn7eJh4UEhhFYV7ezbrHuLfU7dnC6ZZXTE71 Sn37htL1a6nHBBbby9ZgeWerBFYyMuFcgKKfLUVgWYQ51hUxe1vedDCWWHvAtAGd R392wqci87i+/Thwbu4XcUW+U/mLgfftn9W2sAH5QPBgmMbS4RiU9lCT55OgMMAp kC8r6oVD5Zo8P32r7o3ax6fwmDEJxHL+jAFiHvk9xt3HRtufJj79bmb5rqPvr95F wRUWnoM8j05UZ9hTDHP2nLBMRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0PiwYU 5Dgff3K8sf3knDcPpKANMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT/Dj3ilwMcpPR8P5LKYOOcv7AIA93eZu6+MzqdEH5fM/sApR5PwLG R/0LYl/0nFKRroYK9yVW9K/9h/tGxM+vbmQPLjgYsZCV36C9LMSS9wyoZvaYQQ3v S6oS5/lJR8aOdpG9tIsXrLHot5FbyV6drtPs0FOFTuHakBnv5nt5MQbqHYQvaonY 2JM+2oGUknh0JYtT6qSLoKQGN0KHPjAT1929MpjTg/C7b8uGbLAhls6jwAf572k5 oHcFb06cPYnwKYvWBjxSdIsdZJgrFFxxkW8x1KosmB2cxAeHEjBzB671UNOcy6S4 An9740e8NysK7G2t7b1cAA77bjodHAmz -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:09 2025 by rpki-client