$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: hdG4ALclymm2K70nWVRi5PFQvmPkWevM6HsencsJau0= Subject key identifier: 0E:3A:76:F5:28:8E:EA:D3:60:CD:4C:1D:89:E6:DA:90:8F:4A:EB:F6 Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: DB Signing time: Wed 05 Nov 2025 05:43:51 +0000 Manifest this update: Wed 05 Nov 2025 05:43:51 +0000 Manifest next update: Wed 12 Nov 2025 05:43:51 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: 4CKbjtghNB8Ma2ZC3ZqueCVyHlACKsbamnV4m++1k4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Nov 5 05:43:51 2025 GMT Not After : Nov 12 05:43:51 2025 GMT Subject: CN=690ae417-b6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:ed:b8:0f:94:9f:44:89:38:fc:5a:55:c1: 60:4b:e8:6b:f4:e9:f9:21:4a:43:a5:bd:95:4a:f7: a9:94:37:aa:b7:d1:36:ac:1c:96:55:b4:f2:ba:9a: d4:00:a2:41:21:b7:e5:87:c4:e6:57:0c:92:5d:b4: f3:24:77:32:d0:fe:88:5d:ee:25:4d:e4:6b:da:6b: 30:a0:5a:6d:ea:0b:07:e4:e9:db:42:fa:f2:28:fb: d6:95:50:9d:12:c5:97:0b:ee:77:60:0a:7c:42:9e: b0:0d:a0:88:fd:3d:d4:b3:ba:92:f4:fb:b8:9c:b2: 0a:92:a7:0b:8b:00:cf:b5:41:57:a1:ae:c4:fe:40: 94:cb:8f:3f:e7:64:01:6e:25:08:f9:3d:23:e9:ea: 66:4d:0e:13:e5:b1:0b:17:4d:ef:a3:63:b6:cc:8a: 0d:74:25:bc:6c:0b:c7:8a:fe:c3:cb:d0:39:fc:c2: 82:53:14:93:c6:9e:89:94:09:97:3c:2c:97:f9:aa: d4:ad:7c:18:18:a7:d3:9f:8d:97:51:51:5f:43:72: 48:d2:3c:48:70:72:b8:fb:0c:d0:93:51:e4:79:d1: ed:96:e5:79:4c:ac:54:56:d9:77:9e:0d:12:4c:d4: c8:e0:11:c6:60:30:04:67:34:2c:d6:90:6b:16:33: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:76:F5:28:8E:EA:D3:60:CD:4C:1D:89:E6:DA:90:8F:4A:EB:F6 X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:55:89:c9:71:ac:84:58:90:11:e1:bd:bb:5c:80:2b:76: a5:7c:17:64:1a:b8:72:6e:92:22:3b:7c:95:09:10:36:8f:63: 09:5a:6f:ce:bd:fb:68:b7:5c:61:1b:92:15:8f:2c:fe:f7:54: e8:d4:61:50:07:d3:7f:43:3f:4b:2a:16:b3:f9:41:5a:59:da: 89:63:87:71:95:41:32:ad:51:38:ca:67:e8:88:4e:64:db:9b: 89:79:cf:f7:e5:ce:83:e1:cb:e6:be:93:a0:a4:00:3e:05:a5: ec:bc:6e:1f:91:14:7e:04:c7:78:59:a4:8c:3a:8f:0a:e9:4d: 95:21:89:96:e5:fe:9f:3c:ba:7e:d0:97:6f:6c:d3:75:de:25: e2:76:0b:75:22:33:e6:ec:c5:1d:a1:df:56:a5:6e:ab:2e:a8: 91:fc:a8:42:a6:83:df:a1:3a:de:9b:91:62:b6:6d:60:0e:13: 60:5a:39:07:b7:e7:cf:d9:be:2f:51:5d:69:8f:b9:e6:a5:2a: 8d:44:dc:cd:cb:a1:ce:3d:04:ee:b8:bc:d1:5d:70:a9:e6:3a: dd:e4:76:ad:17:6d:f5:83:c5:f4:07:63:70:66:dd:34:c4:a9: d2:52:a3:cf:58:82:8a:a2:e2:7b:95:8b:f2:bc:55:b7:7e:11: 92:8e:00:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKEExRDI1REUzQTU1OUZEQUYzMDQ0OUQ5NDc3RDE3NkVB Mzc4OTcxRjgwHhcNMjUxMTA1MDU0MzUxWhcNMjUxMTEyMDU0MzUxWjAYMRYwFAYD VQQDEw02OTBhZTQxNy1iNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10DtuA+Un0SJOPxaVcFgS+hr9On5IUpDpb2VSveplDeqt9E2rByWVbTyuprU AKJBIbflh8TmVwySXbTzJHcy0P6IXe4lTeRr2mswoFpt6gsH5OnbQvryKPvWlVCd EsWXC+53YAp8Qp6wDaCI/T3Us7qS9Pu4nLIKkqcLiwDPtUFXoa7E/kCUy48/52QB biUI+T0j6epmTQ4T5bELF03vo2O2zIoNdCW8bAvHiv7Dy9A5/MKCUxSTxp6JlAmX PCyX+arUrXwYGKfTn42XUVFfQ3JI0jxIcHK4+wzQk1HkedHtluV5TKxUVtl3ng0S TNTI4BHGYDAEZzQs1pBrFjMjZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA46dvUo jurTYM1MHYnm2pCPSuv2MB8GA1UdIwQYMBaAFKHSXeOlWf2vMESdlHfRduo3iXH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83QTY1RTkzQzZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9hOHdSSjJVZDlGMjZqZUpj ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83QTY1RTkzQzZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9h OHdSSjJVZDlGMjZqZUpjZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUmlWJyXGshFiQEeG9u1yAK3alfBdkGrhybpIiO3yVCRA2j2MJWm/O vftot1xhG5IVjyz+91To1GFQB9N/Qz9LKhaz+UFaWdqJY4dxlUEyrVE4ymfoiE5k 25uJec/35c6D4cvmvpOgpAA+BaXsvG4fkRR+BMd4WaSMOo8K6U2VIYmW5f6fPLp+ 0JdvbNN13iXidgt1IjPm7MUdod9WpW6rLqiR/KhCpoPfoTrem5Fitm1gDhNgWjkH t+fP2b4vUV1pj7nmpSqNRNzNy6HOPQTuuLzRXXCp5jrd5HatF231g8X0B2NwZt00 xKnSUqPPWIKKouJ7lYvyvFW3fhGSjgDc -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client