$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft File: daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json) Hash identifier: SlpmDdMQEeOMnWYss8m4sHuFfhmbMVZA7NvufodJnNc= Subject key identifier: DE:E2:2D:FC:34:8E:22:A1:E3:85:7A:BD:14:B3:9F:96:C5:6A:B4:AE Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft Manifest number: 0119 Signing time: Mon 03 Nov 2025 04:54:02 +0000 Manifest this update: Mon 03 Nov 2025 04:54:02 +0000 Manifest next update: Mon 10 Nov 2025 04:54:02 +0000 Files and hashes: 1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: 9P4hUCtRIvXdxq3l8EGsncQIOJtaxJB9ZnGQ01ldSGU=) 2: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: zdRcs/c3Qf+J5jNCXqRvg7j/o5uxm8uN2Ag/dP0TR80=) 3: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: jtXYMGmykeZR7pyJ+hI44NrwSSmB4SbOOgIv0/Ba41o=) 4: F22762F4741011EF9E049760C4F9AE02.roa (hash: iKwlRkuX69d7ZcvWspfzZHclIKmsaCHfYEvd4T/pvns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Validity Not Before: Nov 3 04:54:02 2025 GMT Not After : Nov 10 04:54:02 2025 GMT Subject: CN=6908356a-fca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:3d:34:a1:04:1c:bb:ed:d7:0e:84:67:bc: a4:66:0c:c1:75:88:07:bc:27:72:c8:7c:ae:04:aa: 43:41:86:f4:26:a7:82:31:c9:be:15:ba:e8:e1:9f: 45:de:57:7b:13:4d:86:08:09:4c:df:e2:8c:9b:5d: 93:13:00:3e:cc:06:42:a8:0f:13:05:29:e9:2a:36: 72:b0:5f:29:61:98:90:38:35:63:a7:9a:87:f7:97: f1:48:07:4f:d9:2c:2a:f3:43:00:38:a9:1d:5c:45: e6:14:6e:bc:9e:0c:4a:95:34:9d:e0:9a:9f:4e:4d: 15:29:d0:89:2d:dc:5f:12:9f:46:97:99:cf:ad:a0: 05:26:b2:43:25:bd:3d:ce:33:3e:6e:1f:40:99:35: 61:74:c8:81:91:52:82:9b:3e:90:a4:2b:2a:99:56: 09:47:1a:eb:01:40:ae:1c:4d:98:ae:3c:f2:7e:04: ad:e9:30:f2:1a:61:35:a3:d1:da:24:f2:bd:86:1b: 03:f8:a0:37:8e:eb:45:68:d2:cb:f4:20:9e:08:2a: 95:64:87:c2:06:28:ac:61:3b:fd:54:7d:b9:a4:52: 2f:d7:c9:84:08:44:97:b8:dc:79:fe:98:64:30:3d: ea:4d:11:94:c4:2a:75:a4:78:30:45:09:9e:7d:3a: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E2:2D:FC:34:8E:22:A1:E3:85:7A:BD:14:B3:9F:96:C5:6A:B4:AE X509v3 Authority Key Identifier: keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:94:4a:3f:66:58:ce:dd:81:c2:a7:b0:9c:30:79:84:d6:a6: bb:69:53:66:74:11:9c:15:ad:d7:f9:4f:2d:ca:cb:a1:c2:b4: 22:5b:ae:37:56:0b:34:28:f8:f1:a8:04:69:1c:13:c7:82:0b: ea:15:d0:a5:fb:8c:d4:0c:17:15:32:90:86:01:00:c3:0c:10: 73:f9:20:97:b4:83:37:f3:a5:51:8c:05:e3:67:e8:73:f5:5d: 76:b5:b5:74:e7:4e:47:6b:5f:b7:26:81:15:c7:8a:88:10:31: 01:83:33:f8:74:3d:c6:92:32:d3:3b:2a:60:a2:08:1d:f4:60: 10:84:fd:fd:82:cf:0d:0c:5e:ba:a3:2b:98:ae:f3:fe:5a:f5: 9a:f9:08:49:87:bb:6a:96:54:50:43:c3:b0:d2:59:78:5c:8b: bc:11:ac:6b:6e:9c:68:7e:38:fc:40:a0:93:71:95:dc:86:cc: 32:f5:f0:6d:f3:0f:03:ba:7f:f3:90:e9:57:d0:13:3c:7f:34: 0e:f4:fe:83:e9:07:cb:f5:3b:00:27:9e:dc:9f:0f:91:b3:62: 50:20:63:c7:5e:90:82:d4:be:c4:df:25:6f:47:a1:3e:ba:a1: c4:fa:6e:db:74:80:62:0b:f3:b4:d9:ae:98:ea:8f:f2:42:e2: 17:9e:d7:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4NjcxMTAvBgNVBAUTKDc1QTQwQ0VEMjRBQ0FENjJDNThBQjI4RUEwRTBGN0M1 RTVFMUM3ODgwHhcNMjUxMTAzMDQ1NDAyWhcNMjUxMTEwMDQ1NDAyWjAYMRYwFAYD VQQDEw02OTA4MzU2YS1mY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Gs9NKEEHLvt1w6EZ7ykZgzBdYgHvCdyyHyuBKpDQYb0JqeCMcm+Fbro4Z9F 3ld7E02GCAlM3+KMm12TEwA+zAZCqA8TBSnpKjZysF8pYZiQODVjp5qH95fxSAdP 2Swq80MAOKkdXEXmFG68ngxKlTSd4JqfTk0VKdCJLdxfEp9Gl5nPraAFJrJDJb09 zjM+bh9AmTVhdMiBkVKCmz6QpCsqmVYJRxrrAUCuHE2YrjzyfgSt6TDyGmE1o9Ha JPK9hhsD+KA3jutFaNLL9CCeCCqVZIfCBiisYTv9VH25pFIv18mECESXuNx5/phk MD3qTRGUxCp1pHgwRQmefTr5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7iLfw0 jiKh44V6vRSzn5bFarSuMB8GA1UdIwQYMBaAFHWkDO0krK1ixYqyjqDg98Xl4ceI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTg2Ny84MTZFNzQ2MjE5 N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JXTEZpcktPb09EM3hlWGh4 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhUU03U1NzcldMRmlyS09vT0QzeGVYaHg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTg2Ny84MTZFNzQ2MjE5N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JX TEZpcktPb09EM3hlWGh4NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCclEo/ZljO3YHCp7CcMHmE1qa7aVNmdBGcFa3X+U8tysuhwrQiW643 Vgs0KPjxqARpHBPHggvqFdCl+4zUDBcVMpCGAQDDDBBz+SCXtIM386VRjAXjZ+hz 9V12tbV0505Ha1+3JoEVx4qIEDEBgzP4dD3GkjLTOypgoggd9GAQhP39gs8NDF66 oyuYrvP+WvWa+QhJh7tqllRQQ8Ow0ll4XIu8Eaxrbpxofjj8QKCTcZXchswy9fBt 8w8Dun/zkOlX0BM8fzQO9P6D6QfL9TsAJ57cnw+Rs2JQIGPHXpCC1L7E3yVvR6E+ uqHE+m7bdIBiC/O02a6Y6o/yQuIXntdk -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:14 2025 by rpki-client