$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: 6560+IlXYW09SESv+9rNB2NWkLd9+EpIYa4lLofIM9M= Subject key identifier: 5C:EE:6E:81:CD:1A:73:59:F0:75:94:EA:CB:AD:FB:E9:E6:1F:F7:B9 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D64 Signing time: Sun 02 Nov 2025 17:59:39 +0000 Manifest this update: Sun 02 Nov 2025 17:59:38 +0000 Manifest next update: Sun 09 Nov 2025 17:59:38 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: Tw26oL6hsRkkh7qL8kcsBL3ptwxzYbbo4290gP0m5Sc=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Nov 2 17:59:38 2025 GMT Not After : Nov 9 17:59:38 2025 GMT Subject: CN=69079c0a-9904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:c6:47:43:3a:14:30:cb:04:43:63:d9:c0: 0a:74:c7:6a:28:0d:56:64:00:3d:12:ee:14:4e:10: cf:b6:ea:c9:50:7e:3a:dd:f6:22:d0:85:7d:c9:96: ef:89:f2:5a:52:96:38:ab:f4:1d:8c:0b:0e:4a:05: 72:3f:29:92:1d:e3:46:89:75:44:18:ec:3b:a4:03: e9:7c:17:87:6c:ce:76:d8:21:3b:3c:b9:a1:c2:82: 80:58:4d:90:c6:ea:0f:41:fd:b9:bd:07:11:c8:9f: 01:4f:f2:60:84:91:51:8c:db:2b:32:2f:cb:32:ad: 09:70:33:9c:bc:01:c0:09:93:ea:da:79:a3:1f:a2: 3f:94:9c:8e:3d:33:d1:90:a0:a1:56:e9:89:69:b1: ab:32:72:cd:72:b0:1b:43:c2:6a:a2:d3:57:dd:9b: 40:11:3f:42:45:31:6c:b0:f7:ec:9c:ae:d5:9f:cb: 90:4f:cc:52:e7:b0:81:4d:26:4d:ca:32:2c:9a:ad: 5f:53:6b:16:7f:53:d4:5f:e4:83:e9:08:7e:6f:e2: 22:cf:41:a8:2a:d3:d7:19:9d:8f:2d:51:02:9c:3e: 64:22:64:dd:e8:04:4c:81:24:e2:18:b9:d8:aa:42: ec:15:52:3a:d4:61:f7:ee:e1:fd:7e:76:7b:b6:f7: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:6E:81:CD:1A:73:59:F0:75:94:EA:CB:AD:FB:E9:E6:1F:F7:B9 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:65:a9:44:d0:47:b1:3c:77:0f:7f:bd:51:ba:40:59:07:38: 7b:c0:e9:9c:75:a4:c9:a9:4b:f5:b7:a1:06:7f:f3:41:88:a9: 34:cb:0d:a4:20:4d:61:e4:e7:d3:6f:a6:7d:64:b2:b5:df:72: 11:df:9e:ac:0a:fe:1b:09:3c:09:82:e5:33:85:ae:e0:f0:f9: e0:f7:d2:a8:e4:f8:5b:8d:de:12:05:59:e0:ee:13:f0:35:ad: 20:b0:d7:8c:1d:4b:99:ec:a8:6d:20:46:b5:5d:db:e3:62:99: 41:04:a5:c2:0e:87:22:ba:fe:15:5e:23:9a:c6:37:9c:c9:b3: e8:4a:d0:4d:ca:52:bf:e3:a2:56:83:2b:24:58:df:8f:71:d1: ed:c1:cd:51:83:fc:34:b8:83:c3:d4:e5:e4:fc:7a:27:0b:2d: aa:ac:4c:ef:22:35:bc:b9:a9:53:4d:2e:21:30:a4:cf:b1:15: a9:5f:16:58:dc:f4:35:59:86:6d:29:ab:5d:f3:00:72:7c:fe: e0:49:21:fb:04:30:ea:e7:36:bb:e1:86:e8:5a:7c:02:46:44: 61:6f:33:00:34:ca:70:9e:d5:76:ca:49:84:a1:b0:15:53:ab: b6:76:d5:53:6f:a7:8a:91:3f:e3:4c:a3:1d:08:e3:bd:23:2d: d7:a8:66:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUxMTAyMTc1OTM4WhcNMjUxMTA5MTc1OTM4WjAYMRYwFAYD VQQDEw02OTA3OWMwYS05OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZzGR0M6FDDLBENj2cAKdMdqKA1WZAA9Eu4UThDPturJUH463fYi0IV9yZbv ifJaUpY4q/QdjAsOSgVyPymSHeNGiXVEGOw7pAPpfBeHbM522CE7PLmhwoKAWE2Q xuoPQf25vQcRyJ8BT/JghJFRjNsrMi/LMq0JcDOcvAHACZPq2nmjH6I/lJyOPTPR kKChVumJabGrMnLNcrAbQ8JqotNX3ZtAET9CRTFssPfsnK7Vn8uQT8xS57CBTSZN yjIsmq1fU2sWf1PUX+SD6Qh+b+Iiz0GoKtPXGZ2PLVECnD5kImTd6ARMgSTiGLnY qkLsFVI61GH37uH9fnZ7tvdmKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzuboHN GnNZ8HWU6sut++nmH/e5MB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZalE0EexPHcPf71RukBZBzh7wOmcdaTJqUv1t6EGf/NBiKk0yw2k IE1h5OfTb6Z9ZLK133IR356sCv4bCTwJguUzha7g8Png99Ko5Phbjd4SBVng7hPw Na0gsNeMHUuZ7KhtIEa1XdvjYplBBKXCDociuv4VXiOaxjecybPoStBNylK/46JW gyskWN+PcdHtwc1Rg/w0uIPD1OXk/HonCy2qrEzvIjW8ualTTS4hMKTPsRWpXxZY 3PQ1WYZtKatd8wByfP7gSSH7BDDq5za74YboWnwCRkRhbzMANMpwntV2ykmEobAV U6u2dtVTb6eKkT/jTKMdCOO9Iy3XqGZb -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:29 2025 by rpki-client