$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: EwcBOfzpyTn8TPeZYv6IG6+/tk2hyvQ8dx/ziT92QEk= Subject key identifier: 52:1B:19:49:66:71:B2:C3:9B:75:F7:FE:56:CE:DC:00:94:27:8C:A9 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0BA4 Signing time: Sun 02 Nov 2025 19:00:00 +0000 Manifest this update: Sun 02 Nov 2025 19:00:00 +0000 Manifest next update: Sun 09 Nov 2025 19:00:00 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 5nq1Qo32VMB28Au0Q2Uh1UeZoynULvpFqZkkYfNC/Ns=) 2: C09C5F7A939311F08A23CC30C4F9AE02.roa (hash: 9UkwYr6RxIOU+VmHhcff4g0hfkxJiT6GBYh6i9TGpz4=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Nov 2 19:00:00 2025 GMT Not After : Nov 9 19:00:00 2025 GMT Subject: CN=6907aa30-3637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:3c:5b:f8:c6:de:c6:0d:d6:37:43:4d:fc: 74:09:8f:af:43:41:2f:e2:71:2f:9f:df:8a:36:ca: c3:68:8e:a8:28:15:b3:80:7c:ab:f6:c4:d7:5b:fe: 2f:21:b6:50:df:24:c7:8d:6d:49:4a:38:9a:02:5a: 1b:56:4c:30:8c:6c:80:37:6a:ae:cd:2f:9e:6d:8b: b8:45:94:5e:1c:75:d1:fe:e3:7b:05:be:76:28:a4: 4a:2d:85:62:e5:d8:5b:27:04:26:9b:01:4a:94:e3: be:ae:ba:04:78:be:ad:02:2d:10:c3:28:b0:e6:f2: c7:aa:82:16:ca:fa:d1:e5:37:d9:5a:e5:14:b1:61: f1:0b:68:b9:eb:f7:58:ec:de:ab:a8:b0:a9:2f:19: 9f:a1:3a:a6:00:66:08:9d:66:ad:2e:f8:ea:d6:10: 55:e3:a9:7c:37:cc:b1:d2:20:25:e2:2d:ab:9a:dd: 30:61:ec:06:17:3c:7e:63:06:35:9f:03:f0:70:31: f6:b3:d2:18:33:32:ff:ea:63:0b:d4:5a:36:0e:34: c5:d1:07:3c:3a:69:6e:cd:92:59:d6:12:5d:c9:8f: 18:78:f8:2e:98:f3:3d:c1:9d:73:d2:52:66:f4:24: 9c:8b:7e:5c:7d:9f:37:b6:fe:97:f1:17:ba:f9:cb: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:19:49:66:71:B2:C3:9B:75:F7:FE:56:CE:DC:00:94:27:8C:A9 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:c6:49:57:58:20:d4:14:3d:83:1e:b1:8a:ee:03:75:5f:e7: 64:2a:67:75:5c:3f:6b:01:07:f9:94:28:ca:6b:9d:e1:88:fb: a6:eb:fa:fc:93:a9:8f:26:f8:cc:a4:6b:9d:11:cc:8c:83:9d: 39:9d:29:8a:37:da:3a:14:ae:ba:74:68:f8:cc:fc:c6:53:fd: 71:fe:cc:eb:07:a8:a8:d9:b0:5c:ec:d5:66:26:97:1e:d8:5f: 96:1e:4d:b2:ff:45:07:a2:63:19:ca:94:ce:a5:55:b7:7d:ab: bb:ac:d9:f8:13:86:47:27:f4:b4:9b:43:44:ff:a0:60:8b:be: e7:ff:c1:10:37:52:9e:76:ae:bb:5c:3e:4f:85:fb:0b:a5:49: 9f:4c:55:4b:fa:62:5a:3d:63:44:ce:64:bb:ea:91:d6:73:26: 10:c5:bc:55:83:b4:38:17:3e:1c:9c:53:5a:97:9a:fc:34:78: 77:a9:61:6c:21:0c:3e:34:8f:21:63:44:f4:9a:cd:e1:b2:5f: 75:80:bd:dd:61:72:f4:b4:bd:bb:e8:4b:59:31:f0:78:09:c2: 4b:0d:d8:37:bd:93:9a:95:67:b8:a6:b5:de:4b:78:a0:d7:a8: 5c:31:fe:0b:d2:5c:9e:16:5f:3a:a9:33:f2:2b:6d:ad:a7:34: 18:f8:3b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUxMTAyMTkwMDAwWhcNMjUxMTA5MTkwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWEzMC0zNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkM8W/jG3sYN1jdDTfx0CY+vQ0Ev4nEvn9+KNsrDaI6oKBWzgHyr9sTXW/4v IbZQ3yTHjW1JSjiaAlobVkwwjGyAN2quzS+ebYu4RZReHHXR/uN7Bb52KKRKLYVi 5dhbJwQmmwFKlOO+rroEeL6tAi0Qwyiw5vLHqoIWyvrR5TfZWuUUsWHxC2i56/dY 7N6rqLCpLxmfoTqmAGYInWatLvjq1hBV46l8N8yx0iAl4i2rmt0wYewGFzx+YwY1 nwPwcDH2s9IYMzL/6mML1Fo2DjTF0Qc8OmluzZJZ1hJdyY8YePgumPM9wZ1z0lJm 9CSci35cfZ83tv6X8Re6+cv6VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIbGUlm cbLDm3X3/lbO3ACUJ4ypMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDxklXWCDUFD2DHrGK7gN1X+dkKmd1XD9rAQf5lCjKa53hiPum6/r8 k6mPJvjMpGudEcyMg505nSmKN9o6FK66dGj4zPzGU/1x/szrB6io2bBc7NVmJpce 2F+WHk2y/0UHomMZypTOpVW3fau7rNn4E4ZHJ/S0m0NE/6Bgi77n/8EQN1Kedq67 XD5PhfsLpUmfTFVL+mJaPWNEzmS76pHWcyYQxbxVg7Q4Fz4cnFNal5r8NHh3qWFs IQw+NI8hY0T0ms3hsl91gL3dYXL0tL276EtZMfB4CcJLDdg3vZOalWe4prXeS3ig 16hcMf4L0lyeFl86qTPyK22tpzQY+Dsl -----END CERTIFICATE-----Generated at Tue Nov 4 17:20:48 2025 by rpki-client