$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft File: dgeNNhm3wq-92jOrU2PuX-16hg0.mft (raw, json) Hash identifier: PuFFtaIglo4N/Lv/T9QEDn8uRWxZ+n5vwqgf5N56Sfk= Subject key identifier: 99:67:15:0A:38:F1:C5:B9:2D:36:10:A6:D7:BF:9A:F8:EF:3A:A4:1A Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D Certificate issuer: /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft Manifest number: 20 Signing time: Mon 03 Nov 2025 07:45:09 +0000 Manifest this update: Mon 03 Nov 2025 07:45:08 +0000 Manifest next update: Mon 10 Nov 2025 07:45:08 +0000 Files and hashes: 1: dgeNNhm3wq-92jOrU2PuX-16hg0.crl (hash: cn6wCxLwnvMXWOuT6LQPRlbVkrwaqOozQiGgYlMcZLE=) 2: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (hash: Axxx6+J8twN5fIfKmfOOFMg3aNjqRhz53eFIdguiEt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Validity Not Before: Nov 3 07:45:08 2025 GMT Not After : Nov 10 07:45:08 2025 GMT Subject: CN=69085d84-6b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:e9:fa:3e:bc:22:4b:95:0b:52:d7:ed:c7: 52:d6:ce:54:37:9c:cc:2a:d8:e3:48:69:6f:05:05: 81:1a:15:ea:32:cc:86:c9:53:6b:30:6d:42:ff:20: 2a:45:94:c8:27:5a:c2:56:21:35:69:58:d3:13:32: fe:6f:04:2c:3e:b0:f1:b0:33:fc:a6:b6:98:07:18: b4:62:66:3d:e8:ce:bf:13:59:42:31:44:f7:aa:99: ec:c9:6f:33:a4:67:b8:eb:9c:31:97:33:a3:7d:d2: a6:ab:c3:27:a3:17:12:9d:94:16:9e:a8:ba:c4:d0: 3d:2b:94:6f:df:d2:3a:df:cd:4c:7b:b9:aa:bc:33: 4e:2d:ca:36:4f:53:8b:79:2e:6a:9d:d1:b5:d9:d1: c5:9b:6d:c0:b4:a9:29:99:bf:cc:7b:a4:8c:f9:73: 70:48:1a:5f:28:9a:c0:57:24:3e:5e:a6:77:54:0f: d0:99:28:73:52:12:37:f8:62:cd:bf:f9:f3:a7:4f: 18:78:03:95:f8:03:2f:8a:e0:d7:58:3e:a1:2b:82: ad:cc:0f:29:4c:e0:a5:df:9e:41:22:b3:3d:a8:fa: 6c:7f:0b:aa:af:9e:b7:3d:07:b7:cf:78:72:e3:0f: 39:1f:20:8f:3d:e3:12:bf:2b:50:8f:23:08:09:57: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:15:0A:38:F1:C5:B9:2D:36:10:A6:D7:BF:9A:F8:EF:3A:A4:1A X509v3 Authority Key Identifier: keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5f:52:48:87:3f:3b:51:cc:8e:1a:8b:94:1e:b7:87:2e:37: b0:ee:da:aa:f6:ba:40:d6:2e:ea:d4:28:c0:fe:f3:75:00:4f: 3d:d7:66:3a:f3:91:4f:5d:56:c2:03:a0:28:99:e9:8c:8e:5a: 8c:11:2a:41:df:84:73:fd:f1:44:c7:33:59:3c:48:cb:ce:b3: 9a:8f:08:76:d0:ee:73:e4:1a:58:85:b8:7d:51:f6:f7:0e:40: 96:1a:e4:de:da:6d:80:69:26:a1:0d:41:a3:68:1c:ed:a8:57: 22:03:b8:a9:47:c7:89:b2:19:43:c6:0b:eb:28:e6:b1:43:30: 15:a8:3e:6d:90:4e:63:57:c1:13:73:3a:9c:1c:73:39:96:12: 68:99:cb:88:f2:cf:e7:a3:6d:fe:c9:e5:f4:52:91:1d:a7:de: 87:c1:e6:79:b8:61:7a:0a:e2:3f:a5:cf:9d:ab:d6:b9:f3:cc: 71:09:d9:da:a4:b3:97:ce:2e:6c:63:52:bc:a1:6f:c8:44:30: 5b:27:2d:88:98:59:88:a8:3c:cc:2a:f7:63:75:e5:14:c3:ce: e9:9f:bc:54:ce:bb:39:18:44:d9:58:e5:9b:59:77:06:28:d9: a0:98:04:51:b1:f4:7c:9f:9c:c5:9b:af:c8:28:43:d3:cc:33: d3:18:97:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUUxQzExMC8GA1UEBRMoNzYwNzhEMzYxOUI3QzJBRkJEREEzM0FCNTM2M0VFNUZF RDdBODYwRDAeFw0yNTExMDMwNzQ1MDhaFw0yNTExMTAwNzQ1MDhaMBgxFjAUBgNV BAMTDTY5MDg1ZDg0LTZiODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoBOn6PrwiS5ULUtftx1LWzlQ3nMwq2ONIaW8FBYEaFeoyzIbJU2swbUL/ICpF lMgnWsJWITVpWNMTMv5vBCw+sPGwM/ymtpgHGLRiZj3ozr8TWUIxRPeqmezJbzOk Z7jrnDGXM6N90qarwyejFxKdlBaeqLrE0D0rlG/f0jrfzUx7uaq8M04tyjZPU4t5 Lmqd0bXZ0cWbbcC0qSmZv8x7pIz5c3BIGl8omsBXJD5epndUD9CZKHNSEjf4Ys2/ +fOnTxh4A5X4Ay+K4NdYPqErgq3MDylM4KXfnkEisz2o+mx/C6qvnrc9B7fPeHLj DzkfII894xK/K1CPIwgJV5EjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmWcVCjjx xbktNhCm17+a+O86pBowHwYDVR0jBBgwFoAUdgeNNhm3wq+92jOrU2PuX+16hg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RTFDLzY0NzU4OTNBODc5 MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGdlTk5obTN3cS05MmpPclUyUHVYLTE2aGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RTFDLzY0NzU4OTNBODc5MzExRjBCNTc4NjM0NkM0RjlBRTAyL2RnZU5OaG0zd3Et OTJqT3JVMlB1WC0xNmhnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAZfUkiHPztRzI4ai5Qet4cuN7Du2qr2ukDWLurUKMD+83UATz3XZjrz kU9dVsIDoCiZ6YyOWowRKkHfhHP98UTHM1k8SMvOs5qPCHbQ7nPkGliFuH1R9vcO QJYa5N7abYBpJqENQaNoHO2oVyIDuKlHx4myGUPGC+so5rFDMBWoPm2QTmNXwRNz OpwcczmWEmiZy4jyz+ejbf7J5fRSkR2n3ofB5nm4YXoK4j+lz52r1rnzzHEJ2dqk s5fOLmxjUryhb8hEMFsnLYiYWYioPMwq92N15RTDzumfvFTOuzkYRNlY5ZtZdwYo 2aCYBFGx9HyfnMWbr8goQ9PMM9MYl9Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:32 2025 by rpki-client