$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: 0ZBjd+wqauh9ARJl2UNRLrS7YebTkOG36zWta4D9nh0= Subject key identifier: B0:49:CB:6D:06:FF:18:39:5F:1A:67:29:19:0B:3A:25:69:AB:F2:2E Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 0E Signing time: Mon 03 Nov 2025 08:01:12 +0000 Manifest this update: Mon 03 Nov 2025 08:01:12 +0000 Manifest next update: Mon 10 Nov 2025 08:01:12 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: SsnmQhUWNOrWhbm3IUwEgLVUvyosHKdVbEIaQ6aWWhI=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: FWjLvjv3Gipsu55Q7SW82j2fnJS3sRrWxfm+lFFErW0=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: C5FWkpg3JA7HokTHMhnJCp3tLDwUp2pk+wUDmviorYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Nov 3 08:01:12 2025 GMT Not After : Nov 10 08:01:12 2025 GMT Subject: CN=69086148-1103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:13:e3:0c:c9:9c:3e:df:cb:a9:dd:c7:2c: 01:db:1f:ab:b9:7a:27:72:88:a7:65:45:c6:94:6f: 07:d0:b4:98:2d:10:48:3d:39:ab:6a:70:d3:4b:ec: 11:5d:fc:b1:43:d7:1d:e5:c4:dd:12:48:11:91:ca: 23:f2:54:61:44:c6:20:84:f2:29:ae:a6:22:7f:6a: d7:30:cf:63:49:5b:20:13:d6:76:0f:63:d7:46:72: ad:9b:a6:09:70:bf:b8:01:52:76:c9:21:b2:e6:92: ae:a9:8a:b4:d0:56:5a:f0:57:df:b1:88:ad:a4:13: 8f:07:b3:8a:f1:40:7c:3d:f2:c2:fc:62:e5:ff:d9: 85:ac:9d:8f:46:56:4e:75:cd:2a:5b:81:48:1d:47: 54:fd:88:1f:3a:da:af:19:e7:d9:ee:13:7b:d8:af: fa:6d:58:f9:58:18:68:25:04:45:17:a5:25:af:46: 86:ea:d8:a0:08:06:55:a0:84:0e:30:4c:17:ab:f1: 7a:27:30:40:ae:75:ec:93:1f:3f:86:4f:7f:30:82: 59:4b:96:11:5f:f1:04:d3:4d:2c:8f:76:9b:28:58: 9b:6e:07:c8:a0:28:4d:15:7e:69:53:86:6b:9d:da: d2:fd:b4:7a:0e:10:96:bd:5b:ac:6d:bb:e7:7d:17: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:CB:6D:06:FF:18:39:5F:1A:67:29:19:0B:3A:25:69:AB:F2:2E X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:93:47:cc:10:d7:1c:71:df:e7:16:c1:0c:47:de:3a:20:2b: eb:d4:f6:38:ab:83:3f:04:d0:8e:ef:86:bb:8c:24:9b:2a:4b: 58:ef:ea:26:a7:b6:48:38:1e:65:1f:66:d5:2e:ea:eb:0a:8b: 81:b5:40:c9:74:19:6a:38:21:4f:92:87:0d:c2:81:cc:e6:96: 47:02:c5:bf:65:68:93:92:f7:29:4f:1e:69:83:ea:c0:c7:57: 36:0a:e9:4e:90:d3:37:8b:53:f3:af:bb:c2:36:81:7d:74:25: 27:e3:b2:0e:65:f5:e6:0d:65:1a:bb:d6:ca:80:93:6b:64:8f: a2:b6:bb:0a:13:a6:e2:43:56:d3:87:ee:dd:f8:3c:b3:e0:d7: 8a:19:f6:7e:07:c3:11:c9:a0:13:93:2f:84:84:25:e1:39:44: c7:a4:c7:02:b1:0b:2b:7b:43:2f:83:b8:3e:e9:08:5d:98:8b: de:16:1b:78:c5:ef:ba:b8:d2:e6:07:5b:30:9a:c0:9b:e8:31: bc:74:d8:00:55:02:9e:f8:a5:5b:66:ee:9c:24:12:6a:ca:7d: 99:e0:51:d9:77:41:f3:6b:06:76:0a:15:78:69:d6:e0:46:62: fd:81:4c:01:15:35:6b:37:67:f5:c8:17:f9:b8:54:ba:77:5c: b3:d3:4f:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNTExMDMwODAxMTJaFw0yNTExMTAwODAxMTJaMBgxFjAUBgNV BAMTDTY5MDg2MTQ4LTExMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwdRPjDMmcPt/Lqd3HLAHbH6u5eidyiKdlRcaUbwfQtJgtEEg9OatqcNNL7BFd /LFD1x3lxN0SSBGRyiPyVGFExiCE8imupiJ/atcwz2NJWyAT1nYPY9dGcq2bpglw v7gBUnbJIbLmkq6pirTQVlrwV9+xiK2kE48Hs4rxQHw98sL8YuX/2YWsnY9GVk51 zSpbgUgdR1T9iB862q8Z59nuE3vYr/ptWPlYGGglBEUXpSWvRobq2KAIBlWghA4w TBer8XonMECudeyTHz+GT38wgllLlhFf8QTTTSyPdpsoWJtuB8igKE0VfmlThmud 2tL9tHoOEJa9W6xtu+d9F/63AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsEnLbQb/ GDlfGmcpGQs6JWmr8i4wHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEKTR8wQ1xxx3+cWwQxH3jogK+vU9jirgz8E0I7vhruMJJsqS1jv6ian tkg4HmUfZtUu6usKi4G1QMl0GWo4IU+Shw3CgczmlkcCxb9laJOS9ylPHmmD6sDH VzYK6U6Q0zeLU/Ovu8I2gX10JSfjsg5l9eYNZRq71sqAk2tkj6K2uwoTpuJDVtOH 7t34PLPg14oZ9n4HwxHJoBOTL4SEJeE5RMekxwKxCyt7Qy+DuD7pCF2Yi94WG3jF 77q40uYHWzCawJvoMbx02ABVAp74pVtm7pwkEmrKfZngUdl3QfNrBnYKFXhp1uBG Yv2BTAEVNWs3Z/XIF/m4VLp3XLPTT+0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:11:39 2025 by rpki-client