$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: O9XlAGGJFqpvEFs/ld2XTTmbSphsaMSYJb7F1hhHkMk= Subject key identifier: 8C:84:00:04:28:77:9D:7C:D1:1A:9E:64:5E:86:DF:1E:A8:A8:6F:5C Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 0898 Signing time: Tue 04 Nov 2025 20:37:10 +0000 Manifest this update: Tue 04 Nov 2025 20:37:09 +0000 Manifest next update: Tue 11 Nov 2025 20:37:09 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: Zb6cCJWwatqsSN+R0AxY3/xVFEXlGDpVh/PPHSm6A14=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Nov 4 20:37:09 2025 GMT Not After : Nov 11 20:37:09 2025 GMT Subject: CN=690a63f5-eed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:db:75:40:62:d1:4e:b4:06:96:ca:d9:e5: f2:fa:a1:f6:a0:31:55:d0:dc:93:ba:37:fa:69:6f: df:a2:d6:6b:ae:13:f1:e0:3a:c0:5c:4d:a5:b5:cd: 67:b6:87:de:0a:f3:a1:84:fd:78:73:49:75:86:a8: c6:d6:8d:cd:85:b8:bb:df:27:e7:0a:26:1f:ef:50: 25:4b:d7:b5:08:1d:17:b4:6b:c0:db:cf:99:08:57: 63:b5:30:e0:dd:ce:0d:4c:15:1b:c1:84:ef:85:e7: d6:e5:8f:7f:9c:ad:47:55:4d:c6:9e:86:7a:2a:d6: 1b:c6:ac:82:de:bd:ac:9c:dd:4b:d2:ae:86:05:27: 53:3a:17:ed:56:c4:da:74:a9:e3:06:53:13:30:7d: 9e:91:0e:06:4a:2c:59:5a:21:c0:d7:68:44:c1:75: 14:b6:86:11:1e:08:f7:8a:fd:34:20:20:b5:da:51: 20:55:a7:f9:0b:26:c8:a8:80:bd:b0:49:ae:67:0c: b0:76:36:37:b6:84:28:d5:4b:49:07:10:2a:56:47: 03:ac:81:8a:49:e5:bd:6f:45:eb:a8:15:4d:1e:9e: 6e:44:41:61:1c:21:44:36:7d:2a:48:d9:bc:e3:f8: 46:46:0e:fd:2b:84:e5:f5:67:4a:5d:97:30:9c:e0: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:00:04:28:77:9D:7C:D1:1A:9E:64:5E:86:DF:1E:A8:A8:6F:5C X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d5:2e:28:1d:43:63:51:7d:22:f3:5e:4f:5f:46:e2:3f:23: 2f:50:3c:b6:f9:d0:53:19:40:2d:53:f3:a3:47:4b:7c:5b:51: 3f:75:13:0b:bf:b9:15:13:41:1c:96:91:fe:d2:13:1a:23:65: 02:be:db:47:33:07:c3:2f:da:f0:64:ce:fd:2c:aa:7e:c1:dd: 0c:fe:2b:82:79:24:fb:c9:70:03:65:b1:c0:4e:de:3d:a9:31: fb:1b:60:86:09:e4:b1:14:2a:82:eb:37:b5:b9:83:17:e0:22: 2e:43:fa:c4:8b:66:21:80:3b:93:47:23:f0:2b:2c:36:fc:88: 9c:90:82:6e:24:6f:8d:d1:96:c8:a0:1b:7a:13:71:6d:f2:f7: 58:6f:d6:fc:c7:c5:cb:25:15:f9:87:b4:2a:bf:f5:9a:95:67: f1:31:0f:9d:2b:d5:e2:f3:31:a0:a0:21:fd:33:6a:e7:b6:56: 6a:c5:e6:61:a3:80:2a:cf:95:97:90:63:dc:54:c4:6b:3c:27: e1:c7:fb:f6:39:04:ba:a7:a0:9e:9b:e4:15:8a:9c:6e:2e:e7: ea:91:7d:1f:8a:8a:8e:2a:95:72:7c:12:cc:f9:97:be:82:db: 4b:a6:21:67:44:62:13:c8:e1:55:3e:30:5c:6b:ea:81:bb:7b: 2e:e4:90:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjUxMTA0MjAzNzA5WhcNMjUxMTExMjAzNzA5WjAYMRYwFAYD VQQDEw02OTBhNjNmNS1lZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzevbdUBi0U60BpbK2eXy+qH2oDFV0NyTujf6aW/fotZrrhPx4DrAXE2ltc1n tofeCvOhhP14c0l1hqjG1o3Nhbi73yfnCiYf71AlS9e1CB0XtGvA28+ZCFdjtTDg 3c4NTBUbwYTvhefW5Y9/nK1HVU3GnoZ6KtYbxqyC3r2snN1L0q6GBSdTOhftVsTa dKnjBlMTMH2ekQ4GSixZWiHA12hEwXUUtoYRHgj3iv00ICC12lEgVaf5CybIqIC9 sEmuZwywdjY3toQo1UtJBxAqVkcDrIGKSeW9b0XrqBVNHp5uREFhHCFENn0qSNm8 4/hGRg79K4Tl9WdKXZcwnOBYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyEAAQo d5180RqeZF6G3x6oqG9cMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS1S4oHUNjUX0i815PX0biPyMvUDy2+dBTGUAtU/OjR0t8W1E/dRML v7kVE0EclpH+0hMaI2UCvttHMwfDL9rwZM79LKp+wd0M/iuCeST7yXADZbHATt49 qTH7G2CGCeSxFCqC6ze1uYMX4CIuQ/rEi2YhgDuTRyPwKyw2/IickIJuJG+N0ZbI oBt6E3Ft8vdYb9b8x8XLJRX5h7Qqv/WalWfxMQ+dK9Xi8zGgoCH9M2rntlZqxeZh o4Aqz5WXkGPcVMRrPCfhx/v2OQS6p6Cem+QVipxuLufqkX0fioqOKpVyfBLM+Ze+ gttLpiFnRGITyOFVPjBca+qBu3su5JDw -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:17 2025 by rpki-client