$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft File: daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json) Hash identifier: SC1d9nHQYPQfFAmbGZ8QkjpLu/K9vcFrhUy4ByABIas= Subject key identifier: 07:8E:3E:2E:D3:93:06:D9:E5:33:DB:F7:F2:22:2C:90:3E:FB:5D:1A Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 Certificate issuer: /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Certificate serial: 1AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft Manifest number: 1AAB Signing time: Tue 04 Nov 2025 16:24:21 +0000 Manifest this update: Tue 04 Nov 2025 16:24:20 +0000 Manifest next update: Tue 11 Nov 2025 16:24:20 +0000 Files and hashes: 1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: 434zOrZ9bnBV6VcS8c/+i9I/60ITGxfd0Vl1JPNzXPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6827 (0x1aab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57 Validity Not Before: Nov 4 16:24:20 2025 GMT Not After : Nov 11 16:24:20 2025 GMT Subject: CN=690a28b4-4581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:09:4f:8e:b1:b8:72:4c:ef:4b:05:65:ba: a8:1a:62:1e:36:32:ea:13:67:e1:ab:eb:0a:1c:c4: 1c:67:96:35:5e:1f:0b:35:23:90:5c:27:8d:97:4c: 5d:a2:d0:69:9e:73:1d:e5:67:91:ca:49:60:17:81: 41:74:9c:69:24:04:05:df:15:02:5d:25:8f:70:05: df:1f:9a:6e:cc:31:21:1f:30:25:02:18:39:ef:52: af:c2:51:5c:f8:bf:1c:e4:42:42:6f:0e:e2:23:94: ed:74:08:21:a0:46:42:f5:e0:f6:b8:7f:17:0f:9f: 8f:44:0d:9f:25:b6:fc:98:84:43:f0:98:de:aa:37: b1:a1:f0:68:0d:ff:34:c8:74:0e:68:d3:3c:03:0c: bd:7a:67:a3:a9:d1:5c:16:ad:7b:fe:7b:f3:88:e1: 49:ef:99:c4:9a:64:ec:6b:71:9d:0e:97:52:35:a7: 3f:c3:f9:45:b2:15:ca:83:55:e5:ca:50:ad:72:37: ec:8f:67:f7:fe:97:5b:11:46:4f:9b:81:f7:b3:6e: 6e:b7:f1:92:78:f7:8d:14:04:4d:2e:c6:35:16:4c: 1e:6d:76:90:22:15:7e:ad:87:fa:20:91:62:c3:21: ca:9d:88:2f:62:46:bb:3d:e2:16:2f:8f:10:6c:12: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:3E:2E:D3:93:06:D9:E5:33:DB:F7:F2:22:2C:90:3E:FB:5D:1A X509v3 Authority Key Identifier: keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9b:43:1c:ae:56:a8:c5:ad:44:04:3c:19:b9:04:c9:e5:37: b9:c7:11:84:d7:5f:f9:8a:01:f9:79:be:04:81:a9:1b:fa:5f: f0:9b:36:02:fd:b0:1e:93:e2:81:e5:f8:77:6f:db:d3:a2:de: 02:b6:fa:80:6a:8a:ef:83:65:f4:01:34:cc:8d:75:d5:d1:dc: 50:e1:17:2b:16:be:bc:93:36:d2:d8:fc:71:9a:e9:b9:35:33: 21:a0:f4:1b:8d:8d:d5:24:dd:b7:14:7b:f8:a2:99:9c:01:9e: ae:b5:bd:c2:b2:e3:65:e6:45:dd:28:ba:f6:35:60:a4:c9:df: 9a:09:51:87:f7:13:a9:80:4c:0c:98:b8:1e:92:00:95:7f:c1: 4f:d1:d6:af:64:9d:7f:b7:ee:ca:0b:30:5d:ba:d9:15:b8:e6: 0d:b4:34:03:a0:9d:f2:8c:4c:62:35:8e:9a:6e:de:49:fb:68: 02:ef:43:51:dd:1e:13:f2:83:cf:c3:a8:11:f1:69:91:50:9d: 84:27:16:b9:9f:98:42:e1:88:fb:51:f7:66:18:ce:ab:07:3f: 50:24:f1:2c:58:d4:4a:ec:94:e2:00:1f:41:5f:6a:8f:a3:55: af:87:c4:63:70:a3:0b:d6:5a:fa:81:6f:78:bf:d3:44:a8:80: 36:0f:db:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND QzU4MURFNTcwHhcNMjUxMTA0MTYyNDIwWhcNMjUxMTExMTYyNDIwWjAYMRYwFAYD VQQDEw02OTBhMjhiNC00NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJkJT46xuHJM70sFZbqoGmIeNjLqE2fhq+sKHMQcZ5Y1Xh8LNSOQXCeNl0xd otBpnnMd5WeRyklgF4FBdJxpJAQF3xUCXSWPcAXfH5puzDEhHzAlAhg571KvwlFc +L8c5EJCbw7iI5TtdAghoEZC9eD2uH8XD5+PRA2fJbb8mIRD8JjeqjexofBoDf80 yHQOaNM8Awy9emejqdFcFq17/nvziOFJ75nEmmTsa3GdDpdSNac/w/lFshXKg1Xl ylCtcjfsj2f3/pdbEUZPm4H3s25ut/GSePeNFARNLsY1FkwebXaQIhV+rYf6IJFi wyHKnYgvYka7PeIWL48QbBJdGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeOPi7T kwbZ5TPb9/IiLJA++10aMB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm b3NObW1leGFSMnpNV0IzbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLm0Mcrlaoxa1EBDwZuQTJ5Te5xxGE11/5igH5eb4Egakb+l/wmzYC /bAek+KB5fh3b9vTot4CtvqAaorvg2X0ATTMjXXV0dxQ4RcrFr68kzbS2Pxxmum5 NTMhoPQbjY3VJN23FHv4opmcAZ6utb3CsuNl5kXdKLr2NWCkyd+aCVGH9xOpgEwM mLgekgCVf8FP0davZJ1/t+7KCzBdutkVuOYNtDQDoJ3yjExiNY6abt5J+2gC70NR 3R4T8oPPw6gR8WmRUJ2EJxa5n5hC4Yj7UfdmGM6rBz9QJPEsWNRK7JTiAB9BX2qP o1Wvh8RjcKML1lr6gW94v9NEqIA2D9sQ -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:20 2025 by rpki-client