$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: awGOhDTrg2Qa/NuS9ZX8RCcwtxwE1Rsn6GajBnESh1U= Subject key identifier: 56:02:15:D7:48:B2:B1:53:35:31:15:35:A9:A0:F6:C9:37:92:72:94 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 04:51:37 +0000 Manifest this update: Mon 03 Nov 2025 04:51:37 +0000 Manifest next update: Mon 10 Nov 2025 04:51:37 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: WuURxoh6p7NtgZb/xIp0o6hRhSC50Z+rGVYiOZfNPfQ=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: rmjthXIgu+TkmOHK2Z05ZF5XVZiqaLPjn4Rrihljins=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: CPD742iiES9rbPbeCK1WZoSS8qfszA2mvXUnwvIYEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Nov 3 04:51:37 2025 GMT Not After : Nov 10 04:51:37 2025 GMT Subject: CN=690834d9-7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:c2:cb:b3:68:82:fa:05:4d:a2:28:a8:c2: 78:ea:a1:cb:fb:f2:ab:8f:b7:64:8a:0d:b3:95:84: e3:dc:1e:02:db:b2:f0:64:48:3d:e5:e6:1e:2f:23: 02:f8:91:fe:65:d8:69:8e:5b:bc:2b:e7:26:aa:10: 34:a7:ad:16:59:09:01:72:aa:65:11:80:58:39:5b: b9:82:da:26:a7:d3:c0:73:39:8f:61:98:9e:cc:b9: da:b4:e7:3b:47:03:50:f0:a9:aa:60:f0:ce:94:0f: 54:fb:e0:0e:f7:29:66:b8:ba:46:49:1b:82:19:09: 0b:aa:26:00:e2:18:78:8d:d8:94:3d:a9:ee:9e:8c: c8:6b:ed:d1:e3:c5:7f:f1:02:cd:e1:95:46:2f:77: e7:93:63:27:1d:69:fe:18:7b:11:24:56:7e:d0:f5: c0:0b:e4:b7:3d:03:46:8a:fb:00:65:8b:68:49:4a: c3:a6:31:dc:13:f7:56:ef:f0:a4:4d:1b:71:f1:7c: 83:af:48:11:b7:e4:db:34:4b:47:c2:f3:22:16:f5: 1d:e7:ae:dd:ca:53:e7:a1:cf:e7:d7:d9:ae:bd:14: 67:3f:8a:51:5e:5b:01:a8:00:85:12:1e:9a:8c:07: ab:2b:fc:65:be:2a:e5:9e:da:82:22:35:a9:6a:72: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:15:D7:48:B2:B1:53:35:31:15:35:A9:A0:F6:C9:37:92:72:94 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:96:79:07:95:fb:59:e4:dd:28:65:a6:4f:2f:9c:53:6f:65: 67:b3:2f:a7:b7:ae:48:82:c9:4f:fb:a4:5b:4b:1f:98:98:73: 7d:d3:ba:2f:1c:29:1d:4e:38:ad:71:79:c8:3e:5b:5d:4f:30: 2a:04:2a:d0:c4:9e:42:06:78:1e:91:79:07:26:c0:8a:55:01: 62:9e:e9:ae:c5:b2:c8:78:6f:5e:d4:47:20:91:f4:7d:a8:da: 75:f0:47:7f:8f:fb:a8:e9:aa:ec:8b:2b:94:0d:19:e0:a3:60: 8b:00:d3:ff:6e:62:af:c2:b9:ca:8c:ca:40:09:85:f8:b3:59: 10:3f:30:9e:00:fb:d5:27:e1:c9:93:5f:f4:3e:6d:99:83:90: 17:e4:61:17:09:f9:d2:bb:a1:4d:a0:0a:22:2d:00:20:a9:92: 74:fa:e4:7e:6a:b3:14:26:22:71:f1:4c:ca:23:9f:5c:8b:a3: e0:96:16:e4:3a:7b:36:70:c1:d9:27:b9:68:50:c0:7d:bf:70: 2b:55:17:35:0c:f1:be:1b:c5:51:98:f5:bd:fb:aa:4f:a6:fc: 5f:3a:5d:6a:ce:d9:76:8a:59:48:0f:e7:5f:76:5c:be:fb:5c: f2:b0:f2:f0:54:69:3f:3f:43:fe:56:45:b1:14:d4:82:95:d5: 38:87:31:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjUxMTAzMDQ1MTM3WhcNMjUxMTEwMDQ1MTM3WjAYMRYwFAYD VQQDEw02OTA4MzRkOS03ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X3Cy7NogvoFTaIoqMJ46qHL+/Krj7dkig2zlYTj3B4C27LwZEg95eYeLyMC +JH+Zdhpjlu8K+cmqhA0p60WWQkBcqplEYBYOVu5gtomp9PAczmPYZiezLnatOc7 RwNQ8KmqYPDOlA9U++AO9ylmuLpGSRuCGQkLqiYA4hh4jdiUPanunozIa+3R48V/ 8QLN4ZVGL3fnk2MnHWn+GHsRJFZ+0PXAC+S3PQNGivsAZYtoSUrDpjHcE/dW7/Ck TRtx8XyDr0gRt+TbNEtHwvMiFvUd567dylPnoc/n19muvRRnP4pRXlsBqACFEh6a jAerK/xlvirlntqCIjWpanK7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYCFddI srFTNTEVNamg9sk3knKUMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOlnkHlftZ5N0oZaZPL5xTb2Vnsy+nt65IgslP+6RbSx+YmHN907ov HCkdTjitcXnIPltdTzAqBCrQxJ5CBngekXkHJsCKVQFinumuxbLIeG9e1EcgkfR9 qNp18Ed/j/uo6arsiyuUDRngo2CLANP/bmKvwrnKjMpACYX4s1kQPzCeAPvVJ+HJ k1/0Pm2Zg5AX5GEXCfnSu6FNoAoiLQAgqZJ0+uR+arMUJiJx8UzKI59ci6Pglhbk Ons2cMHZJ7loUMB9v3ArVRc1DPG+G8VRmPW9+6pPpvxfOl1qztl2illID+dfdly+ +1zysPLwVGk/P0P+VkWxFNSCldU4hzH8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:15 2025 by rpki-client