$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json) Hash identifier: DCAJArK6xYwlRjHp35V4+lHNvRWlRYKsZNDaUOM0qdI= Subject key identifier: 71:D9:BC:DD:50:9D:26:02:47:04:16:CC:E3:FD:D6:A7:01:D8:AF:44 Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 08A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft Manifest number: 089E Signing time: Sun 02 Nov 2025 20:28:48 +0000 Manifest this update: Sun 02 Nov 2025 20:28:48 +0000 Manifest next update: Sun 09 Nov 2025 20:28:48 +0000 Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: hGGjgUxUmAyWQVpiGIaeNaEd8AiZbyH5Ki2um1kmR/M=) 2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UBw2PoTevAndZcrQq8icn0bOX1+H9RUk7B/v/OivD1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: Nov 2 20:28:48 2025 GMT Not After : Nov 9 20:28:48 2025 GMT Subject: CN=6907bf00-3323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:e9:9c:9a:d5:a0:1e:3d:fc:65:2a:9c:a7: 2b:7c:87:8f:f5:b0:73:75:fd:04:ed:90:88:cc:65: c0:66:c9:9a:ef:c1:42:20:c0:3b:b5:05:dd:ec:ea: b5:f8:4f:7d:d7:e9:c7:3e:cb:9e:5c:22:e5:f3:9d: 02:35:71:83:66:63:4c:cf:54:b0:57:a0:04:cf:5c: 85:9a:11:a1:f7:42:d8:a3:3c:ec:19:7a:35:63:f3: 72:e5:e0:f9:43:1c:cc:fa:ab:ca:77:2e:c1:1a:f5: 8c:63:dc:3d:e5:85:3f:38:9f:2b:be:fc:7e:a7:1b: d9:b0:d6:67:d9:63:ee:05:60:ec:1d:f8:d5:c2:b3: 56:a4:92:56:d1:ae:c8:af:4d:5c:cf:b9:5c:17:ff: 09:4d:80:43:43:6c:9c:d9:28:88:4d:af:4b:af:19: 1d:f7:d9:93:47:04:32:1f:1b:07:eb:b6:74:1b:52: 3c:f8:2f:a7:e0:41:b4:fe:a0:91:40:84:9e:5f:07: 01:eb:33:cb:55:d7:1a:e9:e4:67:63:59:2c:a8:e1: d0:12:e1:6b:d5:3e:d8:28:08:e4:79:d5:5b:8b:7a: 85:0b:40:7c:92:2f:b8:99:a4:e1:11:3f:95:d6:04: 86:b1:ee:90:53:61:14:f0:34:63:67:6c:23:72:12: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D9:BC:DD:50:9D:26:02:47:04:16:CC:E3:FD:D6:A7:01:D8:AF:44 X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:76:55:04:09:96:d4:25:02:26:4c:97:e4:b1:a0:42:f7: 9d:7c:b8:3c:a7:ef:86:8c:8f:b3:8d:6e:76:68:21:6d:75:2d: 7b:00:71:d4:0c:b8:99:b0:2f:a2:6f:ce:dd:03:92:e7:a1:29: 9c:0a:b7:8f:84:fc:80:49:2f:99:5e:e4:df:d7:b7:2f:47:dd: 44:7c:30:d3:86:47:f4:6e:b3:09:8e:80:84:2f:24:e9:3f:8b: b6:e0:3b:5c:ad:41:19:03:74:d7:b6:c6:00:89:05:22:e5:3a: 5f:a7:cb:bc:77:d6:83:73:4e:d5:f9:f3:79:45:bd:f7:f0:ad: 9e:bd:f5:2e:de:9e:28:2b:6f:34:b1:3c:f3:d6:bb:fe:bf:86: e3:1a:8c:da:98:0e:a4:77:53:2f:5e:00:e5:c4:0c:96:ca:5b: 4c:b5:c6:d1:82:57:91:ae:c5:23:da:ef:68:db:0d:73:b8:73: 7e:be:74:3c:a5:17:b4:d5:d4:9c:21:59:d4:9b:c1:8e:a3:c8: bc:46:56:e7:90:b9:17:92:93:0d:68:9c:c2:a1:28:c8:1c:49: 0d:c1:28:ea:ab:05:3d:33:1d:a6:88:b3:d4:42:ad:5f:7d:5c: cb:2e:58:26:e6:47:c3:69:58:14:68:d8:d1:f9:c2:5c:ec:52: e8:99:eb:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjUxMTAyMjAyODQ4WhcNMjUxMTA5MjAyODQ4WjAYMRYwFAYD VQQDEw02OTA3YmYwMC0zMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iDpnJrVoB49/GUqnKcrfIeP9bBzdf0E7ZCIzGXAZsma78FCIMA7tQXd7Oq1 +E991+nHPsueXCLl850CNXGDZmNMz1SwV6AEz1yFmhGh90LYozzsGXo1Y/Ny5eD5 QxzM+qvKdy7BGvWMY9w95YU/OJ8rvvx+pxvZsNZn2WPuBWDsHfjVwrNWpJJW0a7I r01cz7lcF/8JTYBDQ2yc2SiITa9Lrxkd99mTRwQyHxsH67Z0G1I8+C+n4EG0/qCR QISeXwcB6zPLVdca6eRnY1ksqOHQEuFr1T7YKAjkedVbi3qFC0B8ki+4maThET+V 1gSGse6QU2EU8DRjZ2wjchKjBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHZvN1Q nSYCRwQWzOP91qcB2K9EMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5 a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMOHZVBAmW1CUCJkyX5LGgQvedfLg8p++GjI+zjW52aCFtdS17AHHU DLiZsC+ib87dA5LnoSmcCrePhPyASS+ZXuTf17cvR91EfDDThkf0brMJjoCELyTp P4u24DtcrUEZA3TXtsYAiQUi5Tpfp8u8d9aDc07V+fN5Rb338K2evfUu3p4oK280 sTzz1rv+v4bjGozamA6kd1MvXgDlxAyWyltMtcbRgleRrsUj2u9o2w1zuHN+vnQ8 pRe01dScIVnUm8GOo8i8RlbnkLkXkpMNaJzCoSjIHEkNwSjqqwU9Mx2miLPUQq1f fVzLLlgm5kfDaVgUaNjR+cJc7FLomet7 -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:51 2025 by rpki-client