$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: lhlLH6frkR+DlBnPfYFk4d5uKNZqDTyt+gA/76iMvPY= Subject key identifier: 7E:1D:2E:72:C5:54:38:A4:36:9F:C7:09:9D:3F:31:78:1A:C9:19:1D Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 1964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1959 Signing time: Sun 02 Nov 2025 16:24:52 +0000 Manifest this update: Sun 02 Nov 2025 16:24:52 +0000 Manifest next update: Sun 09 Nov 2025 16:24:52 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: M3CDJhhmiasdlpSqkN09Zo7Ys6Z23tPBxxMl7T6UvJU=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: E6UpldRotsggXgn0nl1/UsRHEfM+J1lVtu1dNLHwKlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6500 (0x1964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Nov 2 16:24:52 2025 GMT Not After : Nov 9 16:24:52 2025 GMT Subject: CN=690785d4-5634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:4a:f1:c6:71:63:8e:b4:e3:2c:db:7c:e6: 6d:ee:c8:66:05:2e:47:a0:b8:91:bb:6a:44:fc:bd: ef:36:41:36:f7:c7:74:39:9e:0c:30:76:86:d3:c2: 74:67:f2:67:c9:16:a4:b4:5f:0b:1b:77:b7:67:23: be:bd:6a:77:50:31:63:d5:6a:82:6d:0e:b9:5c:19: de:7b:4e:b7:f1:b8:70:db:0d:da:91:15:46:9d:b7: 66:6e:9a:3f:43:f3:f1:76:23:28:b6:46:68:28:b1: c0:ef:02:b0:24:48:ea:46:ca:46:d4:27:91:b6:cb: 1f:2b:cb:4d:0a:c1:4d:57:b2:66:d7:2f:33:3e:b8: 1c:28:28:40:26:ac:df:2d:c9:cf:c3:2e:d4:49:6b: af:ed:64:3e:2f:7b:14:34:72:b8:b1:00:54:5e:cb: b5:bd:e6:dd:aa:a2:85:ca:f6:e5:88:af:f0:fd:4d: fb:fa:4e:5f:66:0f:ec:0a:a2:da:25:13:02:b4:b4: 40:89:ea:4f:f5:55:c3:b1:7a:4a:c6:ad:a4:cd:09: f9:c9:76:2c:81:3d:c8:f6:66:45:06:eb:c2:4b:74: 5d:4d:cb:ba:1f:83:5c:ea:57:99:3a:f6:51:16:05: 37:16:9c:be:28:74:b2:63:a7:21:1f:d2:d7:1c:a5: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1D:2E:72:C5:54:38:A4:36:9F:C7:09:9D:3F:31:78:1A:C9:19:1D X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:31:e3:1c:87:9b:94:49:6c:d9:39:50:26:5d:76:7d:5d:cf: de:80:e6:cb:16:08:fe:58:af:28:5f:53:98:13:9f:49:90:1f: ec:2e:13:f9:c1:ca:fb:6e:f4:41:c9:7a:91:f1:69:f1:da:c4: 1a:c4:23:2c:a8:7a:10:18:23:f1:40:27:5b:31:57:0e:96:6b: 5a:56:1a:ad:9d:4f:8d:04:fe:5f:16:06:97:67:31:46:0d:2c: ac:36:26:a5:2b:22:54:b4:9a:4f:04:9b:25:05:a6:76:b1:c5: 3d:02:69:9c:d5:a8:59:38:1c:96:00:eb:4e:75:9f:e5:58:13: 47:d6:7b:b5:ba:8d:66:8d:92:b2:87:47:93:5f:b1:da:b1:28: 71:80:13:b1:61:16:4e:7b:f4:81:67:a2:7d:38:7e:68:d2:32: 75:e9:5e:7b:76:ee:3f:80:31:84:7e:ca:18:6d:b6:3d:54:f0: a4:72:18:e5:64:4d:fa:4d:f3:93:92:72:97:6a:f8:07:83:a9: b5:39:df:48:db:99:1b:98:0d:c5:8e:7b:6d:26:bc:91:b1:e7: ac:97:fe:bc:98:7b:ef:b0:c5:91:98:ae:a6:63:8c:dc:7e:0b: f2:ea:d2:31:ee:8f:65:79:ab:92:29:3e:41:bf:bf:b1:4b:d3: ce:6b:51:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUxMTAyMTYyNDUyWhcNMjUxMTA5MTYyNDUyWjAYMRYwFAYD VQQDEw02OTA3ODVkNC01NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+tK8cZxY4604yzbfOZt7shmBS5HoLiRu2pE/L3vNkE298d0OZ4MMHaG08J0 Z/JnyRaktF8LG3e3ZyO+vWp3UDFj1WqCbQ65XBnee0638bhw2w3akRVGnbdmbpo/ Q/PxdiMotkZoKLHA7wKwJEjqRspG1CeRtssfK8tNCsFNV7Jm1y8zPrgcKChAJqzf LcnPwy7USWuv7WQ+L3sUNHK4sQBUXsu1vebdqqKFyvbliK/w/U37+k5fZg/sCqLa JRMCtLRAiepP9VXDsXpKxq2kzQn5yXYsgT3I9mZFBuvCS3RdTcu6H4Nc6leZOvZR FgU3Fpy+KHSyY6chH9LXHKWSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4dLnLF VDikNp/HCZ0/MXgayRkdMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYMeMch5uUSWzZOVAmXXZ9Xc/egObLFgj+WK8oX1OYE59JkB/sLhP5 wcr7bvRByXqR8Wnx2sQaxCMsqHoQGCPxQCdbMVcOlmtaVhqtnU+NBP5fFgaXZzFG DSysNialKyJUtJpPBJslBaZ2scU9Ammc1ahZOByWAOtOdZ/lWBNH1nu1uo1mjZKy h0eTX7HasShxgBOxYRZOe/SBZ6J9OH5o0jJ16V57du4/gDGEfsoYbbY9VPCkchjl ZE36TfOTknKXavgHg6m1Od9I25kbmA3FjnttJryRseesl/68mHvvsMWRmK6mY4zc fgvy6tIx7o9leauSKT5Bv7+xS9POa1Et -----END CERTIFICATE-----Generated at Tue Nov 4 01:07:21 2025 by rpki-client