$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: EbnHxlVZ+GxGipZeLTFEbSeRmx5z/Dk3oBN/Yy61mD4= Subject key identifier: B8:F5:2A:EB:F9:41:DA:D7:7D:9F:3F:3B:3B:D0:C7:C9:7E:8C:A4:70 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 04:33:14 +0000 Manifest this update: Mon 03 Nov 2025 04:33:14 +0000 Manifest next update: Mon 10 Nov 2025 04:33:14 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: 470Pnn78NUYkhzLOhJONItsc8b+SXqCskKI6Kd+7k1o=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: iQdab95cXgGlPUuiYO+n8Hk1ialiC4/Jl2j60o0Nj04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Nov 3 04:33:14 2025 GMT Not After : Nov 10 04:33:14 2025 GMT Subject: CN=6908308a-45a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:56:43:5a:d5:05:bc:7a:08:e6:81:f4:12: 3f:86:43:99:32:4e:57:e7:e7:04:fb:13:0a:a0:e6: 80:f8:42:08:15:11:96:6f:77:4a:f3:5b:09:39:05: 36:ab:8e:91:23:a6:70:c3:33:bd:53:f1:3e:4b:8f: f7:de:31:0a:61:2b:ce:27:35:9b:20:2a:14:3e:43: 2f:93:88:69:05:af:58:58:c3:e7:8b:95:7d:23:cc: 3a:9d:2a:5e:0e:f3:78:50:cb:be:13:80:e2:09:00: 82:5a:b9:89:1b:8b:6c:97:16:c2:2a:12:79:4e:ff: d0:3a:ae:43:4b:14:57:a3:c0:d3:f0:60:6f:cb:98: 98:dd:e0:c3:3e:a6:03:f9:8a:c8:92:7c:6a:0b:05: 00:9c:b7:6a:ad:de:0c:cf:41:57:85:50:8d:07:9f: ea:0a:b0:25:f5:83:b3:fa:1e:04:24:5d:f0:59:3c: a5:80:28:e4:28:fd:f6:4d:de:20:7c:0b:a7:42:f6: f4:d4:eb:c3:ae:c2:7f:7e:f1:1b:92:a3:0a:c4:f3: 5c:2a:6d:97:d2:72:f7:70:f4:c3:18:ce:d1:7e:5f: 49:55:9c:ed:19:df:41:de:7a:c3:b2:f9:2c:7e:f7: e4:e0:1f:45:98:38:b7:7c:52:ae:03:01:dc:ac:c9: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:2A:EB:F9:41:DA:D7:7D:9F:3F:3B:3B:D0:C7:C9:7E:8C:A4:70 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:47:c2:f6:52:72:d6:37:ce:01:54:e0:47:fd:da:c6:12:71: ff:df:32:9b:ad:9d:79:5a:b4:29:d5:22:ce:f6:05:30:aa:f6: 5a:d2:bb:c1:b8:c5:6e:59:a4:21:9e:9d:70:07:70:95:67:d0: e6:68:2c:d9:a3:ee:60:71:c4:88:62:b1:84:e1:31:57:e6:69: ec:12:af:d2:e5:b4:7c:71:b7:e8:5c:2a:88:83:d9:ee:b3:67: 1e:1f:3b:96:35:15:c9:de:a8:60:5d:49:e3:41:91:62:58:63: 20:68:8e:fe:25:60:4b:92:3f:38:d1:49:54:49:cd:fb:cd:ad: 77:5e:5c:fb:14:a8:94:0c:de:9f:70:0f:f4:cd:e4:8b:d8:5e: 92:b6:38:48:8f:81:bb:23:69:f2:f7:72:62:15:62:86:d0:96: e5:76:3e:08:73:8d:13:a2:cb:c3:11:5d:cc:d8:95:06:72:4f: 9d:f7:5d:9d:12:ff:20:8d:e1:fb:1e:02:09:81:69:08:5e:d8: d0:3e:fa:e3:f6:8c:f5:ca:9c:62:97:2d:fc:ec:ad:12:66:6e: 5c:8c:52:be:9c:48:4d:bd:2b:8c:f5:d5:a9:99:6d:6c:9a:d0: fd:d7:91:2d:3e:d2:a8:45:c3:42:58:21:92:60:e1:46:7b:68: 18:e1:77:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjUxMTAzMDQzMzE0WhcNMjUxMTEwMDQzMzE0WjAYMRYwFAYD VQQDEw02OTA4MzA4YS00NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWVWQ1rVBbx6COaB9BI/hkOZMk5X5+cE+xMKoOaA+EIIFRGWb3dK81sJOQU2 q46RI6ZwwzO9U/E+S4/33jEKYSvOJzWbICoUPkMvk4hpBa9YWMPni5V9I8w6nSpe DvN4UMu+E4DiCQCCWrmJG4tslxbCKhJ5Tv/QOq5DSxRXo8DT8GBvy5iY3eDDPqYD +YrIknxqCwUAnLdqrd4Mz0FXhVCNB5/qCrAl9YOz+h4EJF3wWTylgCjkKP32Td4g fAunQvb01OvDrsJ/fvEbkqMKxPNcKm2X0nL3cPTDGM7Rfl9JVZztGd9B3nrDsvks fvfk4B9FmDi3fFKuAwHcrMlzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj1Kuv5 QdrXfZ8/OzvQx8l+jKRwMB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0R8L2UnLWN84BVOBH/drGEnH/3zKbrZ15WrQp1SLO9gUwqvZa0rvB uMVuWaQhnp1wB3CVZ9DmaCzZo+5gccSIYrGE4TFX5mnsEq/S5bR8cbfoXCqIg9nu s2ceHzuWNRXJ3qhgXUnjQZFiWGMgaI7+JWBLkj840UlUSc37za13Xlz7FKiUDN6f cA/0zeSL2F6StjhIj4G7I2ny93JiFWKG0Jbldj4Ic40TosvDEV3M2JUGck+d912d Ev8gjeH7HgIJgWkIXtjQPvrj9oz1ypxily387K0SZm5cjFK+nEhNvSuM9dWpmW1s mtD915EtPtKoRcNCWCGSYOFGe2gY4XeH -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:00 2025 by rpki-client