$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: NXJRcSrJCR9GHw9AZ4fJZckcTAlLwCxTG1JUDVfF6Io= Subject key identifier: 57:01:E4:FB:67:F1:A1:BE:DB:B1:46:5E:1A:FF:82:3D:E4:4E:6B:13 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 0182 Signing time: Wed 05 Nov 2025 03:56:38 +0000 Manifest this update: Wed 05 Nov 2025 03:56:37 +0000 Manifest next update: Wed 12 Nov 2025 03:56:37 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: KeZT3wMvnjZqZE4jdPGqxfTSBsZiyp6wF8O/GJgRITg=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Nov 5 03:56:37 2025 GMT Not After : Nov 12 03:56:37 2025 GMT Subject: CN=690acaf6-668d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:21:9c:1f:e1:ab:43:81:bf:d7:b4:f3:0b: 12:21:cd:2e:34:62:42:22:31:14:7d:6a:17:c5:2e: 66:9f:d6:96:32:38:c9:16:4e:15:cd:f3:19:fb:99: 71:2a:92:8c:aa:86:83:e8:d3:fd:55:d2:30:7d:3d: 13:ae:16:71:bd:d0:23:f9:dd:18:06:85:71:26:28: 0c:ff:b8:eb:5b:48:c2:d1:c6:57:3c:2a:e0:16:71: 7b:53:28:f5:2f:cf:3a:88:ba:b6:6e:cf:d0:97:9b: 7b:ef:a9:4b:95:75:02:6b:ac:87:39:64:c8:6a:e4: 75:58:e6:55:a2:ac:d7:cc:e8:28:7b:f1:f3:1f:21: c7:a5:9f:4f:e5:2a:4d:e8:f4:d8:b7:ed:11:e8:70: 9f:83:7b:14:6a:9a:66:d5:65:94:39:b2:75:44:05: 44:22:e8:5c:01:c9:c4:5d:76:ba:96:96:b1:30:23: 8d:4a:30:96:87:8f:e7:93:47:00:1a:7c:57:5f:35: 69:02:bb:03:c1:d8:9f:78:09:38:95:99:8e:5d:0f: 85:37:07:96:ae:e2:3f:1a:27:9c:af:5b:53:7e:0f: ad:a3:a8:c4:4f:b4:34:41:90:75:df:ef:99:55:d0: ca:cb:6f:70:86:02:65:85:40:23:24:30:47:c7:50: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:01:E4:FB:67:F1:A1:BE:DB:B1:46:5E:1A:FF:82:3D:E4:4E:6B:13 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:06:d4:7a:ee:de:28:22:fa:84:d3:d6:54:0e:f3:01:c5: 37:c3:43:68:9d:a4:02:1d:f3:63:87:94:74:d9:1b:a5:3d:a6: 46:80:05:35:30:84:4c:22:62:2a:7d:af:9c:cd:af:93:6d:b4: 85:e7:ae:f1:29:26:01:8b:ba:37:d0:53:d6:02:86:a5:fc:e0: ce:25:7d:a7:45:9d:f4:b8:2f:24:33:9a:10:37:b5:7a:c5:82: 23:84:10:8c:8c:94:de:56:01:c6:5b:1b:ca:3b:e2:8f:09:98: 84:19:5e:83:d9:00:bd:b6:19:37:15:6d:44:87:bd:23:4d:7f: 21:74:52:01:51:b8:43:ab:64:7d:f1:cc:68:88:e9:36:6b:b3: 44:f8:81:00:28:c2:e1:d9:ad:ee:69:b8:52:26:e4:70:c4:66: e8:26:3a:38:ff:91:f0:92:ea:21:9c:d3:56:7f:7e:ef:af:06: 2a:d8:7b:1a:79:e7:66:12:4d:cf:18:8f:9e:3a:f3:b2:77:87: 08:32:6a:b4:20:17:8f:3f:c4:71:1a:a7:35:7e:1c:01:1e:3a: bb:6a:ca:11:3a:8b:4e:a8:57:ca:f6:72:1c:77:33:b9:31:3e: a1:17:ca:ee:4c:85:a7:54:ba:bd:c9:4f:92:c8:43:f9:e9:26: 13:84:96:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUxMTA1MDM1NjM3WhcNMjUxMTEyMDM1NjM3WjAYMRYwFAYD VQQDEw02OTBhY2FmNi02NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLshnB/hq0OBv9e08wsSIc0uNGJCIjEUfWoXxS5mn9aWMjjJFk4VzfMZ+5lx KpKMqoaD6NP9VdIwfT0TrhZxvdAj+d0YBoVxJigM/7jrW0jC0cZXPCrgFnF7Uyj1 L886iLq2bs/Ql5t776lLlXUCa6yHOWTIauR1WOZVoqzXzOgoe/HzHyHHpZ9P5SpN 6PTYt+0R6HCfg3sUappm1WWUObJ1RAVEIuhcAcnEXXa6lpaxMCONSjCWh4/nk0cA GnxXXzVpArsDwdifeAk4lZmOXQ+FNweWruI/Giecr1tTfg+to6jET7Q0QZB13++Z VdDKy29whgJlhUAjJDBHx1AO0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcB5Ptn 8aG+27FGXhr/gj3kTmsTMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoOwbUeu7eKCL6hNPWVA7zAcU3w0NonaQCHfNjh5R02RulPaZGgAU1 MIRMImIqfa+cza+TbbSF567xKSYBi7o30FPWAoal/ODOJX2nRZ30uC8kM5oQN7V6 xYIjhBCMjJTeVgHGWxvKO+KPCZiEGV6D2QC9thk3FW1Eh70jTX8hdFIBUbhDq2R9 8cxoiOk2a7NE+IEAKMLh2a3uabhSJuRwxGboJjo4/5HwkuohnNNWf37vrwYq2Hsa eedmEk3PGI+eOvOyd4cIMmq0IBePP8RxGqc1fhwBHjq7asoROotOqFfK9nIcdzO5 MT6hF8ruTIWnVLq9yU+SyEP56SYThJZJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:01 2025 by rpki-client