$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: hwF28c4bRBy/jspxInzS14ZXVPirbQkgyCsm+cmhXm8= Subject key identifier: 53:4C:D1:3A:02:4F:FD:34:75:CA:96:32:DF:7E:85:E6:19:F7:8B:3F Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 13DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 13D1 Signing time: Sun 02 Nov 2025 16:55:52 +0000 Manifest this update: Sun 02 Nov 2025 16:55:51 +0000 Manifest next update: Sun 09 Nov 2025 16:55:51 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: fmaA87cAlz77Y60spIzbvulnPWtwRjWRdPKnC/P+Le0=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Ps2kpMcHFW9xZn4cXtCxGzuJfkKA6kvJeaElditES+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5082 (0x13da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Nov 2 16:55:51 2025 GMT Not After : Nov 9 16:55:51 2025 GMT Subject: CN=69078d17-71d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:1b:b3:23:02:cc:36:15:1e:bb:ae:27:ad: 2d:fc:14:0b:c3:ea:c5:ef:48:55:7a:68:93:44:f9: 2a:8d:60:2d:62:60:92:f6:de:1a:9d:fc:bf:cc:99: 4a:c3:d2:b6:99:af:eb:5f:93:5b:5b:7e:0c:01:13: 09:fa:24:6e:77:49:4c:50:ad:7f:df:68:3c:19:43: 8b:dc:f2:5e:2c:b3:59:80:6d:c6:ab:ab:95:04:62: a2:a2:9b:cc:1d:b3:97:9e:b5:00:1e:0d:d6:79:b8: 40:02:1e:bb:16:5e:92:02:c2:de:5a:c3:79:5b:e8: 30:15:a9:7d:56:61:88:69:38:43:96:16:8b:a4:eb: 43:dc:eb:c5:66:d4:1f:41:5d:41:60:ce:f4:9f:a2: bf:79:be:8d:05:2c:95:de:85:96:5f:28:a7:ec:41: b5:fd:f3:36:ad:d8:81:35:67:d0:8a:33:1f:a4:78: 4e:4e:e2:ed:f6:6d:76:d3:1f:e3:dd:b9:4d:eb:17: 10:de:a6:38:44:ee:57:43:f8:fe:fd:49:3b:c7:64: 8b:4e:59:4e:da:aa:e9:df:bf:ab:1c:d8:76:d1:8c: c7:2e:70:0a:2f:04:16:37:cc:5f:e7:6c:22:0c:7d: 46:b9:c1:eb:6a:2d:2c:b8:5a:d1:a6:37:e3:19:cd: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4C:D1:3A:02:4F:FD:34:75:CA:96:32:DF:7E:85:E6:19:F7:8B:3F X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6b:38:7f:91:1c:78:1f:b5:bd:0e:e1:af:cc:9c:7b:89:5b: d1:ad:a2:c0:8b:79:48:0c:3b:33:db:3f:b3:a6:ac:f1:31:29: df:d7:fd:89:57:e5:6b:51:cc:e4:c6:49:b8:7d:7a:be:49:23: ba:51:88:57:8f:b6:86:18:eb:4f:29:83:c6:c1:ad:1c:ac:91: a4:f5:b7:3d:d6:93:db:02:4f:f2:b3:e2:96:60:d8:55:09:60: 6e:68:6d:f2:af:1e:25:ee:07:fb:cd:02:5d:e7:48:07:b3:30: 3e:76:e6:1e:49:43:0e:6e:a3:42:87:ea:c9:db:de:50:6c:43: 4f:bf:68:b8:5e:f5:59:f8:c4:42:53:34:91:e9:90:5a:c0:a6: 64:02:33:88:27:e1:71:54:5b:c7:ff:3d:4d:e6:b2:af:07:d4: b9:50:f9:74:cc:df:24:9f:ba:94:d7:5c:22:cc:72:7d:12:25: d9:31:6c:3e:95:34:b5:a2:64:52:ae:5e:46:48:3d:7c:88:af: 16:e3:40:9f:de:d2:5e:1c:58:cf:5d:91:7a:b4:9d:a1:cb:55: 8b:4b:fb:12:ed:fa:1e:c6:df:e0:9c:e9:0d:e4:2b:92:f8:d0: 1f:07:92:a8:0e:d2:0a:28:8d:1d:f9:7c:35:4b:ec:94:82:e6: b2:44:bd:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUxMTAyMTY1NTUxWhcNMjUxMTA5MTY1NTUxWjAYMRYwFAYD VQQDEw02OTA3OGQxNy03MWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aIbsyMCzDYVHruuJ60t/BQLw+rF70hVemiTRPkqjWAtYmCS9t4anfy/zJlK w9K2ma/rX5NbW34MARMJ+iRud0lMUK1/32g8GUOL3PJeLLNZgG3Gq6uVBGKiopvM HbOXnrUAHg3WebhAAh67Fl6SAsLeWsN5W+gwFal9VmGIaThDlhaLpOtD3OvFZtQf QV1BYM70n6K/eb6NBSyV3oWWXyin7EG1/fM2rdiBNWfQijMfpHhOTuLt9m120x/j 3blN6xcQ3qY4RO5XQ/j+/Uk7x2SLTllO2qrp37+rHNh20YzHLnAKLwQWN8xf52wi DH1GucHrai0suFrRpjfjGc1HuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNM0ToC T/00dcqWMt9+heYZ94s/MB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMazh/kRx4H7W9DuGvzJx7iVvRraLAi3lIDDsz2z+zpqzxMSnf1/2J V+VrUczkxkm4fXq+SSO6UYhXj7aGGOtPKYPGwa0crJGk9bc91pPbAk/ys+KWYNhV CWBuaG3yrx4l7gf7zQJd50gHszA+duYeSUMObqNCh+rJ295QbENPv2i4XvVZ+MRC UzSR6ZBawKZkAjOIJ+FxVFvH/z1N5rKvB9S5UPl0zN8kn7qU11wizHJ9EiXZMWw+ lTS1omRSrl5GSD18iK8W40Cf3tJeHFjPXZF6tJ2hy1WLS/sS7foext/gnOkN5CuS +NAfB5KoDtIKKI0d+Xw1S+yUguayRL2D -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:17 2025 by rpki-client