$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json) Hash identifier: BbEJs5HAPwbXDC+gbIbxErwuloy/eQY4O/pQPWsmXbo= Subject key identifier: 8F:F7:13:1E:66:A5:3D:37:E0:6E:34:8C:E3:7B:6F:20:25:80:BD:C8 Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft Manifest number: 03 Signing time: Wed 05 Nov 2025 08:17:08 +0000 Manifest this update: Wed 05 Nov 2025 08:17:07 +0000 Manifest next update: Wed 12 Nov 2025 08:17:07 +0000 Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: 5Efl2YgKDQho9lnQSF14bujZtJzvJXB1xzGnLfUlSJ4=) 2: 4813CD7CB88211F0B689684AC4F9AE02.roa (hash: nxa5+HZlpRX/lbOxWkTwa/AB6o+F9Q2zmcbimMACVmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Nov 5 08:17:07 2025 GMT Not After : Nov 12 08:17:07 2025 GMT Subject: CN=690b0803-dee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:21:70:52:99:50:3f:ec:cf:b7:af:88:7c: 69:78:e5:12:bc:89:fe:c4:77:a5:e6:d8:04:41:e3: 64:48:47:fa:dd:23:07:7b:33:81:29:e3:96:0e:b8: 91:d1:ee:ce:4a:7d:92:c7:7c:4d:2e:cf:1a:0e:0b: 22:ae:88:79:e3:6b:d2:5c:ae:da:e1:db:61:e6:d3: 77:ae:8b:91:4b:7e:43:15:60:8e:31:fa:cb:3b:3a: 70:c6:3b:00:21:c6:a8:8c:7b:bc:62:a4:4f:d4:14: 61:99:32:84:c3:d7:cd:b6:04:cd:6b:93:0a:d6:64: 4f:74:c2:08:ab:8a:e4:e6:0f:12:99:d7:5c:ea:e9: 00:94:fb:a6:48:f6:ff:1e:11:c1:86:69:16:55:eb: 1b:a0:46:a0:c6:1a:7d:59:cc:47:82:57:83:e2:2a: 1b:a1:c8:ab:a3:4e:ba:71:da:d1:2e:a0:e0:3b:dd: 98:0c:e7:0b:57:3f:bc:79:33:fe:99:6a:ba:3a:15: fb:e6:10:8b:3b:6c:86:e8:73:3c:80:b6:52:5a:e2: b4:86:1f:e3:4f:5c:0d:60:ca:b5:70:40:26:dd:b6: bd:4c:f9:e3:11:5b:87:dd:62:9f:18:e1:46:bc:f7: 73:00:c1:dc:8a:57:50:03:db:4b:3e:d0:87:4d:91: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:13:1E:66:A5:3D:37:E0:6E:34:8C:E3:7B:6F:20:25:80:BD:C8 X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:52:e6:50:b4:6c:0c:4b:12:24:b6:3e:76:12:15:97:c1:77: 6c:66:f9:17:15:3b:3e:4d:34:c1:a3:0c:30:b9:e0:e9:ed:0a: 62:17:23:5d:98:76:12:25:3e:ab:3e:94:f8:15:bc:f7:6e:51: 83:1d:75:2c:82:db:34:21:c3:52:37:3b:15:71:03:a0:ea:97: 31:1f:a8:86:59:2a:ea:07:8b:f1:bc:e3:74:72:2f:cd:ec:c3: 9a:e4:80:53:5b:6e:1e:60:60:1e:2d:39:b0:bc:7b:2a:18:39: 16:16:90:4c:07:58:d0:bd:6b:de:0b:f8:cc:0d:ba:3c:32:90: 23:c1:3b:90:2e:55:da:00:52:fd:f2:3d:8d:81:16:60:3d:07: a4:63:bd:bf:f0:ff:17:66:22:e9:eb:d8:86:e9:13:a3:cb:3c: c2:ab:ea:14:df:65:da:25:7a:74:4f:b0:23:6d:b0:ac:ec:a6: c0:31:6f:c0:8b:fd:bb:4b:f9:0d:13:e8:30:52:cb:89:79:32: cb:10:84:a8:74:ae:02:8c:50:d8:a8:a8:e3:a0:9c:8f:4f:3b: 46:7b:e0:d3:fc:7b:ff:03:66:c8:6e:c0:5b:ca:fe:2a:f7:81: f8:9e:dc:64:6c:02:d6:23:0d:3b:2f:a7:fa:e6:93:01:dd:12: db:58:46:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD MjVBQTIzMzAeFw0yNTExMDUwODE3MDdaFw0yNTExMTIwODE3MDdaMBgxFjAUBgNV BAMTDTY5MGIwODAzLWRlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw6CFwUplQP+zPt6+IfGl45RK8if7Ed6Xm2ARB42RIR/rdIwd7M4Ep45YOuJHR 7s5KfZLHfE0uzxoOCyKuiHnja9Jcrtrh22Hm03eui5FLfkMVYI4x+ss7OnDGOwAh xqiMe7xipE/UFGGZMoTD1822BM1rkwrWZE90wgiriuTmDxKZ11zq6QCU+6ZI9v8e EcGGaRZV6xugRqDGGn1ZzEeCV4PiKhuhyKujTrpx2tEuoOA73ZgM5wtXP7x5M/6Z aro6FfvmEIs7bIboczyAtlJa4rSGH+NPXA1gyrVwQCbdtr1M+eMRW4fdYp8Y4Ua8 93MAwdyKV1AD20s+0IdNkTHVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj/cTHmal PTfgbjSM43tvICWAvcgwHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3 RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RUMyL0I4MkE5QTFDQjg3RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUt TnRKcU51YXl4UDhKYW9qTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxS5lC0bAxLEiS2PnYSFZfBd2xm+RcVOz5NNMGjDDC54OntCmIXI12Y dhIlPqs+lPgVvPduUYMddSyC2zQhw1I3OxVxA6DqlzEfqIZZKuoHi/G843RyL83s w5rkgFNbbh5gYB4tObC8eyoYORYWkEwHWNC9a94L+MwNujwykCPBO5AuVdoAUv3y PY2BFmA9B6Rjvb/w/xdmIunr2IbpE6PLPMKr6hTfZdolenRPsCNtsKzspsAxb8CL /btL+Q0T6DBSy4l5MssQhKh0rgKMUNioqOOgnI9PO0Z74NP8e/8DZshuwFvK/ir3 gfie3GRsAtYjDTsvp/rmkwHdEttYRug= -----END CERTIFICATE-----Generated at Wed Nov 5 19:37:39 2025 by rpki-client