$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: t16QWHJ6WkWqJhwwJXtu+a7W7sS54XdDLn7haThrAZ4= Subject key identifier: B9:5A:53:86:F7:8F:CB:71:38:5F:A4:4E:55:42:C0:1E:87:ED:64:5D Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 0435 Signing time: Mon 03 Nov 2025 00:14:46 +0000 Manifest this update: Mon 03 Nov 2025 00:14:45 +0000 Manifest next update: Mon 10 Nov 2025 00:14:45 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: wmFlQkKur9qNJpyEWOYlFqIfhnh71mih3fknhX6uCzw=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: iIiLthCmbedJRo28SgXjSnyh36vN7rpzHjXfoOnGfcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: Nov 3 00:14:45 2025 GMT Not After : Nov 10 00:14:45 2025 GMT Subject: CN=6907f3f6-b6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:82:1c:3c:52:12:43:42:9f:5e:62:b8:74: 2a:45:25:42:23:8c:98:ec:ba:22:89:b0:e6:9b:e0: 9e:b6:e6:7b:56:85:3b:a0:4e:5b:46:02:ac:a0:ca: 87:66:ff:a2:8c:33:11:b0:1e:93:fb:09:c6:c1:f6: 6b:ce:70:ed:4c:41:27:b9:d4:4d:d9:10:78:6a:27: 32:cc:bd:6a:be:ea:43:9a:ab:b9:8b:c7:68:bd:ff: 21:f2:30:b1:2c:f2:18:1d:e9:c8:f2:6a:7b:aa:65: 06:95:96:df:e7:c4:7a:56:f6:4d:29:b4:76:8a:70: 94:85:e9:50:94:1d:f3:af:5e:6a:8d:4f:8e:75:55: cd:53:71:0a:50:f0:87:91:8a:d6:db:99:89:fc:74: 3b:7f:8d:de:8b:62:ef:78:35:3e:f3:e8:25:bb:39: 9a:70:db:c9:4b:4d:31:44:be:b9:5b:cf:af:5f:7c: 6c:f0:f3:8c:1d:7e:15:69:68:ef:e2:ba:e8:60:a1: 3a:17:30:85:6c:14:56:bf:b9:4e:25:05:cd:d6:1c: 97:20:2c:e7:00:64:0d:94:9e:5f:7e:85:5f:d0:93: 1b:8b:2b:b9:92:5c:24:00:eb:66:0e:c5:e1:9a:f1: 02:a0:fc:66:0e:85:38:16:e5:5a:bb:53:c7:40:85: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5A:53:86:F7:8F:CB:71:38:5F:A4:4E:55:42:C0:1E:87:ED:64:5D X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0a:31:28:5f:4d:53:a4:32:01:9b:2b:47:e8:e3:18:14:5a: f5:7f:b0:db:8d:d0:8d:9f:9f:11:2c:0a:16:76:c8:cf:39:84: 87:ab:b8:bb:9c:f6:73:ce:49:22:54:0d:46:f4:49:b1:52:d1: 29:f8:c5:c5:fa:02:5f:7e:25:11:44:5f:9b:2e:e0:1e:04:f5: ce:8f:51:af:3d:c7:8a:b8:25:fe:77:2d:e8:57:3b:0e:d4:8b: 7c:1f:19:99:38:58:a0:7b:61:05:cd:04:8a:15:4a:ec:41:b2: 36:45:ed:9a:69:29:bb:34:ff:e4:39:b0:e9:51:5d:df:10:b8: ec:6c:26:a3:d8:4d:52:3d:6f:d8:d8:7b:c9:65:97:b8:28:6c: 8e:64:b9:18:17:be:33:6f:69:a2:36:2d:10:86:aa:72:21:66: 14:bb:43:cf:19:2c:4e:c4:7f:f6:fb:7e:86:96:2c:3a:42:ff: bc:27:65:11:63:51:44:69:d6:be:be:b0:ba:71:8d:17:3a:df: a6:fc:69:0b:ec:48:f3:58:47:38:bc:32:25:98:8f:c6:8a:1e: a3:0d:04:1a:27:7a:ed:7b:16:6f:89:18:77:a3:a5:de:65:f6: 4b:a0:f3:72:4e:ce:4f:9e:88:2b:47:fb:87:b0:89:19:03:2f: fb:15:ba:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjUxMTAzMDAxNDQ1WhcNMjUxMTEwMDAxNDQ1WjAYMRYwFAYD VQQDEw02OTA3ZjNmNi1iNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPiCHDxSEkNCn15iuHQqRSVCI4yY7LoiibDmm+CetuZ7VoU7oE5bRgKsoMqH Zv+ijDMRsB6T+wnGwfZrznDtTEEnudRN2RB4aicyzL1qvupDmqu5i8dovf8h8jCx LPIYHenI8mp7qmUGlZbf58R6VvZNKbR2inCUhelQlB3zr15qjU+OdVXNU3EKUPCH kYrW25mJ/HQ7f43ei2LveDU+8+gluzmacNvJS00xRL65W8+vX3xs8POMHX4VaWjv 4rroYKE6FzCFbBRWv7lOJQXN1hyXICznAGQNlJ5ffoVf0JMbiyu5klwkAOtmDsXh mvECoPxmDoU4FuVau1PHQIXG9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlaU4b3 j8txOF+kTlVCwB6H7WRdMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGCjEoX01TpDIBmytH6OMYFFr1f7DbjdCNn58RLAoWdsjPOYSHq7i7 nPZzzkkiVA1G9EmxUtEp+MXF+gJffiURRF+bLuAeBPXOj1GvPceKuCX+dy3oVzsO 1It8HxmZOFige2EFzQSKFUrsQbI2Re2aaSm7NP/kObDpUV3fELjsbCaj2E1SPW/Y 2HvJZZe4KGyOZLkYF74zb2miNi0QhqpyIWYUu0PPGSxOxH/2+36Gliw6Qv+8J2UR Y1FEada+vrC6cY0XOt+m/GkL7EjzWEc4vDIlmI/Gih6jDQQaJ3rtexZviRh3o6Xe ZfZLoPNyTs5PnogrR/uHsIkZAy/7Fbqv -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:04 2025 by rpki-client