$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: NQjsSujKSprpUXNAixflp+LjitcaFORXxse9KYzD8nY= Subject key identifier: 1B:87:EB:63:4E:30:07:7B:D6:C9:E3:7B:77:59:24:85:BB:9B:12:3B Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 05B4 Signing time: Sun 02 Nov 2025 23:15:23 +0000 Manifest this update: Sun 02 Nov 2025 23:15:23 +0000 Manifest next update: Sun 09 Nov 2025 23:15:23 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: nGTooaKguI/qHkZc/3giCHnnRlZTLNsuLvGqcRLaTVU=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: Ji5QHhKyC9d/xw16UVd29SWOnnXI9pwAI1DiN2SnuG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Nov 2 23:15:23 2025 GMT Not After : Nov 9 23:15:23 2025 GMT Subject: CN=6907e60b-cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:df:00:57:25:3b:95:97:d8:d8:1f:38:b5: 8c:0e:a9:da:67:4e:d1:db:8b:06:f8:f1:bd:35:b3: ce:47:49:fc:20:61:53:30:41:c9:0a:66:ca:54:c1: 4e:12:18:ed:4f:f0:cd:3b:48:e0:0d:58:f5:23:18: ea:d5:54:c6:60:79:a8:7c:a8:51:43:c4:83:d1:59: ef:4f:c3:f5:e3:69:ed:f3:76:6f:15:b5:8f:0b:d1: 37:31:f1:18:69:3c:a5:64:c7:fc:08:a5:22:cb:50: f7:71:83:1b:6c:b3:f0:de:8e:f9:96:b2:29:35:49: a6:c3:06:83:68:05:da:31:72:80:6b:5d:b8:51:9c: 7b:3e:c5:b9:21:48:3d:ec:db:9b:29:d5:ab:0f:27: ec:39:54:7a:5f:2d:a8:74:fa:d3:27:e8:6e:ed:f3: bb:33:92:2e:fe:38:18:e0:7e:db:52:94:2b:64:80: e6:42:11:b0:f9:7f:a5:a9:2e:c0:4e:f8:8a:2e:46: d4:cd:3e:73:53:a7:ea:73:16:07:e5:23:9a:20:39: 0b:3a:99:af:88:56:f6:31:f4:a6:e4:52:57:a1:5d: a9:ba:de:42:df:b4:9d:90:83:d6:73:7d:4a:95:38: d6:14:7c:fb:39:86:0a:1e:f2:ba:4e:b3:47:06:54: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:EB:63:4E:30:07:7B:D6:C9:E3:7B:77:59:24:85:BB:9B:12:3B X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:63:85:90:40:8a:14:26:8c:0a:bc:1c:2d:f4:eb:a7:a6:00: 63:86:c1:8b:39:7c:13:13:c0:90:6c:de:0a:5b:fe:e2:04:d5: 7e:87:27:63:ca:9a:ef:17:44:14:e0:ef:9d:e1:97:bf:f5:d3: d8:e8:41:89:04:31:61:f2:b7:69:92:8c:1a:36:22:e2:94:5d: ea:ad:07:e2:7f:a4:ef:5f:5b:6a:0e:7e:d8:b0:6f:ea:b6:8a: de:6a:d1:18:a5:2d:d6:8f:df:f8:58:f6:80:f6:ec:c7:e7:20: b4:4c:60:31:e3:bc:40:1f:fa:6a:b8:b5:3b:6a:e7:8b:64:a6: 89:f7:e9:fe:51:91:6d:68:49:dc:43:f5:fb:9a:a9:62:a8:18: e4:90:ee:bf:db:78:91:5f:17:3e:57:f9:f3:c4:5e:0d:1f:21: 8e:6b:a8:e5:ac:9f:9d:64:f8:8e:6c:91:48:ce:25:4d:16:82: 19:68:16:87:ff:eb:13:c7:a9:aa:fa:d4:c3:66:59:f5:b2:47: 43:5a:bf:72:69:de:ed:06:12:1e:76:21:3b:c1:a8:45:6a:c2: 36:a2:8a:a6:95:ea:d3:0c:66:e8:72:70:06:68:79:23:38:bb: 8f:09:15:d6:1c:5e:d1:f1:3e:8d:79:7b:6a:3d:49:4e:97:7b: 6a:16:82:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUxMTAyMjMxNTIzWhcNMjUxMTA5MjMxNTIzWjAYMRYwFAYD VQQDEw02OTA3ZTYwYi1jYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAop/fAFclO5WX2NgfOLWMDqnaZ07R24sG+PG9NbPOR0n8IGFTMEHJCmbKVMFO EhjtT/DNO0jgDVj1Ixjq1VTGYHmofKhRQ8SD0VnvT8P142nt83ZvFbWPC9E3MfEY aTylZMf8CKUiy1D3cYMbbLPw3o75lrIpNUmmwwaDaAXaMXKAa124UZx7PsW5IUg9 7NubKdWrDyfsOVR6Xy2odPrTJ+hu7fO7M5Iu/jgY4H7bUpQrZIDmQhGw+X+lqS7A TviKLkbUzT5zU6fqcxYH5SOaIDkLOpmviFb2MfSm5FJXoV2put5C37SdkIPWc31K lTjWFHz7OYYKHvK6TrNHBlRo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuH62NO MAd71snje3dZJIW7mxI7MB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Y4WQQIoUJowKvBwt9OunpgBjhsGLOXwTE8CQbN4KW/7iBNV+hydj yprvF0QU4O+d4Ze/9dPY6EGJBDFh8rdpkowaNiLilF3qrQfif6TvX1tqDn7YsG/q toreatEYpS3Wj9/4WPaA9uzH5yC0TGAx47xAH/pquLU7aueLZKaJ9+n+UZFtaEnc Q/X7mqliqBjkkO6/23iRXxc+V/nzxF4NHyGOa6jlrJ+dZPiObJFIziVNFoIZaBaH /+sTx6mq+tTDZln1skdDWr9yad7tBhIediE7wahFasI2ooqmlerTDGbocnAGaHkj OLuPCRXWHF7R8T6NeXtqPUlOl3tqFoLW -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:23 2025 by rpki-client