$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: aiOuNpoYP261Wuo8GLY+3dl2bDCseAMyGPeEdgSFIgw= Subject key identifier: 82:B2:AC:25:6A:90:3E:CB:3A:17:83:09:88:57:BD:CB:90:BC:64:26 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: D8 Signing time: Wed 05 Nov 2025 05:46:37 +0000 Manifest this update: Wed 05 Nov 2025 05:46:36 +0000 Manifest next update: Wed 12 Nov 2025 05:46:36 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: Pk9coQVnnWd0Lz4O/UyGSVKZ6j9aqIlxP2cwd3P3Gbk=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Nov 5 05:46:36 2025 GMT Not After : Nov 12 05:46:36 2025 GMT Subject: CN=690ae4bc-0a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:41:91:95:8c:f6:3c:37:23:97:bd:40:f0: 1c:58:c8:79:d2:59:1e:e5:87:29:3c:86:a1:1c:08: a7:b5:22:c0:57:53:3a:7c:50:d0:ef:01:6a:4b:8f: e6:6d:de:cb:80:69:c3:95:2c:82:3f:0f:66:7b:0f: 0f:71:9b:6e:78:2d:77:57:16:24:87:72:63:8b:dd: d2:56:20:3a:03:35:b1:a0:12:f5:8e:86:a5:33:67: ac:70:a8:8d:e8:43:39:b4:dc:2f:03:46:ca:f6:98: e2:91:92:82:e1:9f:7a:28:b0:ce:bc:47:7d:36:fc: 5c:f4:08:8c:5e:55:4a:d5:d8:9f:0a:8c:6b:e2:6f: 40:ce:35:59:a3:b9:69:86:82:bb:d8:ba:53:65:28: e1:a9:6b:a3:3b:a6:01:43:9c:06:a9:8c:00:71:12: 23:20:b9:d5:21:fc:e0:9a:3a:09:2b:ad:84:14:d3: 97:cd:86:0f:1e:08:c3:38:a8:d4:31:57:bb:2a:e2: 73:62:fb:47:d4:25:9a:be:76:28:ed:02:b7:07:d0: c2:be:ff:c4:3b:b8:68:88:fe:1f:e7:cc:6c:32:9f: 46:80:5f:79:43:c9:d6:97:38:08:c9:21:f7:53:78: 9d:e0:6d:e4:96:94:b0:ec:64:e5:51:86:b2:b5:51: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:AC:25:6A:90:3E:CB:3A:17:83:09:88:57:BD:CB:90:BC:64:26 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:34:90:94:4e:be:16:6c:d4:c9:33:c4:1e:fe:57:24:12:0e: a7:10:e0:4a:8b:c1:fc:23:67:10:e7:ba:b4:2f:21:27:40:3c: d3:7f:f8:e0:35:08:bd:dc:b7:87:8d:a7:32:17:d0:c5:ec:f2: 02:e4:e3:d9:5a:3b:9e:3d:4a:26:8b:6a:c0:86:58:ca:b2:2e: 88:f3:00:a1:c8:5b:c6:64:26:f9:f8:16:18:09:d1:50:9d:1d: 64:0c:c4:4e:5e:a3:e0:2c:da:bd:08:10:88:b8:fb:65:15:d2: cd:be:f9:20:f0:76:4b:68:7a:6f:2e:70:68:0d:10:47:f8:57: 8a:3a:26:7f:99:f0:d1:38:6b:33:5a:96:a5:ca:7d:97:3d:f6: 4e:a5:61:18:21:18:2a:bd:45:17:4d:2c:cf:b8:62:29:d5:21: fe:a8:c7:3b:24:16:85:6a:67:d9:90:ad:f3:e8:05:f0:c3:2b: f4:22:0b:3a:bc:f8:a6:a5:d0:90:fe:6f:b1:c5:ab:d6:8a:93: 8d:94:91:81:e9:12:e4:23:f2:12:42:1e:d2:d6:77:d9:11:2e: bd:b1:14:47:1c:6d:a6:e9:5c:f0:3e:d0:70:36:57:86:f9:00: 9f:a4:da:c9:76:21:a4:d1:b3:ac:58:d0:76:3e:1c:77:3b:c0: 8c:a9:24:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjUxMTA1MDU0NjM2WhcNMjUxMTEyMDU0NjM2WjAYMRYwFAYD VQQDEw02OTBhZTRiYy0wYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM9BkZWM9jw3I5e9QPAcWMh50lke5YcpPIahHAintSLAV1M6fFDQ7wFqS4/m bd7LgGnDlSyCPw9mew8PcZtueC13VxYkh3Jji93SViA6AzWxoBL1joalM2escKiN 6EM5tNwvA0bK9pjikZKC4Z96KLDOvEd9Nvxc9AiMXlVK1difCoxr4m9AzjVZo7lp hoK72LpTZSjhqWujO6YBQ5wGqYwAcRIjILnVIfzgmjoJK62EFNOXzYYPHgjDOKjU MVe7KuJzYvtH1CWavnYo7QK3B9DCvv/EO7hoiP4f58xsMp9GgF95Q8nWlzgIySH3 U3id4G3klpSw7GTlUYaytVHx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKyrCVq kD7LOheDCYhXvcuQvGQmMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCNJCUTr4WbNTJM8Qe/lckEg6nEOBKi8H8I2cQ57q0LyEnQDzTf/jg NQi93LeHjacyF9DF7PIC5OPZWjuePUomi2rAhljKsi6I8wChyFvGZCb5+BYYCdFQ nR1kDMROXqPgLNq9CBCIuPtlFdLNvvkg8HZLaHpvLnBoDRBH+FeKOiZ/mfDROGsz Wpalyn2XPfZOpWEYIRgqvUUXTSzPuGIp1SH+qMc7JBaFamfZkK3z6AXwwyv0Igs6 vPimpdCQ/m+xxavWipONlJGB6RLkI/ISQh7S1nfZES69sRRHHG2m6VzwPtBwNleG +QCfpNrJdiGk0bOsWNB2Phx3O8CMqSQh -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:36 2025 by rpki-client