$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: D1/m/MYDytOX9xh2wBwpemTShcNZx/gP/Ad8k+rOnAg= Subject key identifier: 00:09:20:B3:75:7B:63:BC:04:5C:62:66:3A:4A:A3:D3:F8:A0:86:D8 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: D9 Signing time: Mon 03 Nov 2025 05:51:00 +0000 Manifest this update: Mon 03 Nov 2025 05:50:59 +0000 Manifest next update: Mon 10 Nov 2025 05:50:59 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: jVdLpcS3vx8n1HsNhkJtVBzZOGXMhQkW6eSGRz1/p6w=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: 7fW7uEIf5Uxrex5CiNo83dZcK5fiFFBbbMhh8zy3jv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Nov 3 05:50:59 2025 GMT Not After : Nov 10 05:50:59 2025 GMT Subject: CN=690842c3-51b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:7b:9b:96:90:d7:62:4e:c4:c6:7a:a7:5f: ee:d0:6f:57:0d:29:bd:c0:d7:2f:24:f6:50:de:6b: 0e:84:ad:1d:3a:c1:6b:bc:11:a1:f7:52:54:89:ad: 05:16:fc:66:9c:c7:37:96:5f:83:5a:93:bb:88:06: 57:a4:c8:38:7c:00:2d:86:51:75:f1:07:93:d1:d4: 69:d2:0a:81:c8:2b:4c:db:ff:a2:36:f0:57:90:48: 1d:2b:8f:88:a8:b7:8b:15:83:ea:02:2d:da:96:d5: 4b:65:ac:b4:fe:5b:60:ba:40:e4:43:38:32:f4:81: d9:52:de:cc:4c:a8:7a:2c:e7:0d:ad:27:d6:9e:fb: 1c:f5:7b:b1:4c:a5:7f:f0:a5:28:bc:f6:b7:91:08: 00:75:5c:15:77:2a:ed:7e:50:00:7e:78:57:69:23: b0:31:36:03:fa:13:50:68:f8:11:44:d8:4d:7a:3b: 3c:6c:7c:b2:81:dd:df:e0:17:a8:b6:85:cf:a3:e2: d3:b1:4c:4c:5f:31:cd:c6:8d:4e:fb:58:5b:b9:97: ae:43:64:89:8b:0f:a1:da:6f:7a:04:68:45:9a:3e: 40:63:31:55:18:06:4c:83:3c:86:14:84:e7:bb:07: 56:cd:b0:26:ca:6d:c1:8b:88:ad:cd:98:57:b1:a7: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:20:B3:75:7B:63:BC:04:5C:62:66:3A:4A:A3:D3:F8:A0:86:D8 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2c:95:b3:cf:45:8f:d7:6e:e1:fc:41:0d:a3:5e:27:30:8f: c2:dc:bc:dd:41:43:01:3d:2e:67:47:7b:97:20:af:5e:9b:2c: 22:1d:cc:49:27:99:9e:b1:f4:fe:c2:b0:f9:07:e6:a8:6a:74: b3:f1:cb:ab:42:b8:1a:b9:6f:19:fb:5d:b0:e2:38:7c:9a:dc: 96:83:38:f3:fb:cd:af:52:9b:dc:08:72:38:48:68:a4:26:ef: b8:e4:cb:fb:e7:ff:e5:4e:c8:9e:98:0e:5d:b9:1b:9f:9e:d5: 4a:7b:1f:2b:e8:ae:cc:4c:13:92:73:53:f0:11:ef:a9:b6:f8: 71:a1:7f:23:d0:dd:b3:3c:d4:e5:46:2c:4f:1b:c7:08:4c:d3: 26:ef:d9:f3:c5:95:d0:c0:dc:87:61:98:9c:e5:ee:54:26:4d: 4b:f6:1a:08:ca:b6:5f:8e:19:49:97:ac:5f:23:28:27:fc:f4: f9:49:2a:4a:f2:19:d3:f1:73:c9:5f:13:f6:82:c1:f3:86:ab: f1:2d:d3:95:79:6a:b8:a2:3d:ea:cd:aa:ad:bc:82:80:50:42: 96:e5:cd:b3:24:ba:b0:b0:8b:b4:26:ca:de:bb:19:5e:15:f1: 62:fd:7f:58:90:9c:58:67:c6:76:a6:ae:8b:55:52:17:4b:8c: 5a:dc:c5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUxMTAzMDU1MDU5WhcNMjUxMTEwMDU1MDU5WjAYMRYwFAYD VQQDEw02OTA4NDJjMy01MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9V7m5aQ12JOxMZ6p1/u0G9XDSm9wNcvJPZQ3msOhK0dOsFrvBGh91JUia0F FvxmnMc3ll+DWpO7iAZXpMg4fAAthlF18QeT0dRp0gqByCtM2/+iNvBXkEgdK4+I qLeLFYPqAi3altVLZay0/ltgukDkQzgy9IHZUt7MTKh6LOcNrSfWnvsc9XuxTKV/ 8KUovPa3kQgAdVwVdyrtflAAfnhXaSOwMTYD+hNQaPgRRNhNejs8bHyygd3f4Beo toXPo+LTsUxMXzHNxo1O+1hbuZeuQ2SJiw+h2m96BGhFmj5AYzFVGAZMgzyGFITn uwdWzbAmym3Bi4itzZhXsaf/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAJILN1 e2O8BFxiZjpKo9P4oIbYMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6LJWzz0WP127h/EENo14nMI/C3LzdQUMBPS5nR3uXIK9emywiHcxJ J5mesfT+wrD5B+aoanSz8curQrgauW8Z+12w4jh8mtyWgzjz+82vUpvcCHI4SGik Ju+45Mv75//lTsiemA5duRufntVKex8r6K7MTBOSc1PwEe+ptvhxoX8j0N2zPNTl RixPG8cITNMm79nzxZXQwNyHYZic5e5UJk1L9hoIyrZfjhlJl6xfIygn/PT5SSpK 8hnT8XPJXxP2gsHzhqvxLdOVeWq4oj3qzaqtvIKAUEKW5c2zJLqwsIu0Jsreuxle FfFi/X9YkJxYZ8Z2pq6LVVIXS4xa3MW9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:14 2025 by rpki-client