$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: MS93VmD2ZCIPFiML/idRkTaB8zbZ4f6wfHSfqpaQ9D0= Subject key identifier: 94:FE:F8:C8:C2:35:FB:EE:B4:87:CE:34:83:27:D4:4A:36:63:C5:48 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 012F Signing time: Mon 03 Nov 2025 04:37:51 +0000 Manifest this update: Mon 03 Nov 2025 04:37:50 +0000 Manifest next update: Mon 10 Nov 2025 04:37:50 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: 6LpasASQZpE1nnQWMy29n9sjTJFR1WOHyNobOkwYkzE=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G/0ezw6yoaaHjsn46sx4sKQROwS7T0PMQPxdtMKah+o=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: E9ObZNoyKAzjoiJfjRSwt1+kDOZ+xsFeoybdq6vQ22E=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Nov 3 04:37:50 2025 GMT Not After : Nov 10 04:37:50 2025 GMT Subject: CN=6908319f-82c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:c1:7d:1f:19:58:fb:99:b5:77:69:bd:d3: e8:65:91:8f:bb:9c:11:0b:46:b0:7c:c9:17:69:7a: 75:59:da:d3:94:81:ba:74:c1:6f:01:cb:f1:d0:5a: 78:14:64:08:4e:18:ab:5e:39:20:09:90:50:f5:9a: c6:cf:4a:d3:fa:f0:26:78:06:2c:46:4f:c8:52:9b: 89:a2:a2:bf:2e:d7:52:d3:fa:e7:4d:ba:3b:39:b7: 18:08:07:62:31:b3:12:2a:be:a2:f6:e6:be:52:08: dc:6b:b8:e2:67:97:f9:9e:f9:e0:f2:42:4f:d6:bc: a5:21:9f:ef:c0:fa:c7:d5:d5:6b:d7:0b:92:b8:87: 11:42:52:22:f7:00:db:43:a6:7f:d4:62:ca:ab:02: 5f:50:2e:f3:af:9c:fb:c9:01:d9:20:8b:d3:34:8b: 06:e2:d3:99:b7:db:5f:d8:2d:e5:39:42:ed:2f:44: fa:d9:17:0f:1e:f7:e3:31:59:f3:98:df:91:bb:9b: 99:1b:47:e2:1d:19:0f:dc:5f:a4:1d:54:12:b8:9d: 42:cb:41:11:49:24:59:22:01:86:0c:62:af:08:20: 1d:b9:ed:71:e5:1f:1b:61:4d:e4:a1:28:dd:3c:bd: 05:13:cb:71:94:c3:47:fc:b3:c6:39:6b:be:59:20: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:F8:C8:C2:35:FB:EE:B4:87:CE:34:83:27:D4:4A:36:63:C5:48 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:61:a6:64:d9:94:5a:d5:18:1a:22:3b:2f:21:5a:44:90:3b: 6e:b3:a3:eb:52:68:16:b8:c8:b4:f2:8c:2d:75:a4:dd:9c:32: 3b:42:60:bf:82:77:84:e4:06:eb:2d:2a:a3:88:eb:c1:39:30: 9b:4e:58:db:b3:78:34:b0:e3:27:c2:1a:be:89:6f:19:a0:cd: 9d:7d:8c:18:54:59:f1:73:14:0f:4f:3f:63:11:a5:54:2e:14: 81:11:43:6e:65:d4:01:4a:ab:50:a3:79:55:4f:d3:39:8e:5f: 9a:6d:64:d6:03:7e:56:f6:f6:08:12:ec:9c:00:fd:ec:0d:20: be:8b:8f:b5:5a:1f:87:20:b2:4f:d7:04:4f:7d:f1:0b:23:cb: 22:92:7c:e3:f0:d9:6d:f4:6c:9e:6d:3f:81:a7:9f:00:49:50: f7:7e:28:cb:33:7b:2e:4f:bb:f7:de:30:cc:9f:a4:7f:24:13: 3b:55:3e:7d:14:9a:8b:fd:cb:02:e8:56:4a:65:d2:1f:7a:7b: ae:d5:ca:07:da:cc:63:d5:83:f7:2e:a6:6d:b4:1d:76:9c:6f: b1:b6:c7:69:02:44:bc:67:30:a9:89:b3:93:d8:58:25:a5:07: 92:6f:62:07:17:a0:82:73:70:70:e4:9c:86:d0:a1:99:87:05: ce:20:4a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUxMTAzMDQzNzUwWhcNMjUxMTEwMDQzNzUwWjAYMRYwFAYD VQQDEw02OTA4MzE5Zi04MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoLBfR8ZWPuZtXdpvdPoZZGPu5wRC0awfMkXaXp1WdrTlIG6dMFvAcvx0Fp4 FGQIThirXjkgCZBQ9ZrGz0rT+vAmeAYsRk/IUpuJoqK/LtdS0/rnTbo7ObcYCAdi MbMSKr6i9ua+Ugjca7jiZ5f5nvng8kJP1rylIZ/vwPrH1dVr1wuSuIcRQlIi9wDb Q6Z/1GLKqwJfUC7zr5z7yQHZIIvTNIsG4tOZt9tf2C3lOULtL0T62RcPHvfjMVnz mN+Ru5uZG0fiHRkP3F+kHVQSuJ1Cy0ERSSRZIgGGDGKvCCAdue1x5R8bYU3koSjd PL0FE8txlMNH/LPGOWu+WSBhpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT++MjC NfvutIfONIMn1Eo2Y8VIMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSYaZk2ZRa1RgaIjsvIVpEkDtus6PrUmgWuMi08owtdaTdnDI7QmC/ gneE5AbrLSqjiOvBOTCbTljbs3g0sOMnwhq+iW8ZoM2dfYwYVFnxcxQPTz9jEaVU LhSBEUNuZdQBSqtQo3lVT9M5jl+abWTWA35W9vYIEuycAP3sDSC+i4+1Wh+HILJP 1wRPffELI8siknzj8Nlt9GyebT+Bp58ASVD3fijLM3suT7v33jDMn6R/JBM7VT59 FJqL/csC6FZKZdIfenuu1coH2sxj1YP3LqZttB12nG+xtsdpAkS8ZzCpibOT2Fgl pQeSb2IHF6CCc3Bw5JyG0KGZhwXOIErM -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:44 2025 by rpki-client