$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: gsxktSzLvvp4XYvkDNi/JLBusi4H57bNy5ez5YL5kVk= Subject key identifier: 77:0E:A4:96:52:30:C9:EF:7D:5D:EA:36:39:20:46:81:1C:23:C4:40 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: 4F Signing time: Wed 05 Nov 2025 07:31:20 +0000 Manifest this update: Wed 05 Nov 2025 07:31:19 +0000 Manifest next update: Wed 12 Nov 2025 07:31:19 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: cbLRs7mRzcQsRn23XNjw9yrU2mQhQe3waO89BvLaCFo=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Nov 5 07:31:19 2025 GMT Not After : Nov 12 07:31:19 2025 GMT Subject: CN=690afd47-bc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:c4:ae:9a:dc:66:7c:00:81:9b:92:f5:8d: 40:db:bf:b8:c2:2d:c6:32:58:f4:2b:66:e2:89:10: fe:6d:7c:46:96:dd:ab:b5:a0:7a:9c:bb:f7:06:cb: 45:64:ff:7a:a7:61:0a:f4:7a:1e:24:25:82:50:5e: 12:f1:4b:db:eb:95:4a:8a:9a:09:a4:19:7d:cd:7f: 63:06:2c:07:e2:29:af:58:2c:3c:18:7b:7b:55:c5: 24:0c:a1:90:1b:d0:2c:20:f2:98:13:65:04:82:7a: c3:3c:2c:4c:50:ef:5f:de:be:ae:12:33:b6:a2:d7: 34:e9:a3:8d:b2:a2:60:d6:1f:43:65:9b:e5:80:62: 5d:26:d8:4a:31:f0:90:34:ba:ac:01:f4:f3:80:ba: 83:fa:ef:4e:f5:93:0a:6a:25:fb:80:62:ef:37:d6: d4:c3:fe:f7:8c:79:21:ad:1d:5c:3e:86:94:66:e2: 3b:ad:23:23:e4:4a:1a:7c:4c:b5:cd:fd:1e:7e:9b: 9e:67:d5:ed:bc:99:8c:4a:4b:ff:fe:cf:de:76:7b: dc:ea:d2:d4:3e:6e:1d:23:a6:ee:73:50:0c:f5:ab: 16:82:44:b2:81:63:9e:d8:d7:25:d6:fa:fb:8d:f5: e6:1d:5a:6f:64:3b:95:97:bb:b9:1c:61:28:0c:d3: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:A4:96:52:30:C9:EF:7D:5D:EA:36:39:20:46:81:1C:23:C4:40 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:67:c9:10:29:e9:0c:9d:02:ae:a1:7f:8f:40:80:94:8d:4d: 24:45:da:ac:6a:7c:8f:17:13:25:d2:5c:9a:cf:6a:6b:d8:2d: 06:b3:bb:fe:f7:21:fd:76:7f:1e:5c:06:e0:91:d7:52:60:c0: c5:24:1b:a4:7b:44:1e:62:b2:18:6e:01:e9:8e:ce:f4:a5:88: d6:c9:c0:ca:22:a0:6d:fd:09:1c:51:f8:44:69:31:31:c2:f7: ec:ae:f4:54:fa:5a:cf:4d:34:b5:f3:2b:b7:2a:b1:92:08:c6: bf:d9:c8:f2:c2:12:4c:d1:a8:a2:0d:6f:47:7c:e5:79:2e:4d: 8d:90:8a:1e:d7:95:8a:23:68:49:b9:e2:80:42:d6:45:be:0e: 4e:9b:35:73:b9:86:95:6a:80:ef:17:bd:57:1e:fe:36:d8:52: 46:a3:74:eb:1e:c7:b9:00:92:c3:12:05:52:ef:9f:e7:24:a7: 7f:e9:55:55:eb:a5:4e:16:4f:87:40:88:f1:cd:be:30:8d:31: bf:85:17:d3:a2:0c:82:2b:6f:65:7d:3f:41:3e:7d:f3:3a:54: ff:11:80:46:13:0e:e5:c9:12:f7:75:da:a5:a0:c2:e2:69:f0: 3a:6e:15:05:8d:4d:b1:44:94:2a:3f:93:f4:28:d1:3a:98:5b: df:01:79:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTExMDUwNzMxMTlaFw0yNTExMTIwNzMxMTlaMBgxFjAUBgNV BAMTDTY5MGFmZDQ3LWJjMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI4MSumtxmfACBm5L1jUDbv7jCLcYyWPQrZuKJEP5tfEaW3au1oHqcu/cGy0Vk /3qnYQr0eh4kJYJQXhLxS9vrlUqKmgmkGX3Nf2MGLAfiKa9YLDwYe3tVxSQMoZAb 0Cwg8pgTZQSCesM8LExQ71/evq4SM7ai1zTpo42yomDWH0Nlm+WAYl0m2Eox8JA0 uqwB9POAuoP67071kwpqJfuAYu831tTD/veMeSGtHVw+hpRm4jutIyPkShp8TLXN /R5+m55n1e28mYxKS//+z952e9zq0tQ+bh0jpu5zUAz1qxaCRLKBY57Y1yXW+vuN 9eYdWm9kO5WXu7kcYSgM02UlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdw6kllIw ye99Xeo2OSBGgRwjxEAwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 OUMyL0UzQTNERUU2NDhDODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pK X2g2UXRCMEdzTnU3ZTYway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxnyRAp6QydAq6hf49AgJSNTSRF2qxqfI8XEyXSXJrPamvYLQazu/73 If12fx5cBuCR11JgwMUkG6R7RB5ishhuAemOzvSliNbJwMoioG39CRxR+ERpMTHC 9+yu9FT6Ws9NNLXzK7cqsZIIxr/ZyPLCEkzRqKINb0d85XkuTY2Qih7XlYojaEm5 4oBC1kW+Dk6bNXO5hpVqgO8XvVce/jbYUkajdOsex7kAksMSBVLvn+ckp3/pVVXr pU4WT4dAiPHNvjCNMb+FF9OiDIIrb2V9P0E+ffM6VP8RgEYTDuXJEvd12qWgwuJp 8DpuFQWNTbFElCo/k/Qo0TqYW98BeUA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:13 2025 by rpki-client