$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: 5gBaPmScWmBFntLQW045LeyVoP6wvPauNGHK/BMAGt0= Subject key identifier: 8D:24:31:CF:A2:AA:58:57:09:AE:58:6B:0C:46:2F:03:A2:C1:E3:7B Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 07:09:22 +0000 Manifest this update: Mon 03 Nov 2025 07:09:22 +0000 Manifest next update: Mon 10 Nov 2025 07:09:22 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: OArxLYU7qPjmGlt5K41stCt7zGagn7xl13RkHTYDZAI=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Nov 3 07:09:22 2025 GMT Not After : Nov 10 07:09:22 2025 GMT Subject: CN=69085522-3848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:ad:33:a5:8d:1b:36:7f:9c:c5:d2:41:15: f4:5f:e0:1d:21:b6:0b:ec:a1:ea:a5:ab:78:e1:1e: 72:2c:39:b2:90:84:e6:3c:b4:14:d5:10:dc:d2:c3: 7b:6f:b4:58:4b:c5:65:80:13:75:e0:33:c2:96:24: 6c:b0:6e:74:26:0d:ac:ab:1d:c3:2a:72:de:93:d3: 32:72:cc:d9:d1:8b:3f:ca:c2:b9:e6:bd:5e:ad:e9: 86:24:29:00:87:1c:65:1c:96:74:f4:97:4d:f1:37: dd:cd:1f:55:fd:98:16:02:d0:df:8c:e1:c2:44:cb: 51:97:2e:be:c4:de:34:86:92:7e:a5:71:dc:69:5f: c0:8e:ba:3a:0e:b4:60:03:3f:86:af:51:f3:7c:5f: 9d:7e:db:bf:13:2b:07:23:82:97:c6:4b:97:22:13: a4:64:31:d1:85:fc:29:b0:29:db:5e:7e:83:cc:b4: e3:54:e4:2d:5d:45:24:43:d2:fb:1b:e6:26:ae:fa: cf:78:96:9b:f2:86:36:64:f4:79:80:38:97:de:02: 9c:da:f6:d2:5f:b4:00:d8:71:e0:17:54:0e:9d:5a: 71:a6:a3:9f:c1:4b:94:f8:1c:98:80:7e:5f:7c:a1: a5:ed:c0:d8:55:e1:5f:21:78:8c:1b:6c:1a:9c:ac: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:31:CF:A2:AA:58:57:09:AE:58:6B:0C:46:2F:03:A2:C1:E3:7B X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:14:a5:0e:d4:aa:c5:f4:75:ad:6c:81:97:8a:88:c8:f9:2d: ec:ff:06:65:2f:53:7c:66:f4:23:fc:e3:9b:67:54:6c:2f:eb: 70:2a:7c:9b:a1:e9:9c:0b:6b:82:a7:e6:87:af:2d:d7:9a:54: 9e:98:9f:36:ee:48:e4:00:21:38:af:93:3d:66:68:ca:17:0d: 60:e2:ea:04:a0:12:1f:c3:86:2f:96:64:c5:df:b4:9d:d2:6c: c9:a8:31:9a:c0:4d:6b:a8:90:10:1c:cd:14:20:8a:46:15:21: b1:6a:91:a0:85:88:d8:d4:ee:5d:7f:b8:c3:bd:57:ca:f8:76: d9:c9:c6:17:0e:fe:59:1a:d0:ea:02:c3:e4:45:d5:bb:5f:48: 54:b6:3a:32:f8:f8:26:a9:7b:07:98:fa:ea:63:c6:36:0b:42: 7d:e7:2c:5d:ed:a8:93:2f:ff:b9:17:e9:fa:2e:c3:71:16:41: 6d:3f:d6:1d:57:49:54:e4:d9:00:15:49:7b:d9:cb:e2:c9:78: d4:41:11:fb:c8:0d:1e:e0:e3:9c:19:57:58:c6:9c:28:f8:f5: 07:32:9f:e7:44:4b:5c:ed:9a:f0:42:96:bc:80:21:1d:56:28: b2:0f:36:2e:6c:4d:51:20:c1:a8:f8:0c:1a:cb:3a:f0:6f:27: f1:27:42:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTExMDMwNzA5MjJaFw0yNTExMTAwNzA5MjJaMBgxFjAUBgNV BAMTDTY5MDg1NTIyLTM4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE2a0zpY0bNn+cxdJBFfRf4B0htgvsoeqlq3jhHnIsObKQhOY8tBTVENzSw3tv tFhLxWWAE3XgM8KWJGywbnQmDayrHcMqct6T0zJyzNnRiz/KwrnmvV6t6YYkKQCH HGUclnT0l03xN93NH1X9mBYC0N+M4cJEy1GXLr7E3jSGkn6lcdxpX8COujoOtGAD P4avUfN8X51+278TKwcjgpfGS5ciE6RkMdGF/CmwKdtefoPMtONU5C1dRSRD0vsb 5iau+s94lpvyhjZk9HmAOJfeApza9tJftADYceAXVA6dWnGmo5/BS5T4HJiAfl98 oaXtwNhV4V8heIwbbBqcrIDdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjSQxz6Kq WFcJrlhrDEYvA6LB43swHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4UpQ7UqsX0da1sgZeKiMj5Lez/BmUvU3xm9CP845tnVGwv63AqfJuh 6ZwLa4Kn5oevLdeaVJ6YnzbuSOQAITivkz1maMoXDWDi6gSgEh/Dhi+WZMXftJ3S bMmoMZrATWuokBAczRQgikYVIbFqkaCFiNjU7l1/uMO9V8r4dtnJxhcO/lka0OoC w+RF1btfSFS2OjL4+CapeweY+upjxjYLQn3nLF3tqJMv/7kX6fouw3EWQW0/1h1X SVTk2QAVSXvZy+LJeNRBEfvIDR7g45wZV1jGnCj49Qcyn+dES1ztmvBClryAIR1W KLIPNi5sTVEgwaj4DBrLOvBvJ/EnQlo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:23 2025 by rpki-client