$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: wwHBJlSrg8gbrFTh0tO05scqAbeuxubognwiic6AwLE= Subject key identifier: BA:F5:72:3E:1A:15:F9:3F:60:A2:9E:62:90:BD:E4:C6:1A:06:93:2E Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 0946 Signing time: Tue 04 Nov 2025 20:16:33 +0000 Manifest this update: Tue 04 Nov 2025 20:16:33 +0000 Manifest next update: Tue 11 Nov 2025 20:16:33 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: EtsY5KcF5nE71BIKBgeTncWHJBhGETJjDm7+yqJN3js=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Nov 4 20:16:33 2025 GMT Not After : Nov 11 20:16:33 2025 GMT Subject: CN=690a5f21-4865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d8:34:77:5e:5f:7a:b2:9b:6c:5d:c6:92:52: 92:94:cc:00:8c:42:1a:bc:57:25:27:76:4b:e5:85: cc:36:f5:28:7e:1a:3d:a4:0f:89:98:a9:2c:c7:a6: 4d:21:a4:98:75:60:f4:3c:b1:a0:37:1a:73:cd:79: 94:11:e8:22:f5:3c:03:1a:a4:85:8e:a8:56:82:c5: 14:c4:c9:4b:56:10:df:32:78:e7:ba:1a:df:a5:bd: ff:ad:e0:63:1b:2a:36:9e:2b:c9:6f:dc:0b:9a:81: 34:b4:8f:15:5a:83:1d:3d:e8:e8:fb:1e:75:49:2e: d6:7e:24:46:3e:64:4a:ea:c1:0a:1e:f6:1d:d7:ea: 17:d9:02:73:c5:04:68:37:39:c8:28:89:9e:5d:c0: eb:fe:e8:8b:f6:42:ff:c2:ad:1c:f5:d3:34:25:43: 41:54:a9:91:0b:66:81:5e:a3:7e:a3:07:16:b2:88: e1:b0:9f:59:bf:14:1d:41:91:99:70:84:01:85:ce: d0:59:2b:e8:97:69:a2:79:74:8e:73:84:e5:3c:82: cb:c9:dd:49:ba:22:e8:84:65:fe:22:89:38:bb:79: a0:14:66:93:95:68:e9:a0:16:c8:d0:11:e4:89:e9: 11:9b:a9:ca:60:41:95:ed:a1:df:02:17:18:0b:43: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:72:3E:1A:15:F9:3F:60:A2:9E:62:90:BD:E4:C6:1A:06:93:2E X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:76:f3:99:da:92:32:96:96:5b:4f:a4:d1:b0:ef:05:f2:54: 75:79:ab:85:fb:0d:d3:dd:c9:fe:47:79:1c:17:cf:24:93:72: b0:d4:70:87:9b:ba:1a:7b:95:06:05:47:8d:92:f2:28:a7:a0: d0:c1:35:67:c5:82:86:48:e8:59:9a:a2:9a:5c:70:f6:5a:88: 3d:a8:e3:fe:e3:a5:ab:48:c9:a7:e3:58:05:17:94:cc:92:fd: 85:b3:57:cc:50:a3:59:18:be:5a:2b:1b:a3:c9:2c:6a:d0:c8: 65:7d:6f:ce:f7:e3:f7:d9:86:83:d9:b6:2f:48:d9:6c:35:b0: 37:ba:51:91:15:9e:fb:be:d8:97:5e:df:2f:77:ea:0c:2d:ec: 46:13:06:da:96:3c:99:78:e8:e7:e1:9e:b5:c7:14:25:a3:1f: 78:82:d4:1a:2f:15:75:59:51:cd:fe:81:30:de:c0:39:b3:32: f5:fc:02:a5:07:f4:39:d0:e9:eb:fd:03:33:4f:03:e6:6f:ff: 2c:62:78:0b:4c:e0:5b:34:e4:81:54:e5:2f:89:3e:81:df:d4: 65:53:9e:f9:ff:11:2e:6c:93:ad:9c:aa:c5:0d:16:b2:79:cd: d3:cd:86:64:13:a5:5c:0e:fd:57:87:af:74:34:4f:a7:d4:40: d1:e5:13:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjUxMTA0MjAxNjMzWhcNMjUxMTExMjAxNjMzWjAYMRYwFAYD VQQDEw02OTBhNWYyMS00ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tg0d15ferKbbF3GklKSlMwAjEIavFclJ3ZL5YXMNvUofho9pA+JmKksx6ZN IaSYdWD0PLGgNxpzzXmUEegi9TwDGqSFjqhWgsUUxMlLVhDfMnjnuhrfpb3/reBj Gyo2nivJb9wLmoE0tI8VWoMdPejo+x51SS7WfiRGPmRK6sEKHvYd1+oX2QJzxQRo NznIKImeXcDr/uiL9kL/wq0c9dM0JUNBVKmRC2aBXqN+owcWsojhsJ9ZvxQdQZGZ cIQBhc7QWSvol2mieXSOc4TlPILLyd1JuiLohGX+Iok4u3mgFGaTlWjpoBbI0BHk iekRm6nKYEGV7aHfAhcYC0NKRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr1cj4a Ffk/YKKeYpC95MYaBpMuMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGdvOZ2pIylpZbT6TRsO8F8lR1eauF+w3T3cn+R3kcF88kk3Kw1HCH m7oae5UGBUeNkvIop6DQwTVnxYKGSOhZmqKaXHD2Wog9qOP+46WrSMmn41gFF5TM kv2Fs1fMUKNZGL5aKxujySxq0MhlfW/O9+P32YaD2bYvSNlsNbA3ulGRFZ77vtiX Xt8vd+oMLexGEwbaljyZeOjn4Z61xxQlox94gtQaLxV1WVHN/oEw3sA5szL1/AKl B/Q50Onr/QMzTwPmb/8sYngLTOBbNOSBVOUviT6B39RlU575/xEubJOtnKrFDRay ec3TzYZkE6VcDv1Xh690NE+n1EDR5RPr -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:38 2025 by rpki-client