$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: 1/kr6h2o5JX+CwFCTuRnqaV5rAWUkJObJ8K+j/rFWnE= Subject key identifier: 8D:9F:39:5D:23:78:5B:FB:1B:11:67:22:04:7B:B2:3D:BC:17:F5:84 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 04:43:08 +0000 Manifest this update: Mon 03 Nov 2025 04:43:07 +0000 Manifest next update: Mon 10 Nov 2025 04:43:07 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: uiV753K3kqyCMVhg9OkduwewrHCSKy5OuyegOpYssDA=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Nov 3 04:43:07 2025 GMT Not After : Nov 10 04:43:07 2025 GMT Subject: CN=690832dc-726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:7c:9b:63:94:6c:0f:41:95:10:0a:a2:e0: 71:5b:1e:f9:b2:35:7e:fe:6d:66:e4:5a:2c:1c:f7: 20:85:b0:ae:3b:cd:e0:5f:0c:ce:19:37:26:06:9a: 3a:ce:6b:d1:dd:10:29:dd:49:f9:dc:23:b6:fa:56: a6:9d:e5:99:16:58:9d:ce:2e:c1:d7:e4:10:e3:c5: b0:dc:8c:bd:f9:06:00:2e:fa:2c:b0:90:e4:9b:bd: 5e:6f:45:04:c6:7f:c9:ef:25:9d:8e:82:85:e3:ca: 89:55:60:19:09:da:69:f1:d7:d9:fb:d2:e2:4c:7c: d0:4a:09:77:fc:cb:4f:60:49:25:74:59:02:51:4e: 1c:7e:e3:80:12:3e:f5:19:0c:2e:ad:40:96:77:7e: 48:3b:c9:44:db:e8:b7:ff:d7:33:5c:18:de:7a:34: b2:d7:a4:17:b7:cc:f0:b0:64:c3:e3:5b:6d:e1:8b: 03:0f:dc:a8:e3:1b:c4:57:28:79:f2:33:be:48:64: 2a:bb:14:3c:fb:8b:c5:0d:ca:31:d6:11:fd:be:6d: 64:3a:93:c1:77:d4:b2:6f:a5:c9:2e:39:58:fd:93: 06:ab:28:5c:0f:52:f7:fb:10:62:96:e2:5f:e7:a7: ba:c8:7f:13:96:26:f6:b6:ca:ef:06:3d:07:b6:4d: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:39:5D:23:78:5B:FB:1B:11:67:22:04:7B:B2:3D:BC:17:F5:84 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4c:ad:c4:d9:81:75:dc:10:5d:c3:25:31:cf:4e:b1:4f:8c: b4:f2:fe:78:5e:58:ff:8d:aa:2a:64:c2:bc:58:04:10:a7:16: 3d:8a:3a:2e:19:90:49:12:3f:96:e1:88:79:73:0e:6f:19:d5: b9:7d:a6:57:57:c2:eb:45:c4:5d:6c:2e:14:80:6f:81:94:13: f6:d5:25:77:38:27:0b:e9:02:d7:60:69:c6:90:a5:ef:1a:44: eb:12:96:be:78:6d:a2:81:ae:24:51:52:70:c2:1e:d5:7f:c1: d8:5f:4a:dc:64:21:6f:22:8b:01:07:f1:51:00:a6:55:74:72: a1:8e:4c:1b:7e:9d:7c:4b:29:4b:a8:09:90:52:66:e0:81:94: e9:da:3d:8f:62:9c:57:b8:ed:fe:79:04:d2:5b:6d:b0:b7:49: 58:9d:74:37:63:46:a2:5c:81:44:79:2a:ca:6e:5a:03:e0:b3: 0b:d5:35:44:e8:e2:27:11:55:b5:49:fc:3d:b1:f2:6e:d6:88: 0f:7a:c2:8d:33:c7:cd:7e:08:e6:1c:84:95:ac:be:a8:17:ce: a2:4b:d2:02:31:03:b2:c1:74:d8:28:58:23:51:06:d9:66:4d: 7c:10:35:fa:38:a7:21:32:a9:23:ba:e4:51:f2:a3:24:26:84: 86:82:ca:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUxMTAzMDQ0MzA3WhcNMjUxMTEwMDQ0MzA3WjAYMRYwFAYD VQQDEw02OTA4MzJkYy03MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BB8m2OUbA9BlRAKouBxWx75sjV+/m1m5FosHPcghbCuO83gXwzOGTcmBpo6 zmvR3RAp3Un53CO2+lamneWZFlidzi7B1+QQ48Ww3Iy9+QYALvossJDkm71eb0UE xn/J7yWdjoKF48qJVWAZCdpp8dfZ+9LiTHzQSgl3/MtPYEkldFkCUU4cfuOAEj71 GQwurUCWd35IO8lE2+i3/9czXBjeejSy16QXt8zwsGTD41tt4YsDD9yo4xvEVyh5 8jO+SGQquxQ8+4vFDcox1hH9vm1kOpPBd9Syb6XJLjlY/ZMGqyhcD1L3+xBiluJf 56e6yH8Tlib2tsrvBj0Htk2sAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2fOV0j eFv7GxFnIgR7sj28F/WEMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzTK3E2YF13BBdwyUxz06xT4y08v54Xlj/jaoqZMK8WAQQpxY9ijou GZBJEj+W4Yh5cw5vGdW5faZXV8LrRcRdbC4UgG+BlBP21SV3OCcL6QLXYGnGkKXv GkTrEpa+eG2iga4kUVJwwh7Vf8HYX0rcZCFvIosBB/FRAKZVdHKhjkwbfp18SylL qAmQUmbggZTp2j2PYpxXuO3+eQTSW22wt0lYnXQ3Y0aiXIFEeSrKbloD4LML1TVE 6OInEVW1Sfw9sfJu1ogPesKNM8fNfgjmHISVrL6oF86iS9ICMQOywXTYKFgjUQbZ Zk18EDX6OKchMqkjuuRR8qMkJoSGgsqF -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:13 2025 by rpki-client