$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: wYJ0A0+TI3nRGNBBuoKOgIH5FrEBh4B3lOwvBkiHQWY= Subject key identifier: BA:11:B0:1D:FE:06:06:97:B5:99:6B:17:64:10:5B:CD:ED:28:AF:FC Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0752 Signing time: Sun 02 Nov 2025 21:40:16 +0000 Manifest this update: Sun 02 Nov 2025 21:40:16 +0000 Manifest next update: Sun 09 Nov 2025 21:40:16 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: wzyBwEILWqK9eynCLmETUmTAgSmHE0ZYJgXtkTQn/4Y=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: qvspaedVSxXhNT9OPfm4dmWtO2TlaRcmc3pC2Y/603Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: Nov 2 21:40:16 2025 GMT Not After : Nov 9 21:40:16 2025 GMT Subject: CN=6907cfc0-9fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:fc:cb:d4:80:2b:13:bd:9c:e8:0c:ff:f7: 5a:7e:bb:0c:05:5f:fc:68:0f:6f:a1:7b:f0:a3:10: 2b:05:c0:97:96:86:9e:6d:fb:b7:07:b7:6e:a9:47: 63:3e:10:a3:9e:a8:bd:3c:2b:7d:d5:03:87:1f:f0: 77:bc:dd:00:75:21:fb:fb:75:57:74:36:60:91:64: 52:d8:08:38:91:03:56:7c:39:89:39:d4:cf:6d:dd: f6:ce:b2:1f:40:ff:2f:c5:50:95:c0:26:66:0a:ba: 4c:7b:f3:f5:05:42:77:64:5a:09:4d:ed:9d:cb:49: 74:ba:a9:0b:fb:2f:2b:98:c2:ff:d1:f0:3e:f1:2d: a4:8e:d5:ef:b6:50:b0:2b:75:2a:21:f0:47:b6:fb: e2:e8:7e:c4:6c:e7:9b:99:5a:5c:91:72:72:24:e8: b6:5f:30:0b:3f:69:71:28:d8:05:6d:95:3d:38:67: 33:85:f7:cd:98:15:3f:8f:3b:6e:7a:a5:f9:a6:62: c1:3a:1b:3e:63:c9:a6:9f:b5:90:18:3f:df:6d:4e: 8c:9e:7a:ca:45:33:be:5a:77:64:5d:58:d1:e2:13: 4d:26:6c:1c:cd:09:1b:1e:7b:52:a9:f7:4a:d6:6b: f1:c4:16:0c:4b:b1:1f:c2:83:f7:85:4d:c4:fd:34: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:B0:1D:FE:06:06:97:B5:99:6B:17:64:10:5B:CD:ED:28:AF:FC X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ab:7c:28:3b:74:eb:a1:4b:05:fd:5d:56:1f:f7:50:9c:e4: 92:93:23:e3:25:36:43:f8:84:78:e5:e5:76:5c:c1:13:f1:29: 0a:ba:ac:41:b8:db:90:a1:ff:cd:63:d5:56:78:e4:37:80:6f: d2:2a:eb:68:63:20:1a:bc:c8:a8:00:4c:30:02:da:a3:11:ac: cd:17:83:96:4c:b1:57:b4:08:ef:b3:f7:39:ca:7c:62:3d:23: 9b:c5:db:c4:f2:99:f0:c9:0f:a9:e5:d2:9f:85:c5:17:29:0d: f1:e5:e5:84:19:97:8b:96:04:db:98:d2:74:31:e3:b0:ba:03: d6:a6:32:e9:df:67:f3:89:1f:12:6c:46:36:04:cb:f8:92:73: ba:cc:92:1d:40:a7:b5:89:a7:34:17:b3:10:b5:9b:57:0f:fe: 11:1a:d2:09:e4:80:63:04:17:35:3a:26:68:90:72:d6:5e:e3: 83:8d:8e:f3:52:f5:e2:b2:87:5c:9c:b2:e4:54:a4:f8:1f:42: a8:0f:f1:d7:ad:51:b5:f2:ed:fe:db:46:01:67:5a:40:11:c4: 9c:ed:00:a4:34:2e:fa:2d:d5:bf:f1:4f:40:1f:6f:df:cf:e3: a1:b9:3c:23:28:a1:a0:28:0b:3c:0e:e0:e8:53:50:c4:ae:2a: e8:4e:de:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUxMTAyMjE0MDE2WhcNMjUxMTA5MjE0MDE2WjAYMRYwFAYD VQQDEw02OTA3Y2ZjMC05ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqr8y9SAKxO9nOgM//dafrsMBV/8aA9voXvwoxArBcCXloaebfu3B7duqUdj PhCjnqi9PCt91QOHH/B3vN0AdSH7+3VXdDZgkWRS2Ag4kQNWfDmJOdTPbd32zrIf QP8vxVCVwCZmCrpMe/P1BUJ3ZFoJTe2dy0l0uqkL+y8rmML/0fA+8S2kjtXvtlCw K3UqIfBHtvvi6H7EbOebmVpckXJyJOi2XzALP2lxKNgFbZU9OGczhffNmBU/jztu eqX5pmLBOhs+Y8mmn7WQGD/fbU6MnnrKRTO+WndkXVjR4hNNJmwczQkbHntSqfdK 1mvxxBYMS7EfwoP3hU3E/TQSuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoRsB3+ BgaXtZlrF2QQW83tKK/8MB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIq3woO3TroUsF/V1WH/dQnOSSkyPjJTZD+IR45eV2XMET8SkKuqxB uNuQof/NY9VWeOQ3gG/SKutoYyAavMioAEwwAtqjEazNF4OWTLFXtAjvs/c5ynxi PSObxdvE8pnwyQ+p5dKfhcUXKQ3x5eWEGZeLlgTbmNJ0MeOwugPWpjLp32fziR8S bEY2BMv4knO6zJIdQKe1iac0F7MQtZtXD/4RGtIJ5IBjBBc1OiZokHLWXuODjY7z UvXisodcnLLkVKT4H0KoD/HXrVG18u3+20YBZ1pAEcSc7QCkNC76LdW/8U9AH2/f z+OhuTwjKKGgKAs8DuDoU1DEriroTt46 -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:54 2025 by rpki-client