$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: dVFihKdMb2A7jHjEHqYMylimXPrxwb+KTWTCaH80rFs= Subject key identifier: 8B:F3:FA:11:0A:8B:B3:23:33:D8:8B:1D:3C:0F:D5:EC:64:53:5A:2A Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: E3 Signing time: Mon 03 Nov 2025 05:33:30 +0000 Manifest this update: Mon 03 Nov 2025 05:33:29 +0000 Manifest next update: Mon 10 Nov 2025 05:33:29 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: 5GglWJpi+E1zjdpcf8Mytk2t04t70qVrcBZOH2Zg6xY=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Nov 3 05:33:29 2025 GMT Not After : Nov 10 05:33:29 2025 GMT Subject: CN=69083eaa-d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:8b:22:8f:e4:18:7d:8c:7f:a0:c1:a8:9c: f4:d4:d4:37:7b:7e:1c:56:07:7c:27:2a:db:62:51: ef:58:37:7b:f4:39:6a:99:6a:cc:ea:f5:d4:4a:88: 7c:3d:2d:ef:d6:ef:c8:2d:7d:2e:5d:35:4d:22:fa: b4:f9:bd:b3:21:d8:78:aa:7c:30:58:7d:10:bd:26: 3d:42:f7:48:49:09:11:12:36:79:17:fc:f2:cc:07: 9a:d5:a5:bb:f1:a4:b5:38:b1:9f:6d:40:8f:df:c7: ae:05:17:2a:3d:31:b9:df:7a:2a:49:b8:c6:d0:97: 9c:03:ac:16:e7:dc:d0:d0:92:2f:15:00:e7:4a:25: 38:17:f0:f8:30:76:0d:cb:ae:a6:d7:de:2b:60:2b: 15:16:9f:34:7a:e0:cc:df:dc:71:a1:00:69:be:c7: 6f:ef:2f:c9:e2:59:62:c9:1f:fb:a5:4c:66:71:62: 6c:36:38:14:10:90:a3:3e:2a:55:80:ba:e0:35:36: e9:30:05:f7:8f:87:6f:f1:9b:48:07:aa:b5:ce:c2: 61:9e:5b:6f:fb:7d:2b:e6:82:f6:c5:5d:a9:8b:b5: 98:67:27:3b:f8:d9:ce:60:2c:ca:95:16:ce:4f:a8: f6:93:c1:79:a4:3f:d9:5d:4f:af:98:76:85:70:20: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:FA:11:0A:8B:B3:23:33:D8:8B:1D:3C:0F:D5:EC:64:53:5A:2A X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:04:2d:6a:3e:3a:de:55:b6:19:1a:96:09:5c:ad:8b:14:dd: 3b:8c:ae:fe:a3:96:96:c7:4e:8b:f9:38:90:61:af:05:f7:1c: be:19:dc:a6:84:22:52:64:a5:ec:54:4f:ae:0e:46:16:48:c8: 30:6e:32:23:c1:97:07:be:45:fe:7a:59:bb:17:1b:87:e8:ad: f9:80:4a:d0:66:9f:7c:7c:d2:b1:a2:48:e3:45:c2:fc:ac:d7: 2a:37:b9:23:5e:50:78:07:20:88:51:10:85:5d:d0:e7:2b:6d: f6:55:80:82:07:46:15:f7:6f:59:d7:08:95:2d:4d:21:25:c4: 17:0a:bb:f0:9b:0f:3f:f6:04:f1:f2:24:81:38:0e:35:b1:d5: cc:96:6c:70:62:db:e5:06:83:aa:f3:c4:70:64:96:11:94:e1: a8:45:4f:d5:a8:9a:68:0e:9c:bd:16:79:35:56:0c:ae:91:bf: 0c:b4:4f:78:59:18:02:af:26:38:d6:96:30:9c:34:20:2f:05: 2e:66:9c:d1:ba:5b:b5:18:d4:6e:d0:c5:8f:1f:d7:ba:29:18: 83:33:41:a7:70:13:71:03:fe:e4:a8:5c:eb:83:b9:dc:36:15: ec:42:2f:b9:dc:f8:8b:d9:b0:1d:2f:e9:50:d3:24:00:1b:0e: c4:87:68:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjUxMTAzMDUzMzI5WhcNMjUxMTEwMDUzMzI5WjAYMRYwFAYD VQQDEw02OTA4M2VhYS1kNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE6LIo/kGH2Mf6DBqJz01NQ3e34cVgd8JyrbYlHvWDd79DlqmWrM6vXUSoh8 PS3v1u/ILX0uXTVNIvq0+b2zIdh4qnwwWH0QvSY9QvdISQkREjZ5F/zyzAea1aW7 8aS1OLGfbUCP38euBRcqPTG533oqSbjG0JecA6wW59zQ0JIvFQDnSiU4F/D4MHYN y66m194rYCsVFp80euDM39xxoQBpvsdv7y/J4lliyR/7pUxmcWJsNjgUEJCjPipV gLrgNTbpMAX3j4dv8ZtIB6q1zsJhnltv+30r5oL2xV2pi7WYZyc7+NnOYCzKlRbO T6j2k8F5pD/ZXU+vmHaFcCC+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvz+hEK i7MjM9iLHTwP1exkU1oqMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGBC1qPjreVbYZGpYJXK2LFN07jK7+o5aWx06L+TiQYa8F9xy+Gdym hCJSZKXsVE+uDkYWSMgwbjIjwZcHvkX+elm7FxuH6K35gErQZp98fNKxokjjRcL8 rNcqN7kjXlB4ByCIURCFXdDnK232VYCCB0YV929Z1wiVLU0hJcQXCrvwmw8/9gTx 8iSBOA41sdXMlmxwYtvlBoOq88RwZJYRlOGoRU/VqJpoDpy9Fnk1Vgyukb8MtE94 WRgCryY41pYwnDQgLwUuZpzRulu1GNRu0MWPH9e6KRiDM0GncBNxA/7kqFzrg7nc NhXsQi+53PiL2bAdL+lQ0yQAGw7Eh2hX -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:34 2025 by rpki-client