$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: FEdWq+d2m9RE8jK9g1jjTvw4p1oMmh/KpDyxro6jLxs= Subject key identifier: C2:C4:74:34:BA:32:F7:1C:7B:33:8E:E6:80:9C:89:75:72:23:6D:0B Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D0B Signing time: Tue 04 Nov 2025 18:11:00 +0000 Manifest this update: Tue 04 Nov 2025 18:10:59 +0000 Manifest next update: Tue 11 Nov 2025 18:10:59 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: WoZJxOpVX2n2k7bk5RSZ0h14PDzm9B5ZjARGYcaefTM=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3373 (0xd2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Nov 4 18:10:59 2025 GMT Not After : Nov 11 18:10:59 2025 GMT Subject: CN=690a41b3-3df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:30:c7:62:e7:06:61:ff:3e:96:8a:62:bd:81: 1d:39:5f:45:85:d7:a1:63:3f:e9:4f:fb:8b:f3:48: 9a:5c:14:6a:30:d1:98:95:a4:06:c1:45:1e:59:a6: 77:a0:c2:57:58:f5:3b:1e:45:34:fa:22:6a:20:ca: 47:0e:35:d2:93:72:55:de:e0:99:bc:f6:18:5c:a6: 63:e0:da:ba:0b:7e:a7:c5:f9:27:86:4d:4c:91:32: fb:8a:d1:00:e6:18:83:21:02:53:ca:3a:86:f0:60: 5f:ea:f7:d7:e2:e8:2f:6e:82:f4:66:c4:fa:fa:02: fe:aa:f6:85:1e:41:4c:64:76:75:dd:eb:30:6d:22: 4a:08:7c:a4:79:4f:91:25:d8:11:32:07:7d:df:8d: cc:92:0a:04:86:57:8f:56:ba:c9:2c:72:fb:70:a8: 16:8f:4c:ef:7a:56:2a:55:9e:53:37:1b:9f:ef:dc: 92:e5:9c:bb:38:cb:4b:d1:c6:01:d9:55:34:88:21: 90:04:fd:17:ff:d6:4b:60:f3:14:05:15:e0:e9:a1: bf:13:18:d9:f6:00:05:5b:72:2c:74:db:b7:ef:b4: 98:9a:ff:35:67:20:19:c0:93:80:d9:9e:a2:6e:39: 12:87:c4:99:4e:04:07:57:10:d3:0b:3d:5b:68:df: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:74:34:BA:32:F7:1C:7B:33:8E:E6:80:9C:89:75:72:23:6D:0B X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:fd:b4:be:7b:0b:21:35:59:0f:dc:3d:26:8e:fd:04:cb:5c: 5f:55:40:8e:53:b5:27:5a:84:9c:b4:86:c3:2f:4c:44:69:36: 3c:78:66:fb:53:fc:14:41:ca:55:66:e4:f8:84:5a:25:9b:85: 9b:56:2e:df:9b:f3:0d:3e:d2:92:cf:a3:01:2d:26:88:8b:b9: aa:02:ae:a8:44:87:16:e0:9b:85:25:d8:1c:a7:42:e0:bd:4e: d2:a4:4a:9d:94:a8:06:5a:fd:c6:a2:12:40:bd:7c:fe:7e:56: ec:f8:cd:54:f5:04:7e:90:12:af:f1:c6:02:7b:f0:9d:13:2a: 1c:36:b4:01:a2:9b:97:09:9e:23:44:87:d7:de:f7:a9:7e:78: b8:0e:76:0f:55:6e:19:65:41:40:42:39:48:95:ae:59:2e:8c: ec:cc:96:d2:e8:d6:5f:2a:f8:89:95:f3:fa:7f:ee:89:69:ee: fc:c2:83:77:9a:48:b1:59:ce:43:ce:9e:ea:ba:ff:bf:b4:49: 86:ba:69:48:eb:a7:0f:c2:e9:c1:ce:69:ab:ae:dd:e0:ff:83: 3b:fc:b4:99:b6:01:18:91:ed:06:f3:08:ab:d8:d5:b9:50:05: 8a:7c:01:0d:72:55:88:67:6c:d0:4d:8a:7c:40:65:37:ee:60: f1:be:64:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMTA0MTgxMDU5WhcNMjUxMTExMTgxMDU5WjAYMRYwFAYD VQQDEw02OTBhNDFiMy0zZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TDHYucGYf8+lopivYEdOV9FhdehYz/pT/uL80iaXBRqMNGYlaQGwUUeWaZ3 oMJXWPU7HkU0+iJqIMpHDjXSk3JV3uCZvPYYXKZj4Nq6C36nxfknhk1MkTL7itEA 5hiDIQJTyjqG8GBf6vfX4ugvboL0ZsT6+gL+qvaFHkFMZHZ13eswbSJKCHykeU+R JdgRMgd9343MkgoEhlePVrrJLHL7cKgWj0zvelYqVZ5TNxuf79yS5Zy7OMtL0cYB 2VU0iCGQBP0X/9ZLYPMUBRXg6aG/ExjZ9gAFW3IsdNu377SYmv81ZyAZwJOA2Z6i bjkSh8SZTgQHVxDTCz1baN9lAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLEdDS6 MvccezOO5oCciXVyI20LMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ/bS+ewshNVkP3D0mjv0Ey1xfVUCOU7UnWoSctIbDL0xEaTY8eGb7 U/wUQcpVZuT4hFolm4WbVi7fm/MNPtKSz6MBLSaIi7mqAq6oRIcW4JuFJdgcp0Lg vU7SpEqdlKgGWv3GohJAvXz+flbs+M1U9QR+kBKv8cYCe/CdEyocNrQBopuXCZ4j RIfX3vepfni4DnYPVW4ZZUFAQjlIla5ZLozszJbS6NZfKviJlfP6f+6Jae78woN3 mkixWc5Dzp7quv+/tEmGumlI66cPwunBzmmrrt3g/4M7/LSZtgEYke0G8wir2NW5 UAWKfAENclWIZ2zQTYp8QGU37mDxvmQR -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:27 2025 by rpki-client