$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: bNCibtulj4BzqiCVV3KaDYKltkftfwTRmJ5BXv2ux4k= Subject key identifier: 0C:10:48:5E:A1:DA:BF:E3:87:21:48:A4:F1:D5:1C:66:CF:79:79:5F Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 08DE Signing time: Tue 04 Nov 2025 20:29:34 +0000 Manifest this update: Tue 04 Nov 2025 20:29:33 +0000 Manifest next update: Tue 11 Nov 2025 20:29:33 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: PSROP7DUFuGu1+z4yI7p5dlHsKveq9auXuGvbecyA94=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: PLkHHx8GaTekc9dmC5heFwXjJ3zz86/8Y8QSgJQ+mrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Nov 4 20:29:33 2025 GMT Not After : Nov 11 20:29:33 2025 GMT Subject: CN=690a622d-84d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:98:1b:25:c8:e4:45:9b:ad:ad:98:b1:1b: 02:e9:18:51:fb:f3:ba:61:2d:19:96:ba:ad:19:99: ce:2c:7e:29:91:5a:b6:e8:5e:11:2d:09:cc:e0:4c: 87:06:99:ab:13:93:3e:73:f0:0e:9a:b8:a2:38:18: ee:3c:c3:14:06:ae:f3:ec:16:3d:72:f0:78:66:33: 3a:58:1e:64:7d:94:25:f3:1a:6d:2b:a4:f5:32:ad: 1b:2e:a8:8d:9e:48:83:6a:11:f7:aa:ef:a1:88:b4: 94:6c:cc:40:1b:04:5e:11:c9:85:f1:f5:bb:92:b9: 33:a2:6f:cc:31:ef:69:5b:ec:c4:7b:b8:a8:2a:95: 2e:be:21:83:ec:36:90:8a:c4:23:d7:58:14:b0:83: 9e:9b:10:1c:b3:65:79:17:be:5a:69:ab:eb:9f:25: bf:aa:b3:71:c5:e5:4a:1e:53:74:87:eb:2f:77:fc: 86:13:dd:41:ba:23:fa:76:3f:e7:f5:60:1d:9d:78: a4:73:d0:dd:af:22:fa:53:34:9c:97:20:47:e7:2e: 83:c4:f5:dc:f1:9b:3e:9b:16:0a:da:36:b3:44:f6: 71:ec:cb:b9:de:40:cf:e3:b2:64:ef:49:d5:cd:5f: c7:32:c3:fe:91:fe:6b:7b:f0:48:68:3e:e9:4c:61: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:48:5E:A1:DA:BF:E3:87:21:48:A4:F1:D5:1C:66:CF:79:79:5F X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ea:11:7b:0b:40:30:8f:5f:e6:79:fb:07:b3:ad:a1:7f:48: eb:6f:81:b2:25:0f:36:a0:f2:03:13:77:f5:1c:0b:57:8d:c9: 73:c5:f5:f9:a0:9b:db:a7:ae:a4:f6:41:4e:a4:2e:c6:04:8a: 2e:86:26:ad:89:25:08:e7:09:d3:7a:da:d6:48:5a:92:bd:28: fd:05:41:fd:05:e1:f0:09:d6:61:16:b6:21:6f:0e:a0:fc:d7: 12:d1:13:60:3d:ce:df:32:f9:e3:9a:0e:bb:3a:5c:27:12:0f: 89:8b:e3:bc:02:c6:4f:89:c7:c4:e1:68:d5:f9:22:9b:ad:f9: 7b:b0:49:a9:07:93:20:fd:5e:27:de:d7:0f:2b:ca:0f:d1:82: fd:e2:bc:08:de:8f:8a:5e:b6:a2:9e:f6:18:49:1a:78:5f:1a: ad:7c:b8:0d:7e:a9:5f:b0:3d:9f:38:8c:c2:77:9d:56:d6:70: 6a:b7:13:d5:5d:59:67:56:36:25:44:cf:85:22:76:e4:e2:b5: 05:9e:6e:2e:0d:8f:dd:32:c2:36:a4:6a:18:7b:9b:ea:40:c6: 5f:d4:33:fa:79:33:20:cd:43:a4:8b:7a:f4:2d:be:29:85:c8: 42:a3:c1:d3:27:cf:a5:f9:61:9e:15:b0:e0:45:e8:ac:cc:8f: f9:2a:63:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUxMTA0MjAyOTMzWhcNMjUxMTExMjAyOTMzWjAYMRYwFAYD VQQDEw02OTBhNjIyZC04NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2OYGyXI5EWbra2YsRsC6RhR+/O6YS0ZlrqtGZnOLH4pkVq26F4RLQnM4EyH BpmrE5M+c/AOmriiOBjuPMMUBq7z7BY9cvB4ZjM6WB5kfZQl8xptK6T1Mq0bLqiN nkiDahH3qu+hiLSUbMxAGwReEcmF8fW7krkzom/MMe9pW+zEe7ioKpUuviGD7DaQ isQj11gUsIOemxAcs2V5F75aaavrnyW/qrNxxeVKHlN0h+svd/yGE91BuiP6dj/n 9WAdnXikc9DdryL6UzSclyBH5y6DxPXc8Zs+mxYK2jazRPZx7Mu53kDP47Jk70nV zV/HMsP+kf5re/BIaD7pTGFASwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwQSF6h 2r/jhyFIpPHVHGbPeXlfMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm6hF7C0Awj1/mefsHs62hf0jrb4GyJQ82oPIDE3f1HAtXjclzxfX5 oJvbp66k9kFOpC7GBIouhiatiSUI5wnTetrWSFqSvSj9BUH9BeHwCdZhFrYhbw6g /NcS0RNgPc7fMvnjmg67OlwnEg+Ji+O8AsZPicfE4WjV+SKbrfl7sEmpB5Mg/V4n 3tcPK8oP0YL94rwI3o+KXrainvYYSRp4XxqtfLgNfqlfsD2fOIzCd51W1nBqtxPV XVlnVjYlRM+FInbk4rUFnm4uDY/dMsI2pGoYe5vqQMZf1DP6eTMgzUOki3r0Lb4p hchCo8HTJ8+l+WGeFbDgReiszI/5KmMr -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:09 2025 by rpki-client