$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: zf0xqIMmQJmm9Wdv49FEgclQtSMQUkNex38unPDHMS4= Subject key identifier: AD:EB:4B:49:48:0B:8D:C0:1B:58:18:B6:6D:FA:8B:E7:C8:0F:56:33 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 02B9 Signing time: Wed 05 Nov 2025 01:32:24 +0000 Manifest this update: Wed 05 Nov 2025 01:32:24 +0000 Manifest next update: Wed 12 Nov 2025 01:32:24 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: KeHxGPHRVA3jfslCV0hU7UjbURZw/K3vFmeey2RpORk=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: J9pQDV5DOJjkhb+4B/qx3A8bnj3R3w4sok+Lo0s4MxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Nov 5 01:32:24 2025 GMT Not After : Nov 12 01:32:24 2025 GMT Subject: CN=690aa928-4ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:29:0f:14:be:fc:6d:4f:80:fe:5b:e2:2e:df: e0:cf:b3:ba:86:ca:83:77:fb:73:09:13:fb:70:3b: ad:fd:a6:07:6e:42:f3:ee:51:3e:97:40:c7:92:da: 8f:ce:fc:cd:d2:6b:88:00:a5:a6:cf:94:ca:1d:b1: 00:02:5d:4d:64:b1:49:99:f0:0e:83:5c:8b:28:0d: 32:6b:bd:5d:1b:37:69:0d:c3:46:45:46:d1:39:6f: 00:0a:ec:da:d4:08:45:37:e5:6c:5c:62:0c:85:cc: 72:f1:d7:03:f3:92:9f:7b:df:c1:c2:dc:e1:e3:91: e8:b2:52:7b:4a:ac:6b:65:fa:a1:0e:24:59:d3:bb: ed:9e:67:92:78:21:ce:fb:49:b6:27:a0:34:7a:c6: 50:62:4e:cf:37:ea:43:bf:43:24:70:28:81:c2:9a: b0:11:7d:59:f0:bc:b2:44:ea:a3:ac:2c:c7:db:54: 42:42:d5:f5:31:96:cc:57:cc:81:72:e1:52:2b:11: 75:42:93:36:8e:5b:55:fa:a1:b6:99:04:2c:8f:c2: 24:d1:3b:b2:4b:59:17:33:ed:e9:1b:d7:7b:41:3d: 13:9a:09:e6:f8:b5:47:4e:60:79:e2:11:fa:2c:e0: aa:87:c0:f0:4b:d0:dd:be:7a:ee:b1:38:f2:9f:05: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EB:4B:49:48:0B:8D:C0:1B:58:18:B6:6D:FA:8B:E7:C8:0F:56:33 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4b:36:00:48:3a:d8:42:8a:c5:82:65:a1:fb:b2:e1:81:4c: d9:ba:66:6b:90:9e:de:6a:79:ad:36:3c:0f:4e:bc:91:42:1a: df:c2:a9:f1:e0:28:d8:d1:f9:37:06:36:c2:23:1b:71:4d:4c: cd:21:dc:4e:d0:10:0b:34:fb:c7:28:dc:ff:20:8e:0b:1a:83: bf:18:5e:eb:0e:94:f3:1c:7b:a4:80:16:3d:4f:29:5b:2b:3f: e4:e0:c2:05:07:ac:c2:90:a7:83:dd:90:0d:e5:ca:2e:aa:33: b2:74:e2:24:6b:d9:d2:ac:e7:bc:7c:45:96:43:40:a8:9a:15: 1a:ae:df:15:c5:b2:c5:5d:50:29:3f:e9:4d:a3:f2:98:f7:2b: 42:d6:e2:5d:73:88:16:bf:9e:4f:54:bc:89:c6:09:cb:ea:ee: 0a:f8:2c:f5:f7:b9:e6:35:a1:e5:0a:41:2d:69:5d:e8:b6:de: 92:78:69:be:95:0b:0e:a4:69:22:f9:29:72:c8:86:13:2e:84: 51:81:29:bb:a6:b0:44:ca:e6:93:ca:34:98:46:6b:28:23:6a: 89:a9:ee:84:76:f3:65:2e:d5:28:80:2d:26:bd:2a:fd:de:54: f6:37:8c:5d:da:ab:d7:c3:f9:14:b3:57:46:d1:50:f8:cb:ab: 53:75:87:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUxMTA1MDEzMjI0WhcNMjUxMTEyMDEzMjI0WjAYMRYwFAYD VQQDEw02OTBhYTkyOC00YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ykPFL78bU+A/lviLt/gz7O6hsqDd/tzCRP7cDut/aYHbkLz7lE+l0DHktqP zvzN0muIAKWmz5TKHbEAAl1NZLFJmfAOg1yLKA0ya71dGzdpDcNGRUbROW8ACuza 1AhFN+VsXGIMhcxy8dcD85Kfe9/Bwtzh45HoslJ7SqxrZfqhDiRZ07vtnmeSeCHO +0m2J6A0esZQYk7PN+pDv0MkcCiBwpqwEX1Z8LyyROqjrCzH21RCQtX1MZbMV8yB cuFSKxF1QpM2jltV+qG2mQQsj8Ik0TuyS1kXM+3pG9d7QT0Tmgnm+LVHTmB54hH6 LOCqh8DwS9DdvnrusTjynwUsEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3rS0lI C43AG1gYtm36i+fID1YzMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSzYASDrYQorFgmWh+7LhgUzZumZrkJ7eanmtNjwPTryRQhrfwqnx 4CjY0fk3BjbCIxtxTUzNIdxO0BALNPvHKNz/II4LGoO/GF7rDpTzHHukgBY9Tylb Kz/k4MIFB6zCkKeD3ZAN5couqjOydOIka9nSrOe8fEWWQ0ComhUart8VxbLFXVAp P+lNo/KY9ytC1uJdc4gWv55PVLyJxgnL6u4K+Cz197nmNaHlCkEtaV3ott6SeGm+ lQsOpGki+SlyyIYTLoRRgSm7prBEyuaTyjSYRmsoI2qJqe6EdvNlLtUogC0mvSr9 3lT2N4xd2qvXw/kUs1dG0VD4y6tTdYca -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:15 2025 by rpki-client