$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: 8/+mePy4G/o9WVBxe7mEWRtSyQMXRMhCIjQIoIzXfRU= Subject key identifier: 0F:4F:6B:DE:C3:55:61:18:FE:24:A3:5C:8E:7F:A5:6E:95:C2:3F:37 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 39 Signing time: Mon 03 Nov 2025 07:37:48 +0000 Manifest this update: Mon 03 Nov 2025 07:37:48 +0000 Manifest next update: Mon 10 Nov 2025 07:37:47 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: QQ735F1AOztWEXY7BiEkq6+MCsgJQu2Cdv4jG+i/3Oc=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: 9Zb0Av6EsVPUvpAr5Wo6+2kZEuOjOMIuyYuVnzvL3ro=) 3: 44C226F2A5B111F095806166C4F9AE02.roa (hash: Z5IARCPdVB3zQ2o9DruEtHimglf8XZQg6KsX+TluqNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Nov 3 07:37:48 2025 GMT Not After : Nov 10 07:37:47 2025 GMT Subject: CN=69085bcc-4fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:32:4b:fe:ed:ac:81:14:a2:b0:4f:00:7d: 3a:53:78:72:dd:e3:2b:64:c3:5c:39:7b:71:b5:78: 3b:c6:da:f8:28:5a:3b:0f:f8:13:09:9c:96:74:b6: 9f:9f:87:65:16:50:a1:a7:33:47:89:99:b8:39:66: c6:ca:7d:a7:d1:81:a0:ae:d1:2a:81:ba:7a:5f:80: 90:10:a5:82:ca:bc:c1:05:0a:82:90:ed:29:0f:b9: 88:82:98:0c:85:9f:15:27:a3:8f:7c:0f:6f:30:12: 3d:d0:c5:9c:95:42:7f:52:1b:5f:6c:04:be:77:86: 40:06:0a:bb:ca:03:e4:ff:9a:23:27:76:48:08:47: f4:8b:2d:d2:35:7a:8e:83:55:5d:68:9a:ee:75:99: 6a:e0:ba:39:43:c8:de:03:0c:03:6a:da:ef:5b:c7: 99:ac:dc:45:05:81:55:20:56:f9:5c:0a:df:49:1b: e0:1b:2c:33:16:41:7b:bb:a3:f1:1e:05:0a:c5:87: b3:0d:18:4f:af:4f:ba:97:04:20:3b:1f:b3:92:38: 34:b1:a6:6a:5f:3d:2b:3c:dd:81:da:4d:04:e4:29: 7c:e4:29:e0:e8:4b:aa:29:0d:1c:ce:d5:e0:30:9c: 79:95:0e:27:17:58:a5:58:91:4a:2e:9e:32:5f:99: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4F:6B:DE:C3:55:61:18:FE:24:A3:5C:8E:7F:A5:6E:95:C2:3F:37 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7d:3a:16:bd:49:6b:8d:0b:d2:2c:cd:d2:c8:56:0c:f2:b1: a1:ea:86:6e:d7:61:75:df:5f:77:6c:ea:f5:21:fd:92:17:0a: 12:a9:fb:7f:1d:aa:0c:ca:0f:de:7d:05:51:99:59:73:61:0e: 49:0b:7d:80:af:51:a0:69:28:fb:58:81:4e:98:ce:82:78:eb: 39:52:97:c7:8b:13:c6:03:84:15:3b:f0:f4:95:44:e1:8a:1a: 01:22:34:e8:5e:13:ff:c4:aa:ef:95:1a:98:ea:66:15:ba:c2: ef:52:22:a8:2e:56:44:0f:3a:04:1e:77:7d:be:b9:3f:76:49: 5a:a9:20:86:19:a0:a4:80:d3:86:4f:cf:a7:7c:0a:71:b9:a3: 4b:5b:67:a1:5f:06:09:f7:69:91:fc:84:12:b9:57:30:ba:af: c3:0a:7f:6e:30:2b:97:c8:f6:c1:e8:34:dc:9e:05:6e:af:c8: 9c:be:a5:66:cf:5c:64:52:ee:a7:e7:2a:26:23:e1:48:34:3a: 7a:76:63:e7:b1:0c:01:3f:4a:cb:16:d5:3f:4d:e3:ef:25:6f: 16:49:95:0a:2a:55:6f:9a:6b:13:16:a6:48:b3:c2:d3:4d:92: b1:e6:b2:43:e1:2b:5c:cd:77:92:32:16:cb:bb:82:79:02:f3: 9d:be:30:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNTExMDMwNzM3NDhaFw0yNTExMTAwNzM3NDdaMBgxFjAUBgNV BAMTDTY5MDg1YmNjLTRmYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVuTJL/u2sgRSisE8AfTpTeHLd4ytkw1w5e3G1eDvG2vgoWjsP+BMJnJZ0tp+f h2UWUKGnM0eJmbg5ZsbKfafRgaCu0SqBunpfgJAQpYLKvMEFCoKQ7SkPuYiCmAyF nxUno498D28wEj3QxZyVQn9SG19sBL53hkAGCrvKA+T/miMndkgIR/SLLdI1eo6D VV1omu51mWrgujlDyN4DDANq2u9bx5ms3EUFgVUgVvlcCt9JG+AbLDMWQXu7o/Ee BQrFh7MNGE+vT7qXBCA7H7OSODSxpmpfPSs83YHaTQTkKXzkKeDoS6opDRzO1eAw nHmVDicXWKVYkUounjJfmegTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD09r3sNV YRj+JKNcjn+lbpXCPzcwHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJ9Oha9SWuNC9IszdLIVgzysaHqhm7XYXXfX3ds6vUh/ZIXChKp+38d qgzKD959BVGZWXNhDkkLfYCvUaBpKPtYgU6YzoJ46zlSl8eLE8YDhBU78PSVROGK GgEiNOheE//Equ+VGpjqZhW6wu9SIqguVkQPOgQed32+uT92SVqpIIYZoKSA04ZP z6d8CnG5o0tbZ6FfBgn3aZH8hBK5VzC6r8MKf24wK5fI9sHoNNyeBW6vyJy+pWbP XGRS7qfnKiYj4Ug0Onp2Y+exDAE/SssW1T9N4+8lbxZJlQoqVW+aaxMWpkizwtNN krHmskPhK1zNd5IyFsu7gnkC852+MAU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:37 2025 by rpki-client