$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft File: d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json) Hash identifier: PKYaeoc7jVHfTZHVWEMgOJuT7L1G/1rWUEcoUp7LIt8= Subject key identifier: 68:CD:9F:B9:E1:32:5B:EE:2E:10:11:E9:B9:87:8D:69:7F:A3:FC:36 Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft Manifest number: 011D Signing time: Mon 03 Nov 2025 04:49:06 +0000 Manifest this update: Mon 03 Nov 2025 04:49:06 +0000 Manifest next update: Mon 10 Nov 2025 04:49:06 +0000 Files and hashes: 1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: /3xgqPaw0NfTipuVSFPNZ/gFO9zXRJnLlRHZhn8l1Qc=) 2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: mAjzpgSn4LjU+hGR/suY8fIT9L0ResXkBxM/GBV6W9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Validity Not Before: Nov 3 04:49:06 2025 GMT Not After : Nov 10 04:49:06 2025 GMT Subject: CN=69083442-c8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:8e:18:fd:6e:c0:8a:9a:a3:ab:ad:6d:9a: a9:2d:af:ca:9e:60:9b:c1:ef:55:3c:97:aa:1a:a7: e9:b9:51:7c:2f:b6:10:79:17:18:4e:fe:20:f9:d8: 3f:20:4c:29:6b:67:25:cd:62:13:b1:f8:1c:82:cc: 4f:12:c6:8d:83:1a:d9:dd:00:56:39:17:22:f1:14: a4:ae:6a:c8:19:cd:f6:64:d1:b6:57:93:41:8f:f0: 43:e6:c2:a7:db:5f:4d:ac:d4:62:4d:c8:73:44:83: 6b:34:57:31:8b:67:15:f4:b1:68:38:48:ed:59:f9: 6a:79:9e:5f:de:29:80:59:6c:23:b9:31:db:ca:b9: aa:15:9a:ca:7c:f9:30:d7:cd:ea:8c:73:a2:97:77: e0:84:e7:ca:c7:66:aa:a1:9a:98:d1:77:a2:03:9e: 52:1c:c4:e9:d4:37:49:ee:8d:ee:22:77:f2:5b:93: 9f:3a:d8:bb:90:82:96:21:10:33:03:3e:f2:db:a3: e6:50:8a:83:ea:a4:fe:c6:02:14:21:43:bb:a2:7f: 5b:55:f3:76:a9:22:24:fe:d4:55:ec:0b:fe:da:cc: b4:7e:59:90:66:31:10:00:6c:34:39:c1:3f:0f:19: 2c:71:ae:a5:f3:bb:f5:87:fd:6b:9f:ca:24:8b:1b: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:9F:B9:E1:32:5B:EE:2E:10:11:E9:B9:87:8D:69:7F:A3:FC:36 X509v3 Authority Key Identifier: keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:51:47:ae:b7:cd:bb:70:da:c2:e3:7b:e4:e7:58:c2:ad:0b: 77:5f:a5:db:cc:ce:64:8c:e7:89:d1:69:3c:71:06:b9:be:a1: fe:c8:9d:b9:6d:66:c9:b3:d5:ae:3c:72:26:8a:da:a8:f0:40: 4b:2d:e2:3e:17:6d:b5:d5:3d:13:8b:6a:d4:55:10:0d:0d:ab: fd:ad:fd:33:43:e3:22:62:93:2c:40:55:2f:d0:7d:62:58:cb: 75:26:4d:be:34:01:46:6e:02:62:7e:61:e2:d5:f2:34:19:d3: 48:40:a9:4a:0a:75:a9:2f:7e:d4:e1:63:4b:66:5d:e2:9e:54: e5:86:c6:b0:9a:6e:bb:d9:1e:66:8f:dc:8a:6c:a6:7b:99:a2: e7:6b:e1:83:e8:52:d4:b4:1b:a9:d6:06:07:a3:c3:aa:59:22: 92:20:94:02:98:fb:9d:44:e1:54:7b:21:df:46:6b:cc:00:79: 30:04:fc:b0:89:4f:a6:02:cc:74:e8:fd:e2:49:15:0d:02:24: 10:6c:25:29:31:ed:5a:0a:34:40:89:fe:84:36:d0:84:c1:c4: be:5e:e2:86:d1:fd:6b:dc:0c:78:e5:7f:0a:2b:4f:b6:56:ed: d6:7d:fb:97:98:42:db:09:02:e6:b0:70:df:b1:0d:d0:36:17: 52:06:a5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG Q0YyQTYwMUEwHhcNMjUxMTAzMDQ0OTA2WhcNMjUxMTEwMDQ0OTA2WjAYMRYwFAYD VQQDEw02OTA4MzQ0Mi1jOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DKOGP1uwIqao6utbZqpLa/KnmCbwe9VPJeqGqfpuVF8L7YQeRcYTv4g+dg/ IEwpa2clzWITsfgcgsxPEsaNgxrZ3QBWORci8RSkrmrIGc32ZNG2V5NBj/BD5sKn 219NrNRiTchzRINrNFcxi2cV9LFoOEjtWflqeZ5f3imAWWwjuTHbyrmqFZrKfPkw 183qjHOil3fghOfKx2aqoZqY0XeiA55SHMTp1DdJ7o3uInfyW5OfOti7kIKWIRAz Az7y26PmUIqD6qT+xgIUIUO7on9bVfN2qSIk/tRV7Av+2sy0flmQZjEQAGw0OcE/ Dxksca6l87v1h/1rn8okixusMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjNn7nh MlvuLhAR6bmHjWl/o/w2MB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRENi9ERTIyQUQyNDBDREYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBj VFRacU1HdUFhVG44OHFZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUUeut827cNrC43vk51jCrQt3X6XbzM5kjOeJ0Wk8cQa5vqH+yJ25 bWbJs9WuPHImitqo8EBLLeI+F2211T0Ti2rUVRANDav9rf0zQ+MiYpMsQFUv0H1i WMt1Jk2+NAFGbgJifmHi1fI0GdNIQKlKCnWpL37U4WNLZl3inlTlhsawmm672R5m j9yKbKZ7maLna+GD6FLUtBup1gYHo8OqWSKSIJQCmPudROFUeyHfRmvMAHkwBPyw iU+mAsx06P3iSRUNAiQQbCUpMe1aCjRAif6ENtCEwcS+XuKG0f1r3Ax45X8KK0+2 Vu3WffuXmELbCQLmsHDfsQ3QNhdSBqXY -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:23 2025 by rpki-client