$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: xCkjM0T+Lu/Zv1K+d27zQ05Sx2t3g04TvlzcXEb9cSI= Subject key identifier: C9:F2:3C:22:91:CB:11:B8:CA:50:7D:24:A8:86:CE:EB:E5:E3:A7:EC Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 04AA Signing time: Wed 05 Nov 2025 00:06:34 +0000 Manifest this update: Wed 05 Nov 2025 00:06:33 +0000 Manifest next update: Wed 12 Nov 2025 00:06:33 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: F3w5JFVKAucRiKWg+8aEH+wavyd7qutX4DMn1lKhbAk=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Nov 5 00:06:33 2025 GMT Not After : Nov 12 00:06:33 2025 GMT Subject: CN=690a950a-f86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:14:ec:66:f5:41:ec:f6:2a:4f:89:e1:e4: 47:33:b3:c8:df:48:70:87:4f:c9:10:71:53:81:59: 0b:57:a5:da:8d:d1:0a:9d:55:59:46:f9:8a:a7:6e: f1:7f:76:b5:9a:3d:52:b9:f7:2c:a3:83:d6:ec:a6: fa:31:b5:b5:b2:b2:4e:f7:20:46:f8:e3:b7:70:16: b6:cb:6b:10:bb:e9:5e:34:ce:44:06:35:a0:fa:c5: a6:2f:7f:66:92:72:8e:27:b2:39:b4:09:7f:24:41: 17:6f:4f:9f:e2:9b:14:71:9b:7c:ba:f1:9b:7a:9d: 90:95:7c:ea:b2:f1:7b:24:9b:40:96:24:8a:16:93: 9d:03:6a:ac:ea:10:92:dc:86:7d:ad:e3:2f:ca:f9: f1:1e:d6:48:25:67:0a:e7:34:3f:05:5f:c9:8d:be: f8:77:85:b2:82:25:88:b3:f7:54:ec:5a:6c:34:9e: 6d:80:5a:26:80:e2:d6:16:60:ed:63:3d:5c:7b:3a: 2e:98:1d:95:b3:dd:fa:3b:f4:ff:04:75:39:91:ab: 48:8a:4b:71:0c:8d:48:f2:3d:b1:55:f3:66:b7:40: 35:90:8f:32:42:72:b0:dd:b2:90:c3:f7:fd:38:a8: 44:99:64:c5:51:50:5f:d8:1f:e6:d1:26:8f:20:35: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F2:3C:22:91:CB:11:B8:CA:50:7D:24:A8:86:CE:EB:E5:E3:A7:EC X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:73:ec:07:48:6a:07:66:75:35:56:87:9c:99:87:aa:f3:5c: b5:0c:df:23:82:6d:1e:d2:35:87:9c:fb:f4:24:d1:70:0e:a3: 7b:0b:91:35:63:0c:63:b1:be:47:f4:d6:95:2c:ac:b5:bf:6d: 53:c8:85:1a:9f:d3:55:5a:1c:5f:0d:9d:02:27:89:a2:83:69: 19:0c:19:7b:4f:01:eb:c6:c2:ae:23:26:10:d2:4f:ec:1e:8d: 63:52:77:e5:1f:26:98:00:f2:cf:31:91:b0:d0:03:df:ff:e9: fc:8f:c4:f7:69:bc:e7:ce:76:f1:9a:b2:23:8d:7b:88:41:d5: 41:f6:f7:af:e6:19:bf:bb:61:80:50:cc:79:d3:b0:15:8b:53: d3:54:40:80:f5:12:e6:83:43:be:f9:66:34:81:09:b8:a3:a9: 4d:ba:1d:05:13:5e:5b:d0:82:8a:5c:38:b1:bb:f7:79:5f:c7: c0:6e:8d:e9:3f:99:38:3e:dc:4d:00:61:78:29:04:5d:32:70: 4e:a0:d9:ab:86:47:98:8f:8c:93:5d:b0:b8:51:10:5f:81:59: 04:31:d4:3b:d2:2d:2b:bd:aa:56:11:01:1f:87:e0:a9:7d:7d: 33:2a:a6:00:7c:e4:2d:a2:2b:5d:fd:0e:33:48:04:13:2a:e9: e7:24:b9:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUxMTA1MDAwNjMzWhcNMjUxMTEyMDAwNjMzWjAYMRYwFAYD VQQDEw02OTBhOTUwYS1mODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8oU7Gb1Qez2Kk+J4eRHM7PI30hwh0/JEHFTgVkLV6XajdEKnVVZRvmKp27x f3a1mj1Sufcso4PW7Kb6MbW1srJO9yBG+OO3cBa2y2sQu+leNM5EBjWg+sWmL39m knKOJ7I5tAl/JEEXb0+f4psUcZt8uvGbep2QlXzqsvF7JJtAliSKFpOdA2qs6hCS 3IZ9reMvyvnxHtZIJWcK5zQ/BV/Jjb74d4WygiWIs/dU7FpsNJ5tgFomgOLWFmDt Yz1cezoumB2Vs936O/T/BHU5katIiktxDI1I8j2xVfNmt0A1kI8yQnKw3bKQw/f9 OKhEmWTFUVBf2B/m0SaPIDVOPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnyPCKR yxG4ylB9JKiGzuvl46fsMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTc+wHSGoHZnU1VoecmYeq81y1DN8jgm0e0jWHnPv0JNFwDqN7C5E1 Ywxjsb5H9NaVLKy1v21TyIUan9NVWhxfDZ0CJ4mig2kZDBl7TwHrxsKuIyYQ0k/s Ho1jUnflHyaYAPLPMZGw0APf/+n8j8T3abznznbxmrIjjXuIQdVB9vev5hm/u2GA UMx507AVi1PTVECA9RLmg0O++WY0gQm4o6lNuh0FE15b0IKKXDixu/d5X8fAbo3p P5k4PtxNAGF4KQRdMnBOoNmrhkeYj4yTXbC4URBfgVkEMdQ70i0rvapWEQEfh+Cp fX0zKqYAfOQtoitd/Q4zSAQTKunnJLkD -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:51 2025 by rpki-client