$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json) Hash identifier: /yVnOwIQY5mDf+6LJRPHs1l3FnL7uE6SBiPQaP5pyXM= Subject key identifier: 53:2E:1F:A3:DB:B9:E1:FD:4D:E4:6D:85:EB:05:20:58:B1:DC:53:59 Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft Manifest number: 2A Signing time: Mon 03 Nov 2025 07:40:11 +0000 Manifest this update: Mon 03 Nov 2025 07:40:11 +0000 Manifest next update: Mon 10 Nov 2025 07:40:11 +0000 Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: HDjvz0aU/pLE0iCC/r2AP1ZHtcugO9TGpEz7FiaDC+I=) 2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=) 3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37 Validity Not Before: Nov 3 07:40:11 2025 GMT Not After : Nov 10 07:40:11 2025 GMT Subject: CN=69085c5b-5c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:bf:8b:e6:55:0b:fe:ea:e2:fe:ec:86:6d: 9d:00:92:69:d9:c9:64:8f:53:1f:68:40:00:e8:80: b8:ae:09:83:ba:ca:65:a8:17:94:6e:5e:d1:e1:64: f2:c3:70:c5:29:78:c8:68:e6:1c:68:2e:70:16:51: 70:78:80:12:0d:c6:f0:1a:8e:5e:4b:ca:94:4b:7b: 8d:cc:c2:f9:b8:20:b2:00:98:83:6c:e6:e5:77:fe: e2:48:a2:77:a9:4e:07:2c:59:38:98:32:4b:3b:c2: 9f:24:d5:ff:ec:e4:93:7d:5d:e2:2a:7c:cb:a7:87: 2e:17:70:5f:98:26:50:74:82:0a:6f:58:d1:a3:b8: 73:2e:1c:f0:2e:65:91:6c:ba:44:66:51:b4:43:ac: 19:7f:6e:c5:d7:e9:49:6a:26:a7:69:6e:42:5d:25: 75:43:3e:0d:9a:ee:89:cd:40:4f:7c:32:af:da:db: bb:68:77:10:a4:aa:a4:f8:4a:ff:73:8e:f7:1f:2e: 5c:fb:7b:fa:a0:b8:f1:e2:2f:30:5a:40:fe:fa:0c: 3e:16:4e:66:a9:42:71:8f:8f:58:30:c2:20:fb:c9: 26:4d:64:05:b8:04:ac:25:52:e7:07:0e:f3:7a:f9: 15:cc:17:d4:58:17:ca:f7:1c:9a:36:f7:55:a2:f3: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2E:1F:A3:DB:B9:E1:FD:4D:E4:6D:85:EB:05:20:58:B1:DC:53:59 X509v3 Authority Key Identifier: keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:28:c3:5c:07:0b:e2:22:58:d0:3c:b8:a6:2f:37:1b:b0:42: 86:33:ec:d7:e5:1b:d4:22:63:28:d2:09:9a:f4:ad:44:aa:10: 91:58:8b:a7:8f:5e:33:34:96:3c:ec:b1:81:15:1e:3b:f1:ad: f0:ce:08:22:7e:c6:4b:2b:7a:38:d8:f4:4f:73:aa:a0:96:a5: 72:75:17:ca:ff:36:05:5f:0d:c9:a5:0c:f1:bc:42:95:02:58: 82:3e:19:d1:3c:a9:e1:6a:ad:18:3a:0c:29:ee:af:08:04:82: f6:08:d5:08:e1:b0:18:5c:9c:9c:aa:60:3a:32:72:7b:87:61: 3a:1e:1f:4f:7b:c3:c2:bd:e8:6c:f1:6c:c2:f8:ec:ce:c3:9e: 5e:49:d5:30:f1:a6:d5:b1:08:c7:d1:1e:92:e1:9f:95:b0:a0: 9d:29:d9:05:61:cd:c8:ce:fc:6a:56:45:b6:f5:73:35:a6:2e: a7:f8:ac:00:1c:50:2b:92:10:1a:b5:f3:11:48:16:69:62:59: 87:9c:7b:50:dd:30:79:ed:c9:77:93:1d:62:26:f5:4f:72:0a: e8:79:44:02:bd:24:7a:03:77:c3:b9:94:a0:0a:4f:94:fa:92: a1:47:59:40:b5:10:1c:c7:84:d8:76:83:fc:0a:bf:37:73:a7: 86:8b:b7:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3 N0M0REIzNzAeFw0yNTExMDMwNzQwMTFaFw0yNTExMTAwNzQwMTFaMBgxFjAUBgNV BAMTDTY5MDg1YzViLTVjOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRKL+L5lUL/uri/uyGbZ0AkmnZyWSPUx9oQADogLiuCYO6ymWoF5RuXtHhZPLD cMUpeMho5hxoLnAWUXB4gBINxvAajl5LypRLe43Mwvm4ILIAmINs5uV3/uJIonep TgcsWTiYMks7wp8k1f/s5JN9XeIqfMunhy4XcF+YJlB0ggpvWNGjuHMuHPAuZZFs ukRmUbRDrBl/bsXX6UlqJqdpbkJdJXVDPg2a7onNQE98Mq/a27todxCkqqT4Sv9z jvcfLlz7e/qguPHiLzBaQP76DD4WTmapQnGPj1gwwiD7ySZNZAW4BKwlUucHDvN6 +RXMF9RYF8r3HJo291Wi8/QlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUy4fo9u5 4f1N5G2F6wUgWLHcU1kwHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5 NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgow1wHC+IiWNA8uKYvNxuwQoYz7NflG9QiYyjSCZr0rUSqEJFYi6eP XjM0ljzssYEVHjvxrfDOCCJ+xksrejjY9E9zqqCWpXJ1F8r/NgVfDcmlDPG8QpUC WII+GdE8qeFqrRg6DCnurwgEgvYI1QjhsBhcnJyqYDoycnuHYToeH097w8K96Gzx bML47M7Dnl5J1TDxptWxCMfRHpLhn5WwoJ0p2QVhzcjO/GpWRbb1czWmLqf4rAAc UCuSEBq18xFIFmliWYece1DdMHntyXeTHWIm9U9yCuh5RAK9JHoDd8O5lKAKT5T6 kqFHWUC1EBzHhNh2g/wKvzdzp4aLt5w= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:55 2025 by rpki-client