$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: X7xPM0jlVZl/F7mCuWS7zRpy6+EEBEMEyanYMpkqsXY= Subject key identifier: C5:61:47:2B:64:74:1C:34:AD:90:B3:B8:42:C5:E3:E0:B5:C4:0A:F0 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 01CA Signing time: Wed 05 Nov 2025 02:59:26 +0000 Manifest this update: Wed 05 Nov 2025 02:59:26 +0000 Manifest next update: Wed 12 Nov 2025 02:59:26 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: qWdJFo+rfkIaGp2+Uv7JZCn1R2dqzQhRzIZOah3V3G8=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Nov 5 02:59:26 2025 GMT Not After : Nov 12 02:59:26 2025 GMT Subject: CN=690abd8e-12f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:81:e5:77:7b:09:42:b0:df:a5:39:36:c7: 06:21:bc:a3:fe:eb:b3:14:f6:43:98:2e:56:98:30: 81:d6:6c:a6:b0:5a:b1:8f:9d:d3:a7:86:b1:a1:3c: bb:a0:22:b2:7b:8c:91:33:e0:d7:10:41:38:5f:0c: 54:98:bb:42:92:e0:4f:06:53:10:f4:a9:fd:9e:56: c6:31:04:62:9f:a8:03:cb:0a:ad:8f:08:d2:08:88: 90:06:06:16:53:68:4d:30:fa:fc:da:e3:4c:e5:e7: ef:e9:6d:d3:b2:1e:db:ce:1e:0f:79:b3:fb:ee:93: 7f:42:ae:56:36:a6:65:d2:b2:8f:7b:ef:31:47:ef: a7:1c:97:53:01:b3:46:24:3b:80:35:6d:a1:f6:ea: 98:6c:88:65:0c:84:37:08:83:b3:24:52:11:6a:b0: 1c:a7:a1:9a:82:95:f3:9f:b6:b7:fe:f6:ef:10:b6: 21:3e:9a:71:0c:52:82:cb:cf:62:44:b4:de:51:56: 99:00:7f:21:7c:bc:1a:cc:00:ab:4a:46:ff:d0:75: 78:9f:c1:1d:6e:d4:2d:0a:b9:95:ee:88:bd:31:a5: e2:cd:56:f0:7e:80:be:c9:d7:26:f9:74:2f:14:9a: bc:cd:72:68:ba:b6:53:63:2f:57:5f:4f:ee:26:4a: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:61:47:2B:64:74:1C:34:AD:90:B3:B8:42:C5:E3:E0:B5:C4:0A:F0 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:10:b3:68:1f:b6:a4:ac:4e:d4:54:9f:20:07:1c:cc:bd:95: 0b:b9:1b:a3:76:47:f3:b6:bc:67:30:4b:ea:27:fb:32:fb:e6: ce:7b:41:28:8e:9c:27:38:01:2a:ea:39:38:81:4f:88:59:73: 52:ca:e6:d0:3b:2d:e6:c9:d7:02:89:8e:84:b9:52:0f:51:22: 8e:9e:ad:f9:79:12:e0:74:d4:7d:95:e8:fd:b4:b4:ab:6d:ab: b5:63:a0:12:67:e2:52:8c:e4:ff:19:5c:1b:41:1d:d1:e6:9e: 1a:a2:b7:5b:b6:ad:b1:2b:8e:93:a2:00:f1:af:f0:db:63:f3: 1b:98:71:09:e1:0f:8d:4f:81:c9:fc:4d:c4:1c:93:62:dc:05: 6a:c9:12:e7:91:65:24:6f:ba:ab:b0:22:94:89:3e:16:cc:7d: 98:d7:0d:af:7f:c1:60:aa:5c:65:20:69:da:7b:ca:63:a6:3d: 8c:b4:e8:d6:56:cb:18:e0:b3:a4:13:27:02:db:d0:5d:30:19: 71:6f:c4:0e:7b:3d:94:da:ef:e3:8f:2e:cb:ca:f2:fe:dd:f7: 6e:cf:98:a6:60:b8:ed:6d:c8:98:b3:36:ae:0b:d7:fe:fe:89: 97:f3:85:ba:a1:93:3e:f0:02:d0:91:ec:09:6f:f3:04:b2:1d: 36:95:79:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUxMTA1MDI1OTI2WhcNMjUxMTEyMDI1OTI2WjAYMRYwFAYD VQQDEw02OTBhYmQ4ZS0xMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jGB5Xd7CUKw36U5NscGIbyj/uuzFPZDmC5WmDCB1mymsFqxj53Tp4axoTy7 oCKye4yRM+DXEEE4XwxUmLtCkuBPBlMQ9Kn9nlbGMQRin6gDywqtjwjSCIiQBgYW U2hNMPr82uNM5efv6W3Tsh7bzh4PebP77pN/Qq5WNqZl0rKPe+8xR++nHJdTAbNG JDuANW2h9uqYbIhlDIQ3CIOzJFIRarAcp6GagpXzn7a3/vbvELYhPppxDFKCy89i RLTeUVaZAH8hfLwazACrSkb/0HV4n8EdbtQtCrmV7oi9MaXizVbwfoC+ydcm+XQv FJq8zXJourZTYy9XX0/uJkqMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVhRytk dBw0rZCzuELF4+C1xArwMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ELNoH7akrE7UVJ8gBxzMvZULuRujdkfztrxnMEvqJ/sy++bOe0Eo jpwnOAEq6jk4gU+IWXNSyubQOy3mydcCiY6EuVIPUSKOnq35eRLgdNR9lej9tLSr bau1Y6ASZ+JSjOT/GVwbQR3R5p4aordbtq2xK46TogDxr/DbY/MbmHEJ4Q+NT4HJ /E3EHJNi3AVqyRLnkWUkb7qrsCKUiT4WzH2Y1w2vf8FgqlxlIGnae8pjpj2MtOjW VssY4LOkEycC29BdMBlxb8QOez2U2u/jjy7LyvL+3fduz5imYLjtbciYszauC9f+ /omX84W6oZM+8ALQkewJb/MEsh02lXkg -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:12 2025 by rpki-client