$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: JKUe5Iv3z5i9ItLrB+mTZToaD2Q7Y+eIXHJU8ilRSbI= Subject key identifier: 51:E0:16:3A:F5:AC:7D:FE:AF:08:A3:9E:D1:2D:DB:A3:EB:96:E6:7A Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0BA5 Signing time: Tue 04 Nov 2025 19:07:22 +0000 Manifest this update: Tue 04 Nov 2025 19:07:21 +0000 Manifest next update: Tue 11 Nov 2025 19:07:21 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: E5LD8R+OvgPO4T9YW8hhviHBN/Dzextc6dPGdLUHUiQ=) 2: C09C5F7A939311F08A23CC30C4F9AE02.roa (hash: 9UkwYr6RxIOU+VmHhcff4g0hfkxJiT6GBYh6i9TGpz4=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Nov 4 19:07:21 2025 GMT Not After : Nov 11 19:07:21 2025 GMT Subject: CN=690a4eea-47b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:bb:26:4f:7c:56:b1:db:80:4c:90:08:ff: 0c:eb:bb:76:f1:90:2f:52:30:cc:f2:8a:86:fc:77: 9a:58:55:95:87:c0:37:e0:3e:b1:34:cc:28:34:65: 9e:9f:7a:7b:06:25:f4:e5:c8:28:5f:a8:43:11:24: 23:f7:36:fa:0c:49:ee:5c:fb:ec:23:6a:78:79:ea: 74:92:b2:67:f9:58:54:a6:14:ae:bc:79:77:9f:e0: 52:f9:84:32:02:df:98:95:23:61:08:0c:75:3d:56: 37:5c:01:4c:db:1d:c7:88:c0:d4:be:fd:2f:f2:d5: 33:82:3a:6e:ed:95:b7:20:43:0f:d8:87:0b:b9:be: 41:5c:47:00:31:a4:01:cd:67:e2:f1:fc:70:3a:0c: 5a:36:d1:06:e8:6c:57:21:40:02:80:70:61:fe:25: 3d:55:94:35:6a:32:2b:ea:5f:81:6b:cd:d6:dc:b5: c1:47:08:a1:39:aa:57:cd:19:8d:89:62:cd:11:8a: 72:f1:99:c8:2c:85:df:36:7d:56:48:1e:1e:e5:a0: 49:06:52:95:f7:33:23:bf:3e:9f:42:f6:d6:0e:f3: 5f:27:84:5f:a0:84:cc:79:e6:ef:84:ac:46:3f:24: 31:03:e0:d1:11:be:da:80:a0:e0:95:e6:94:e1:f6: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:16:3A:F5:AC:7D:FE:AF:08:A3:9E:D1:2D:DB:A3:EB:96:E6:7A X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2b:2c:df:f3:a4:1b:cc:db:b7:41:87:13:53:30:ca:ad:c5: ba:b7:9e:7b:31:58:be:2d:e5:61:25:04:4a:6b:94:02:af:8e: b1:6d:f2:cd:74:06:19:f7:25:ad:ac:fb:68:c0:64:5b:33:37: 0d:12:81:53:68:9b:9b:83:fa:a3:c0:2e:cb:df:a0:b2:8d:b3: 5b:67:0a:d9:96:ff:67:1d:59:30:88:52:9a:c8:d9:a6:ce:af: 4e:f5:5b:3a:49:5b:84:7d:48:54:c3:0b:7a:fa:29:69:9b:c5: d5:ae:ef:e0:96:a1:19:22:16:c3:4f:28:38:67:a1:f9:d2:57: 85:ec:05:6f:22:ad:46:53:af:6e:cb:fd:b8:c8:33:05:a5:dc: 56:e4:21:2a:e4:53:53:fb:b1:27:ad:ab:ad:e8:10:68:69:dc: 64:0a:32:a5:90:8d:29:cb:a0:ea:bc:01:26:fc:f3:a2:6b:18: a4:5f:52:74:ef:7c:72:e4:5f:8e:a3:3e:b6:52:dc:f1:67:ee: 3e:6d:b1:a3:5f:1b:09:b6:c1:72:05:d8:ee:a9:00:7f:35:85: 8a:5f:49:27:72:52:bc:d3:30:d7:fd:82:d2:32:a5:b6:82:ae: 71:fa:e9:21:e3:9f:65:6d:51:d6:95:9d:13:6f:01:f2:65:f1: c7:01:37:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUxMTA0MTkwNzIxWhcNMjUxMTExMTkwNzIxWjAYMRYwFAYD VQQDEw02OTBhNGVlYS00N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdy7Jk98VrHbgEyQCP8M67t28ZAvUjDM8oqG/HeaWFWVh8A34D6xNMwoNGWe n3p7BiX05cgoX6hDESQj9zb6DEnuXPvsI2p4eep0krJn+VhUphSuvHl3n+BS+YQy At+YlSNhCAx1PVY3XAFM2x3HiMDUvv0v8tUzgjpu7ZW3IEMP2IcLub5BXEcAMaQB zWfi8fxwOgxaNtEG6GxXIUACgHBh/iU9VZQ1ajIr6l+Ba83W3LXBRwihOapXzRmN iWLNEYpy8ZnILIXfNn1WSB4e5aBJBlKV9zMjvz6fQvbWDvNfJ4RfoITMeebvhKxG PyQxA+DREb7agKDgleaU4fbleQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHgFjr1 rH3+rwijntEt26PrluZ6MB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqKyzf86QbzNu3QYcTUzDKrcW6t557MVi+LeVhJQRKa5QCr46xbfLN dAYZ9yWtrPtowGRbMzcNEoFTaJubg/qjwC7L36CyjbNbZwrZlv9nHVkwiFKayNmm zq9O9Vs6SVuEfUhUwwt6+ilpm8XVru/glqEZIhbDTyg4Z6H50leF7AVvIq1GU69u y/24yDMFpdxW5CEq5FNT+7Enraut6BBoadxkCjKlkI0py6DqvAEm/POiaxikX1J0 73xy5F+Ooz62UtzxZ+4+bbGjXxsJtsFyBdjuqQB/NYWKX0knclK80zDX/YLSMqW2 gq5x+ukh459lbVHWlZ0TbwHyZfHHATe2 -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:33 2025 by rpki-client