$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: 1YEUOnIp1VVGbJoXISotAgVhoAebTuHQi8tP6Y7uXTw= Subject key identifier: 79:99:3C:F0:FB:D5:04:42:5A:71:F0:FF:AF:15:59:BD:69:D5:E7:5A Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: 014A Signing time: Tue 04 Nov 2025 20:13:20 +0000 Manifest this update: Tue 04 Nov 2025 20:13:19 +0000 Manifest next update: Tue 11 Nov 2025 20:13:19 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: PoilixULRgnQxh7g2hX1IKD5aH/RwYJTMDO+zyHWmuQ=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: /FORfGBg9zOxItBO8An19jk30uxSaavKCQfEXQzUIIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Nov 4 20:13:19 2025 GMT Not After : Nov 11 20:13:19 2025 GMT Subject: CN=690a5e5f-42a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:f2:11:77:e3:76:ee:7a:e8:88:10:ba:32: 58:c6:fd:9e:04:e2:7f:f2:9e:51:10:b4:56:98:f9: 75:a5:09:b1:70:62:e0:c2:aa:ce:fe:c2:76:57:24: 83:fc:1c:b7:37:2e:3b:0c:79:7d:82:48:ee:bb:ed: 38:09:e1:80:4a:b3:d9:fc:f6:48:5a:e3:59:97:9a: a6:ae:05:8d:14:f5:9a:d6:fa:fd:c7:c0:fe:b3:ed: d5:78:b8:ac:53:76:a9:a2:0c:da:75:02:09:db:3e: 51:b0:d1:36:39:10:62:bb:05:26:9d:94:3b:02:47: 37:18:d0:21:a5:16:e3:c0:3d:31:98:3d:86:87:ba: 63:8c:3d:e8:32:b5:e8:1c:b5:33:bc:dc:f8:3b:c6: 36:b9:d1:15:c0:0c:b4:4a:29:65:7f:96:c3:72:d4: c8:57:54:96:3d:10:81:d9:4f:67:7a:74:7b:dc:71: 28:3b:37:5c:34:59:88:9b:af:16:50:72:1f:0a:27: 09:90:0d:66:bd:ff:79:19:6e:87:eb:bc:df:4d:04: 6a:02:08:f8:d3:f7:e2:4b:57:4f:34:05:fc:b9:e9: ee:88:0e:a8:d0:7c:d6:2d:71:af:11:31:c9:18:fd: db:89:4b:2c:db:c5:ad:d3:2f:81:38:13:7b:67:e3: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:99:3C:F0:FB:D5:04:42:5A:71:F0:FF:AF:15:59:BD:69:D5:E7:5A X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c6:aa:e1:00:97:00:48:0a:ee:bf:4a:f2:e3:97:5c:ef:e3: 79:50:6a:31:3a:2d:7e:b1:39:3b:db:67:cb:df:88:ac:e9:be: 76:ae:a2:4b:7a:ab:42:e5:ab:c4:6d:b7:f9:7e:98:cd:43:64: 7e:9d:d0:34:08:bd:83:a3:9f:96:66:47:b8:15:1b:a2:86:8c: bc:d8:5e:be:9f:ab:3c:9a:61:aa:a0:30:d6:c3:47:e8:ac:7f: c7:48:5e:f6:d9:69:78:bd:16:02:81:8d:49:ba:c1:97:75:46: be:49:3f:9b:e0:35:f7:e5:43:6f:4f:b5:9c:a3:85:43:2d:61: bf:ba:59:4e:fb:bc:36:b9:02:0a:cf:a7:86:3c:c7:59:ce:ef: c7:af:89:5c:3c:7a:f8:9e:9c:ab:d7:a9:45:9e:c9:03:2d:fa: 54:e4:99:c6:6c:97:8b:f5:e3:a6:57:04:47:4d:57:c4:d4:0c: 92:ba:6b:ea:d0:66:01:73:78:fe:e4:0b:b6:ed:26:4b:e5:ac: b8:02:99:ca:dd:81:b0:82:bb:a4:8d:d2:af:66:46:73:be:26: eb:f1:af:b2:04:a1:13:2d:e2:de:45:a5:5d:af:a8:e2:3b:b5: 46:f5:bf:a1:55:d8:0e:de:8c:70:55:5a:7d:06:c8:a3:8f:9b: 34:5c:50:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjUxMTA0MjAxMzE5WhcNMjUxMTExMjAxMzE5WjAYMRYwFAYD VQQDEw02OTBhNWU1Zi00MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpvyEXfjdu566IgQujJYxv2eBOJ/8p5RELRWmPl1pQmxcGLgwqrO/sJ2VySD /By3Ny47DHl9gkjuu+04CeGASrPZ/PZIWuNZl5qmrgWNFPWa1vr9x8D+s+3VeLis U3apogzadQIJ2z5RsNE2ORBiuwUmnZQ7Akc3GNAhpRbjwD0xmD2Gh7pjjD3oMrXo HLUzvNz4O8Y2udEVwAy0Sillf5bDctTIV1SWPRCB2U9nenR73HEoOzdcNFmIm68W UHIfCicJkA1mvf95GW6H67zfTQRqAgj40/fiS1dPNAX8uenuiA6o0HzWLXGvETHJ GP3biUss28Wt0y+BOBN7Z+MdzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmZPPD7 1QRCWnHw/68VWb1p1edaMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8xqrhAJcASAruv0ry45dc7+N5UGoxOi1+sTk722fL34is6b52rqJL eqtC5avEbbf5fpjNQ2R+ndA0CL2Do5+WZke4FRuihoy82F6+n6s8mmGqoDDWw0fo rH/HSF722Wl4vRYCgY1JusGXdUa+ST+b4DX35UNvT7Wco4VDLWG/ullO+7w2uQIK z6eGPMdZzu/Hr4lcPHr4npyr16lFnskDLfpU5JnGbJeL9eOmVwRHTVfE1AySumvq 0GYBc3j+5Au27SZL5ay4ApnK3YGwgrukjdKvZkZzvibr8a+yBKETLeLeRaVdr6ji O7VG9b+hVdgO3oxwVVp9Bsijj5s0XFAk -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:31 2025 by rpki-client