$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: OegWled6K4Wu24ql8Y4qTLY+eADkyedBYoPYS7++jWU= Subject key identifier: B2:D9:18:5A:24:D0:A6:24:12:EF:E8:A1:04:76:85:0C:B8:88:F1:D1 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 0919 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 0908 Signing time: Tue 04 Nov 2025 20:25:49 +0000 Manifest this update: Tue 04 Nov 2025 20:25:49 +0000 Manifest next update: Tue 11 Nov 2025 20:25:49 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: mvnZuOPWnKIBgh8f3719+/pVeJ2TmMxQB6b/8wu8pxU=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Nov 4 20:25:49 2025 GMT Not After : Nov 11 20:25:49 2025 GMT Subject: CN=690a614d-c4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:2f:2a:7c:b1:ca:81:14:e5:1e:ce:ab:79: 0d:f0:35:f5:38:22:90:87:5b:16:53:80:ad:fe:6f: f7:06:bd:5b:16:00:47:2c:a4:51:d2:5d:2d:69:b0: 63:eb:1d:f0:df:09:3a:c9:54:ba:95:5f:5a:3e:14: 5b:d4:06:4c:26:b6:c1:6d:41:71:e4:18:ea:fb:f7: 08:ff:ce:4d:01:e1:33:ec:5d:31:d0:96:e3:14:16: 34:0d:5d:a0:05:db:5a:b7:f5:a5:61:3f:3a:34:0f: d6:53:78:49:ca:99:22:d6:23:09:78:a2:b3:39:65: 35:3c:db:db:2d:8d:72:44:60:ce:ca:be:15:5a:72: 3d:92:7a:20:38:71:fc:5e:e0:98:4b:f1:49:c9:07: 3a:0f:2c:d5:a2:65:cc:34:e5:6a:25:75:12:c0:66: 35:b4:42:86:df:23:30:dd:e1:09:de:97:98:bb:b5: 67:07:d1:23:cb:d8:32:87:5b:e1:8c:88:a8:0d:27: 87:42:d6:03:21:51:1a:21:4a:ce:fb:04:eb:50:56: b3:88:75:34:74:52:99:f8:76:8d:a8:d7:c4:a0:c1: 72:19:f5:40:bf:8f:58:c1:22:fa:37:d2:cc:01:6d: 85:24:ae:aa:d8:23:72:ed:c2:74:4f:b0:77:f3:76: bf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:18:5A:24:D0:A6:24:12:EF:E8:A1:04:76:85:0C:B8:88:F1:D1 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c1:8c:41:f5:d3:1c:b0:9b:d7:10:ad:e9:f3:ad:37:89:c6: a4:e3:5d:2a:18:63:34:10:4e:06:60:84:8d:f4:5c:1a:2a:5c: ac:95:5c:84:d9:88:ad:c2:2a:88:1d:57:12:04:cc:f5:d2:f9: 96:a6:79:20:8f:10:98:44:79:3d:e1:0a:c5:58:db:de:00:88: f8:b2:a3:16:f2:2d:13:90:76:a9:e9:66:bc:a6:a3:da:d8:50: b4:cb:20:25:b1:5f:75:e2:3e:01:eb:8e:61:71:d6:5f:ca:1e: de:a3:fb:73:b4:6a:f0:c8:15:c1:fc:4b:04:9c:24:b1:4a:4e: 5d:94:fa:db:f1:55:3f:97:79:57:71:f5:97:67:76:8a:55:17: 8a:ae:9d:36:cb:aa:36:dd:54:c1:f7:28:69:56:16:1b:fa:a5: ea:fe:aa:64:92:f4:ba:c4:5e:bb:dc:05:48:d8:7b:67:6e:42: 5f:bb:6f:d1:23:20:9b:38:e2:80:4c:1b:2f:5e:5b:f5:04:c1: 5c:70:bf:7f:c6:9b:91:0f:5a:80:ee:19:84:e5:1c:49:dc:3e: 0b:48:a5:31:44:ec:4e:70:64:9f:83:8e:ff:d8:37:91:4a:01: ea:65:25:99:b6:18:08:36:37:18:eb:63:c0:ea:95:40:08:03: ee:cf:fc:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUxMTA0MjAyNTQ5WhcNMjUxMTExMjAyNTQ5WjAYMRYwFAYD VQQDEw02OTBhNjE0ZC1jNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy18vKnyxyoEU5R7Oq3kN8DX1OCKQh1sWU4Ct/m/3Br1bFgBHLKRR0l0tabBj 6x3w3wk6yVS6lV9aPhRb1AZMJrbBbUFx5Bjq+/cI/85NAeEz7F0x0JbjFBY0DV2g Bdtat/WlYT86NA/WU3hJypki1iMJeKKzOWU1PNvbLY1yRGDOyr4VWnI9knogOHH8 XuCYS/FJyQc6DyzVomXMNOVqJXUSwGY1tEKG3yMw3eEJ3peYu7VnB9Ejy9gyh1vh jIioDSeHQtYDIVEaIUrO+wTrUFaziHU0dFKZ+HaNqNfEoMFyGfVAv49YwSL6N9LM AW2FJK6q2CNy7cJ0T7B383a/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLZGFok 0KYkEu/ooQR2hQy4iPHRMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMwYxB9dMcsJvXEK3p8603icak410qGGM0EE4GYISN9FwaKlyslVyE 2YitwiqIHVcSBMz10vmWpnkgjxCYRHk94QrFWNveAIj4sqMW8i0TkHap6Wa8pqPa 2FC0yyAlsV914j4B645hcdZfyh7eo/tztGrwyBXB/EsEnCSxSk5dlPrb8VU/l3lX cfWXZ3aKVReKrp02y6o23VTB9yhpVhYb+qXq/qpkkvS6xF673AVI2HtnbkJfu2/R IyCbOOKATBsvXlv1BMFccL9/xpuRD1qA7hmE5RxJ3D4LSKUxROxOcGSfg47/2DeR SgHqZSWZthgINjcY62PA6pVACAPuz/yT -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:56 2025 by rpki-client