$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft File: DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json) Hash identifier: 2EH/lLaEbub0uoQhCVbhygWEJLLU9zzBGU6PScz0vnA= Subject key identifier: A1:C4:5E:93:86:80:D2:1E:AB:43:E4:7F:03:66:A6:10:69:99:58:84 Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft Manifest number: EB Signing time: Wed 05 Nov 2025 05:31:46 +0000 Manifest this update: Wed 05 Nov 2025 05:31:45 +0000 Manifest next update: Wed 12 Nov 2025 05:31:45 +0000 Files and hashes: 1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: pkN7RONs9rINzV+z1MxpADF7uTbOjdinIbx+bu68JaU=) 2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: 4AY5MxyHWXUHdZWUxSVO1Obzs2t8GWWXz1CJkuERlDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C Validity Not Before: Nov 5 05:31:45 2025 GMT Not After : Nov 12 05:31:45 2025 GMT Subject: CN=690ae141-9539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:2c:8d:a2:ce:bd:01:e8:98:56:c7:0b:39: a6:77:b3:e2:d4:bf:c4:ff:67:d5:2c:98:bc:d4:5e: 3d:af:88:9f:5e:d4:68:7a:62:e6:ed:f6:d0:89:9d: 0a:cb:41:a6:c4:c8:c6:d8:80:1e:41:83:c7:71:da: d9:2d:06:f1:a2:c4:9b:15:6b:96:df:ca:d8:82:9d: a3:c0:4a:77:4c:90:b6:32:e0:3f:7a:57:c9:b0:41: 30:ce:c4:b4:82:b6:36:69:68:8a:2c:22:c5:01:ae: 28:2a:67:10:b8:0f:ee:4e:8a:4e:ba:de:f5:8c:a7: 2f:42:c8:f2:25:a8:03:5f:75:ea:e4:73:61:ff:95: 42:23:04:3d:1b:e1:c9:5a:de:04:63:91:e7:42:8b: f9:57:20:dd:4d:5a:27:be:4a:44:fc:0d:fc:85:ec: 4b:7a:02:57:98:34:e1:0d:ef:47:11:05:c6:a5:d8: 16:37:43:3c:ff:30:9f:db:cd:76:5c:52:c7:5c:78: 93:97:ca:5a:9e:3f:d7:6b:60:e7:06:33:0d:7c:0b: 1a:0d:16:ac:f4:01:51:e1:a8:2d:c6:38:7b:99:e1: 28:c2:7b:63:3d:ea:34:62:d2:d4:77:09:90:85:6f: 4d:25:c9:fa:c8:9b:6d:86:7a:a2:f3:bf:d4:d3:ed: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C4:5E:93:86:80:D2:1E:AB:43:E4:7F:03:66:A6:10:69:99:58:84 X509v3 Authority Key Identifier: keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9d:f2:ca:59:13:ef:1b:d5:8e:4c:44:83:c4:30:03:35:7a: 04:d2:9c:76:26:48:d4:ec:bf:1b:87:00:b0:22:64:34:ee:58: 64:df:e2:2e:cc:91:d9:7d:80:a3:a8:9a:fd:ad:dd:b9:ba:db: 36:cb:51:5f:52:71:c4:5a:6c:1c:ae:1e:f8:48:ba:06:a9:5a: fe:82:a0:47:9f:e6:86:11:b0:fd:2d:4e:db:66:e3:56:17:52: 3e:97:6b:0f:30:a3:65:97:1d:74:36:9d:f6:d1:d3:4c:e4:4a: de:a3:11:80:a4:fa:ee:46:b7:81:2f:ae:e0:2c:10:e6:60:8f: ea:f5:e5:d7:46:71:85:59:78:d5:c9:29:34:9f:d3:48:95:51: f3:db:6c:49:c2:12:05:54:40:1a:20:c6:b5:6e:b3:1a:dc:9c: 3e:80:9d:de:cc:ba:d1:fb:ee:9c:0d:76:88:cb:36:f4:04:90: 51:09:c9:54:39:ae:9a:e6:70:49:9f:cf:b0:8e:15:10:07:39: 71:b5:23:41:bc:03:1f:31:14:b6:5d:b8:09:68:d9:13:d0:a1: 44:1c:15:7d:48:5b:7d:f1:dc:24:5a:70:04:f5:c1:96:48:9b: 86:8e:5c:35:17:08:7b:ee:72:29:9a:ba:78:7a:02:a8:cc:cd: 25:e3:91:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5 MTUzOEM1NUMwHhcNMjUxMTA1MDUzMTQ1WhcNMjUxMTEyMDUzMTQ1WjAYMRYwFAYD VQQDEw02OTBhZTE0MS05NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+gsjaLOvQHomFbHCzmmd7Pi1L/E/2fVLJi81F49r4ifXtRoemLm7fbQiZ0K y0GmxMjG2IAeQYPHcdrZLQbxosSbFWuW38rYgp2jwEp3TJC2MuA/elfJsEEwzsS0 grY2aWiKLCLFAa4oKmcQuA/uTopOut71jKcvQsjyJagDX3Xq5HNh/5VCIwQ9G+HJ Wt4EY5HnQov5VyDdTVonvkpE/A38hexLegJXmDThDe9HEQXGpdgWN0M8/zCf2812 XFLHXHiTl8panj/Xa2DnBjMNfAsaDRas9AFR4agtxjh7meEowntjPeo0YtLUdwmQ hW9NJcn6yJtthnqi87/U0+0o+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHEXpOG gNIeq0PkfwNmphBpmViEMB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkNEQS8yQzdFNzJCODVBMTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJu ZmhpYlViNG00bHlSVTR4VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHnfLKWRPvG9WOTESDxDADNXoE0px2JkjU7L8bhwCwImQ07lhk3+Iu zJHZfYCjqJr9rd25uts2y1FfUnHEWmwcrh74SLoGqVr+gqBHn+aGEbD9LU7bZuNW F1I+l2sPMKNllx10Np320dNM5EreoxGApPruRreBL67gLBDmYI/q9eXXRnGFWXjV ySk0n9NIlVHz22xJwhIFVEAaIMa1brMa3Jw+gJ3ezLrR++6cDXaIyzb0BJBRCclU Oa6a5nBJn8+wjhUQBzlxtSNBvAMfMRS2XbgJaNkT0KFEHBV9SFt98dwkWnAE9cGW SJuGjlw1Fwh77nIpmrp4egKozM0l45Gj -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:07 2025 by rpki-client