$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: 4Kg1pqiB1oP2mc/IsAcqQ4RQZ9r7I+B5J4NGRhEMP04= Subject key identifier: 58:4B:51:15:24:95:05:F6:E7:48:C4:40:28:FA:E7:AA:5E:D2:58:AE Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: EE Signing time: Tue 04 Nov 2025 16:26:27 +0000 Manifest this update: Tue 04 Nov 2025 16:26:26 +0000 Manifest next update: Tue 11 Nov 2025 16:26:26 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: XxgBDs872TZMjdp57Ak8OJwo05ME+2HF610NveWPYAA=) 2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: Be1e/Cdz8VdYcqGFGYCyAGRq8xP47qVzQCL7lbjwbsc=) 3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: qW4tv57PdJFsLgd8tlpnpMjIsJF0H5vXkIX6yK4Jq7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Nov 4 16:26:26 2025 GMT Not After : Nov 11 16:26:26 2025 GMT Subject: CN=690a2932-450a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:eb:8d:c4:fd:e8:e3:4b:19:bc:c7:db:e7: 5d:aa:70:6f:54:c9:fc:17:14:78:4c:1e:a4:58:57: dd:81:c1:9f:11:ed:15:ab:85:3d:3f:54:5a:2a:4d: 66:27:1b:a4:1e:26:6f:9e:b5:f0:90:aa:ce:ab:20: 32:41:c9:27:a7:57:d2:19:4d:b1:8a:0e:b6:75:85: 79:b1:20:4f:9e:b3:96:c6:5b:db:6b:c2:39:f5:b6: 34:cb:0f:e5:64:b2:bc:cf:d3:5a:00:95:a7:85:33: b4:7f:86:62:03:df:a5:b2:c8:81:2b:06:76:96:82: 24:62:0d:c3:f1:35:42:f4:1e:e2:64:70:1b:13:0f: 5a:3b:46:b4:d0:5a:22:85:05:a8:3d:42:cc:37:88: 64:55:44:c2:9e:e0:10:48:75:6e:73:1c:54:50:56: 81:0a:c5:0a:6d:ec:fd:4e:68:37:6a:a8:a9:e3:4c: 22:33:45:b7:85:92:b1:dd:91:65:24:8b:5f:78:fd: 2a:c3:61:58:28:4c:1d:f2:9b:27:27:c1:3d:27:5c: 2b:8a:3f:f3:a4:c1:03:b1:21:d0:d2:37:d1:16:ad: 1b:07:bc:7a:5f:e0:a7:d0:5f:cf:96:55:0e:ab:63: 9c:c6:e1:7d:d0:58:0b:59:78:50:78:5a:11:07:2e: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4B:51:15:24:95:05:F6:E7:48:C4:40:28:FA:E7:AA:5E:D2:58:AE X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:46:66:45:ff:53:47:b4:4a:f4:d8:df:72:ad:48:8e:05:bf: 17:8d:8b:aa:72:e0:11:4d:b1:ad:69:fe:6b:4d:c1:be:21:b2: 28:21:7c:ff:73:6c:8e:7a:fe:d0:49:5e:85:f4:bd:bf:c9:53: cb:5e:8e:1d:bd:a2:20:c3:9a:ad:47:66:ac:79:2a:0b:05:aa: 79:f2:bb:b7:e3:29:91:50:4c:92:ae:87:a7:1e:6a:c7:23:fa: d9:54:cd:6c:bb:75:f8:87:03:87:80:ed:4b:39:aa:cd:72:af: b1:a9:a9:d2:b8:4c:80:f1:fc:9a:4c:7e:d9:81:14:3a:2a:e7: a6:e6:2e:4e:83:98:8e:40:d4:aa:92:56:ff:89:04:4a:23:f7: 03:0d:7c:a6:90:32:d9:8e:42:7e:6d:6c:a9:dd:2c:76:91:9d: 5b:3c:49:28:ae:2a:fe:a7:8d:e0:99:60:85:ee:fb:53:96:6b: 86:76:e5:73:3e:12:c0:9d:00:f1:0f:32:8f:6a:79:37:e0:3e: bd:9d:39:53:18:bf:ef:e6:fa:e6:90:14:84:41:ac:12:93:bd: 50:1c:7a:f1:92:7c:94:86:78:7f:61:0e:12:39:9a:6c:e2:ca: 9e:cf:45:46:d7:52:a9:c4:e9:1c:e9:31:8a:26:8d:df:cb:e6: 1c:8d:ed:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjUxMTA0MTYyNjI2WhcNMjUxMTExMTYyNjI2WjAYMRYwFAYD VQQDEw02OTBhMjkzMi00NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQTrjcT96ONLGbzH2+ddqnBvVMn8FxR4TB6kWFfdgcGfEe0Vq4U9P1RaKk1m JxukHiZvnrXwkKrOqyAyQcknp1fSGU2xig62dYV5sSBPnrOWxlvba8I59bY0yw/l ZLK8z9NaAJWnhTO0f4ZiA9+lssiBKwZ2loIkYg3D8TVC9B7iZHAbEw9aO0a00Foi hQWoPULMN4hkVUTCnuAQSHVucxxUUFaBCsUKbez9Tmg3aqip40wiM0W3hZKx3ZFl JItfeP0qw2FYKEwd8psnJ8E9J1wrij/zpMEDsSHQ0jfRFq0bB7x6X+Cn0F/PllUO q2OcxuF90FgLWXhQeFoRBy6euQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhLURUk lQX250jEQCj656pe0liuMB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVRmZF/1NHtEr02N9yrUiOBb8XjYuqcuARTbGtaf5rTcG+IbIoIXz/ c2yOev7QSV6F9L2/yVPLXo4dvaIgw5qtR2aseSoLBap58ru34ymRUEySroenHmrH I/rZVM1su3X4hwOHgO1LOarNcq+xqanSuEyA8fyaTH7ZgRQ6Kuem5i5Og5iOQNSq klb/iQRKI/cDDXymkDLZjkJ+bWyp3Sx2kZ1bPEkorir+p43gmWCF7vtTlmuGduVz PhLAnQDxDzKPank34D69nTlTGL/v5vrmkBSEQawSk71QHHrxknyUhnh/YQ4SOZps 4sqez0VG11KpxOkc6TGKJo3fy+Ycje2+ -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:47 2025 by rpki-client