$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: oxYD6Hs6XykpWYVoAFJTUuH9SoPxiqyfn5cpFZ8jF2U= Subject key identifier: 14:99:E1:B6:BA:72:B6:AC:7D:8F:16:BC:03:A9:CC:E5:D6:89:10:2C Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 08A6 Signing time: Tue 04 Nov 2025 20:36:56 +0000 Manifest this update: Tue 04 Nov 2025 20:36:56 +0000 Manifest next update: Tue 11 Nov 2025 20:36:56 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: yFELmZ6Svquxx7V++7jvX3R+3RYUb0XpY6YiSFIv9pQ=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: l3BnPkx3AD0+V1TVm9PvDdFXvv/NHwdEm5t8UJry1xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Nov 4 20:36:56 2025 GMT Not After : Nov 11 20:36:56 2025 GMT Subject: CN=690a63e8-4898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:2e:04:6c:0c:92:40:2c:2d:a5:b7:56:a4: 2a:1b:14:78:43:68:24:af:d0:8b:c5:6f:74:2a:8e: 50:49:6f:5a:3c:fe:5b:a0:20:59:55:f4:23:ce:28: ab:2c:5c:df:6b:29:16:47:54:c5:cc:2c:99:a6:42: d5:1e:28:82:3f:bd:41:b3:a5:96:64:8f:11:80:07: d9:93:50:2c:79:a8:34:a7:a5:cd:14:86:a4:45:4f: 0a:9d:a5:f2:55:09:12:3e:6d:36:83:27:4a:25:c7: 57:f9:15:c0:f3:93:b5:df:68:40:75:98:a6:9a:51: 25:ed:47:8d:4d:7c:4a:04:aa:60:b5:10:a0:0d:f2: 08:e3:ba:bb:89:32:ee:12:86:da:93:16:46:07:1c: 13:8c:7e:5e:d4:90:96:f8:0c:d0:a6:d0:08:03:0d: cb:39:3f:06:0a:03:02:04:9e:0e:1a:8b:c2:4b:cb: 5d:72:86:dd:c6:34:d5:8f:08:60:4f:df:0a:d4:ce: f6:51:0e:09:74:b2:d0:24:75:08:6b:86:3c:ae:cb: f3:ba:9c:6b:9b:f0:34:16:ba:ca:02:de:7d:aa:94: d5:8e:8d:c9:0c:3e:ab:27:37:db:c4:12:5d:dc:14: eb:e7:86:43:2b:aa:7b:dd:a4:77:d6:0e:54:ec:72: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:E1:B6:BA:72:B6:AC:7D:8F:16:BC:03:A9:CC:E5:D6:89:10:2C X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e4:64:ac:43:64:92:61:ec:aa:ad:97:8c:92:d4:77:82:11: 28:6a:7f:0a:bc:68:a7:0b:8c:2f:33:8d:3d:f3:c4:79:16:ad: ef:06:f9:4f:d4:95:88:93:99:c3:e5:23:0d:46:a1:61:d3:28: 80:00:ab:bb:09:2c:c4:16:c7:25:15:90:ff:6b:7d:91:08:1d: ca:f4:de:a9:c2:c7:f3:bb:44:ac:ba:49:c1:de:de:ec:cc:fd: e7:47:22:73:17:c6:c6:e7:3f:15:54:6f:18:15:67:53:33:f3: 00:0d:29:c1:ee:46:44:d8:65:8c:7b:51:6b:68:20:5c:4a:37: 40:46:f3:44:fd:14:98:4d:26:c9:5c:b1:07:4f:70:08:71:50: 62:9a:7a:e6:34:ff:8e:71:e1:99:44:01:a7:52:84:b6:79:0a: 41:3e:db:e4:b7:4b:21:76:9a:8c:00:05:f6:a7:b2:31:50:78: 83:11:db:f4:6a:97:48:28:21:e4:96:eb:31:7d:32:9c:00:22: a3:59:1c:6b:37:05:18:5a:c1:8e:13:1c:61:1f:da:cd:4d:43: a5:ad:c2:86:26:91:7a:27:62:1f:95:9f:35:ff:3b:07:f5:4f: 80:c7:5b:ab:a1:7f:04:17:c0:26:a9:d0:57:2f:b0:8d:af:7f: cf:83:90:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUxMTA0MjAzNjU2WhcNMjUxMTExMjAzNjU2WjAYMRYwFAYD VQQDEw02OTBhNjNlOC00ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH8uBGwMkkAsLaW3VqQqGxR4Q2gkr9CLxW90Ko5QSW9aPP5boCBZVfQjziir LFzfaykWR1TFzCyZpkLVHiiCP71Bs6WWZI8RgAfZk1Aseag0p6XNFIakRU8KnaXy VQkSPm02gydKJcdX+RXA85O132hAdZimmlEl7UeNTXxKBKpgtRCgDfII47q7iTLu EobakxZGBxwTjH5e1JCW+AzQptAIAw3LOT8GCgMCBJ4OGovCS8tdcobdxjTVjwhg T98K1M72UQ4JdLLQJHUIa4Y8rsvzupxrm/A0FrrKAt59qpTVjo3JDD6rJzfbxBJd 3BTr54ZDK6p73aR31g5U7HKwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSZ4ba6 crasfY8WvAOpzOXWiRAsMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr5GSsQ2SSYeyqrZeMktR3ghEoan8KvGinC4wvM40988R5Fq3vBvlP 1JWIk5nD5SMNRqFh0yiAAKu7CSzEFsclFZD/a32RCB3K9N6pwsfzu0SsuknB3t7s zP3nRyJzF8bG5z8VVG8YFWdTM/MADSnB7kZE2GWMe1FraCBcSjdARvNE/RSYTSbJ XLEHT3AIcVBimnrmNP+OceGZRAGnUoS2eQpBPtvkt0shdpqMAAX2p7IxUHiDEdv0 apdIKCHklusxfTKcACKjWRxrNwUYWsGOExxhH9rNTUOlrcKGJpF6J2IflZ81/zsH 9U+Ax1uroX8EF8AmqdBXL7CNr3/Pg5A7 -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:38 2025 by rpki-client