$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: TAidpZDswESdyfPu2IkoDTSw7o6oPMQcOv763CWG5Ds= Subject key identifier: 10:44:0A:9A:61:9D:8B:95:39:F0:AA:76:BC:30:71:22:68:7F:97:C1 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 0131 Signing time: Mon 03 Nov 2025 04:33:28 +0000 Manifest this update: Mon 03 Nov 2025 04:33:28 +0000 Manifest next update: Mon 10 Nov 2025 04:33:28 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: 77JaPu7g7kluYh7QqtDTOZj0cnIPUFPe6XzaNknIizc=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Nov 3 04:33:28 2025 GMT Not After : Nov 10 04:33:28 2025 GMT Subject: CN=69083098-ec66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:24:a4:41:e6:aa:dd:57:56:f1:f8:8f:e9: 32:c7:41:97:b6:b2:80:89:f1:ae:3b:82:8b:97:85: 10:8c:69:37:ec:84:25:d6:74:56:ee:95:2c:61:10: 99:49:16:75:1f:ae:b5:eb:f5:9f:25:84:0b:3a:19: 21:c4:63:48:60:25:89:d1:d1:6c:87:b0:26:c4:09: 77:58:60:4e:61:0e:33:26:a6:25:89:24:fb:3d:c2: 9a:09:5e:05:30:2e:3e:7e:b3:0f:28:ef:e6:a4:2a: f1:20:d3:b6:0e:67:df:65:37:00:cc:20:6c:60:da: e0:ca:c6:08:63:07:da:d0:4a:6e:4b:54:13:01:fe: 78:db:6d:cf:02:57:d3:53:30:e5:77:f0:c3:2d:d9: 34:47:c7:0f:ce:2b:9d:76:4a:17:ae:6a:0e:5b:fa: 8c:50:02:bb:7f:25:a7:8a:1f:5e:56:dd:2e:9a:c2: 2f:1b:8b:31:9b:58:72:61:70:83:c4:20:99:27:d2: 11:4a:15:e8:b3:ac:76:0d:3f:8b:26:5a:c3:bf:a5: 45:3d:87:ae:8d:6e:c4:d7:4c:64:12:b1:80:1f:4c: 06:ae:3c:30:5b:78:ab:0a:cf:e4:e2:6c:da:ed:62: 84:e1:99:20:3b:83:15:b9:41:3c:3e:0b:7c:3a:03: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:0A:9A:61:9D:8B:95:39:F0:AA:76:BC:30:71:22:68:7F:97:C1 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9c:90:72:53:c1:79:cd:e5:9c:07:b1:0f:04:6a:2e:5c:fe: 47:00:f3:ac:bd:6d:1f:af:9a:4d:c3:f0:b1:35:2b:f5:8d:8a: 69:c3:ed:b5:d3:f8:3d:92:a0:1f:1e:93:c9:19:ab:de:ab:27: bc:ae:47:1d:53:d4:d0:d2:e8:ad:05:b6:d9:94:bc:a8:62:0d: d2:cc:10:4a:d3:c7:f7:09:15:3b:77:bf:e8:79:f1:c4:a8:fd: e9:f6:ef:e2:bc:c0:f5:fc:de:ed:62:45:f6:ce:68:8a:98:96: 66:60:f5:6c:50:3b:c6:c8:32:f7:1e:01:23:43:c4:ba:f4:e4: 8d:f2:c1:98:26:02:66:66:c1:53:95:bc:db:18:ce:50:b5:b0: a1:50:84:bc:bd:c9:7a:de:b4:8f:f5:d1:ac:8b:b9:75:64:3b: a6:8a:0f:cf:04:24:90:b6:f8:0e:94:1b:c8:c4:f6:24:fc:12: 2a:f0:03:79:9f:ab:fd:e3:fa:01:f9:3a:cf:8f:fe:dc:c8:0e: fb:12:f3:be:0f:29:28:67:98:51:2a:47:df:53:ef:24:ee:0b: c1:e7:12:fb:79:3d:62:ab:60:9d:5a:6a:58:58:78:b3:d2:24: 6d:7e:a4:b0:64:df:93:52:73:39:ac:45:65:27:81:67:be:26: f9:b5:2e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUxMTAzMDQzMzI4WhcNMjUxMTEwMDQzMzI4WjAYMRYwFAYD VQQDEw02OTA4MzA5OC1lYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jckpEHmqt1XVvH4j+kyx0GXtrKAifGuO4KLl4UQjGk37IQl1nRW7pUsYRCZ SRZ1H6616/WfJYQLOhkhxGNIYCWJ0dFsh7AmxAl3WGBOYQ4zJqYliST7PcKaCV4F MC4+frMPKO/mpCrxINO2DmffZTcAzCBsYNrgysYIYwfa0EpuS1QTAf54223PAlfT UzDld/DDLdk0R8cPziuddkoXrmoOW/qMUAK7fyWnih9eVt0umsIvG4sxm1hyYXCD xCCZJ9IRShXos6x2DT+LJlrDv6VFPYeujW7E10xkErGAH0wGrjwwW3irCs/k4mza 7WKE4ZkgO4MVuUE8Pgt8OgONTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBECpph nYuVOfCqdrwwcSJof5fBMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBynJByU8F5zeWcB7EPBGouXP5HAPOsvW0fr5pNw/CxNSv1jYppw+21 0/g9kqAfHpPJGaveqye8rkcdU9TQ0uitBbbZlLyoYg3SzBBK08f3CRU7d7/oefHE qP3p9u/ivMD1/N7tYkX2zmiKmJZmYPVsUDvGyDL3HgEjQ8S69OSN8sGYJgJmZsFT lbzbGM5QtbChUIS8vcl63rSP9dGsi7l1ZDumig/PBCSQtvgOlBvIxPYk/BIq8AN5 n6v94/oB+TrPj/7cyA77EvO+DykoZ5hRKkffU+8k7gvB5xL7eT1iq2CdWmpYWHiz 0iRtfqSwZN+TUnM5rEVlJ4Fnvib5tS72 -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:55 2025 by rpki-client