$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: gaU4ub31DDPc3OswD1s5ckH8LYFzHPUh+W5QdQDDCx0= Subject key identifier: 9C:89:2A:4A:81:7D:56:44:0A:72:FB:84:77:88:D1:96:59:AA:93:EC Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: FB Signing time: Mon 03 Nov 2025 05:10:18 +0000 Manifest this update: Mon 03 Nov 2025 05:10:18 +0000 Manifest next update: Mon 10 Nov 2025 05:10:18 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: tzWGPA5M0bZTATPWh+0NdLrYtuYeqOSVmqqya5lQpEw=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Nov 3 05:10:18 2025 GMT Not After : Nov 10 05:10:18 2025 GMT Subject: CN=6908393a-d4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:07:66:51:0a:4d:e4:1e:9c:48:ec:ba:2e: 94:7a:7f:ec:ce:1b:fa:2f:ad:e0:0a:ac:75:b6:7b: a9:3d:49:11:ca:d1:a0:09:fb:1e:ef:eb:29:32:76: 08:4a:83:c5:ce:e8:b8:d3:62:04:87:d3:7b:f5:b8: 82:63:30:bc:22:fb:f1:36:25:03:0b:a2:a0:74:ef: 6a:30:00:21:21:41:d4:02:11:3f:f1:ae:47:68:f1: e0:b7:a2:2d:30:88:c2:e3:2e:88:02:d3:41:2a:9f: 0b:50:9a:fa:8f:09:00:f1:82:24:95:d5:24:a2:10: d3:23:63:c2:01:c8:af:b3:2d:10:0e:d3:37:be:cb: 55:0b:05:75:27:44:4a:e8:77:7b:b0:c5:b3:a7:17: db:ac:c2:f4:36:5a:82:c4:ed:6c:90:3b:58:a9:d1: e8:60:fb:7f:7d:2f:58:b1:a2:22:09:de:c6:fc:97: 7a:d5:67:fc:35:55:6f:55:7b:03:79:ab:d1:75:a4: 3f:74:9d:d7:94:67:5b:5e:20:3a:32:7b:d7:23:b9: ae:05:02:5f:f4:87:05:5c:91:a9:ba:ab:24:86:5c: e8:26:4b:1a:7c:f2:a9:2c:e3:3f:8a:4b:c9:8d:43: 31:a2:e7:aa:6c:43:ba:6d:fe:84:88:59:32:dd:27: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:2A:4A:81:7D:56:44:0A:72:FB:84:77:88:D1:96:59:AA:93:EC X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5a:c3:00:d1:e6:b8:43:9e:5c:31:df:56:9f:f6:bc:9e:7f: ab:a9:f5:41:df:9d:95:2d:e2:84:b0:a7:70:1a:24:d0:3f:06: c8:db:e9:0c:2f:42:51:87:ce:4a:58:02:4b:56:12:ae:98:26: 9a:5c:ce:09:9f:3d:1c:e3:c8:4f:5e:c7:73:22:c7:d2:9c:28: 39:67:dd:f8:ed:25:24:ad:f2:29:4c:b0:86:d4:04:a1:97:01: c8:28:56:d5:79:a6:3b:71:4c:fd:1c:65:05:f7:1b:e5:13:fb: 7a:d9:54:98:de:af:90:f2:37:28:5a:7f:f5:0f:d4:5c:dc:0d: 23:26:9c:1c:72:13:2c:07:af:73:5c:9a:94:dd:c9:a2:5a:3b: ba:a4:44:a4:d6:46:6c:4b:45:f3:43:dc:df:27:ff:ba:42:6b: d7:db:8d:8e:6e:16:3f:c4:c4:12:01:69:00:0a:9f:bf:21:94: e9:bc:27:1f:a6:7f:04:9d:83:a6:30:71:5f:48:eb:a2:5e:88: 64:e2:f4:c2:8f:8f:c4:f5:6e:d6:a3:a6:dd:be:42:3d:0f:1b: 02:d0:f9:dd:02:4f:4c:78:3d:38:75:3b:cb:89:b4:44:7b:78: 86:d0:f7:f1:38:b9:20:8b:3b:46:4e:12:8f:14:b1:4e:9c:68: 15:7d:67:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUxMTAzMDUxMDE4WhcNMjUxMTEwMDUxMDE4WjAYMRYwFAYD VQQDEw02OTA4MzkzYS1kNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yAHZlEKTeQenEjsui6Uen/szhv6L63gCqx1tnupPUkRytGgCfse7+spMnYI SoPFzui402IEh9N79biCYzC8IvvxNiUDC6KgdO9qMAAhIUHUAhE/8a5HaPHgt6It MIjC4y6IAtNBKp8LUJr6jwkA8YIkldUkohDTI2PCAcivsy0QDtM3vstVCwV1J0RK 6Hd7sMWzpxfbrML0NlqCxO1skDtYqdHoYPt/fS9YsaIiCd7G/Jd61Wf8NVVvVXsD eavRdaQ/dJ3XlGdbXiA6MnvXI7muBQJf9IcFXJGpuqskhlzoJksafPKpLOM/ikvJ jUMxoueqbEO6bf6EiFky3ScoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyJKkqB fVZECnL7hHeI0ZZZqpPsMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVWsMA0ea4Q55cMd9Wn/a8nn+rqfVB352VLeKEsKdwGiTQPwbI2+kM L0JRh85KWAJLVhKumCaaXM4Jnz0c48hPXsdzIsfSnCg5Z9347SUkrfIpTLCG1ASh lwHIKFbVeaY7cUz9HGUF9xvlE/t62VSY3q+Q8jcoWn/1D9Rc3A0jJpwcchMsB69z XJqU3cmiWju6pESk1kZsS0XzQ9zfJ/+6QmvX242ObhY/xMQSAWkACp+/IZTpvCcf pn8EnYOmMHFfSOuiXohk4vTCj4/E9W7Wo6bdvkI9DxsC0PndAk9MeD04dTvLibRE e3iG0PfxOLkgiztGThKPFLFOnGgVfWeb -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:52 2025 by rpki-client