$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: nTM4Y/Ym4OSKjE0OqPua6zxXc/wq/jdgXUvsjzFztnk= Subject key identifier: 37:2C:B3:FC:58:38:1E:31:21:C5:FC:3D:2D:2D:E1:9D:D2:81:99:8E Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: D5 Signing time: Mon 03 Nov 2025 05:37:06 +0000 Manifest this update: Mon 03 Nov 2025 05:37:05 +0000 Manifest next update: Mon 10 Nov 2025 05:37:05 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: dg1bk6OqHjtPTmGUBQ+TX9VNMG+UCsmLv3azIFORI7E=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: AxDsA8rt+K98y/uEnY4JUiHZ0XXqFDNJTlI0IgqxxqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Nov 3 05:37:05 2025 GMT Not After : Nov 10 05:37:05 2025 GMT Subject: CN=69083f81-df8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:9b:20:72:34:5e:3a:69:5f:36:ce:55:c3: 98:eb:4f:fe:44:6b:b9:c9:4c:54:50:e3:fe:4f:2b: 2c:a7:74:3d:46:e0:94:59:42:0e:48:81:aa:5c:95: f9:72:aa:a5:01:e4:b5:fd:9d:c0:78:74:1a:7f:5d: 90:8c:d8:fc:13:af:90:52:75:d9:73:fd:df:1b:e9: 54:f6:31:70:85:67:25:97:8f:ff:62:9c:39:02:04: 7e:60:0f:26:8d:6b:13:a2:b8:91:30:92:2f:cf:83: 02:02:81:67:2f:bb:40:91:83:5f:34:08:1d:ec:f2: dc:cd:d5:2f:b5:41:0c:15:f0:c3:51:99:98:e9:4e: 8e:d8:1d:be:cc:58:15:6b:55:c4:f2:f4:a6:eb:15: fc:ea:9d:c7:86:e6:fb:59:33:ce:82:79:3f:0e:c2: 2f:76:c5:59:4b:4a:f7:80:5c:7f:f2:fa:91:d1:bb: bf:3b:f3:f7:5f:ce:2d:2c:89:8a:ce:40:3a:04:31: 40:b4:f1:38:44:0c:62:16:d7:f5:51:f0:6a:91:90: 32:d1:42:a0:cd:f9:ff:1c:c7:e7:5b:20:20:c6:8b: 59:ab:9d:48:47:fd:41:ca:3d:b1:02:c7:d2:3e:06: cf:59:32:6b:67:99:3a:43:a0:77:34:6d:4d:68:3b: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:B3:FC:58:38:1E:31:21:C5:FC:3D:2D:2D:E1:9D:D2:81:99:8E X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f3:ef:f0:b2:37:99:00:9e:57:c4:98:69:94:a4:65:84:43: 07:7d:51:86:4d:ee:b5:4b:4d:ed:15:07:24:e8:59:1f:c6:55: 03:6c:d6:e4:6d:f9:db:87:a3:3a:40:4d:80:26:f7:af:a4:23: 87:e8:a5:75:57:25:15:14:b3:f1:9d:54:28:12:c9:88:b6:c1: ed:ef:8f:74:e9:c2:e9:df:1b:cc:d9:ed:73:65:ec:2f:b1:43: 8e:d0:9a:72:28:87:02:58:29:21:e4:f3:a0:1e:ce:83:d8:8b: e0:7d:a2:82:5e:c4:e9:11:e8:6b:7c:b2:82:ed:1a:8a:a7:64: a6:9d:2a:5b:67:d8:9a:6b:bc:b2:1c:68:cd:f0:b7:8f:af:39: a6:54:26:32:6f:8e:e2:1e:c4:55:1e:a8:f4:f0:d9:a5:a3:cd: 01:4a:af:6c:40:01:ec:ef:a0:fa:41:74:b2:96:ac:c4:7f:8d: b5:10:c0:20:a6:7a:d1:5a:ab:62:63:c9:2a:25:7b:e6:fb:62: 67:be:2a:94:54:43:1d:64:9d:e1:75:7f:51:db:0a:b6:f2:c1: 2c:dd:02:3a:a3:2a:b7:94:e6:2b:cb:b7:99:ec:65:59:98:ec: 1d:14:4d:a4:db:ad:fa:05:c2:99:18:04:40:24:c9:f7:da:6f: ba:0a:8f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUxMTAzMDUzNzA1WhcNMjUxMTEwMDUzNzA1WjAYMRYwFAYD VQQDEw02OTA4M2Y4MS1kZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/GbIHI0XjppXzbOVcOY60/+RGu5yUxUUOP+Tyssp3Q9RuCUWUIOSIGqXJX5 cqqlAeS1/Z3AeHQaf12QjNj8E6+QUnXZc/3fG+lU9jFwhWcll4//Ypw5AgR+YA8m jWsToriRMJIvz4MCAoFnL7tAkYNfNAgd7PLczdUvtUEMFfDDUZmY6U6O2B2+zFgV a1XE8vSm6xX86p3Hhub7WTPOgnk/DsIvdsVZS0r3gFx/8vqR0bu/O/P3X84tLImK zkA6BDFAtPE4RAxiFtf1UfBqkZAy0UKgzfn/HMfnWyAgxotZq51IR/1Byj2xAsfS PgbPWTJrZ5k6Q6B3NG1NaDsZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcss/xY OB4xIcX8PS0t4Z3SgZmOMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ8+/wsjeZAJ5XxJhplKRlhEMHfVGGTe61S03tFQck6FkfxlUDbNbk bfnbh6M6QE2AJvevpCOH6KV1VyUVFLPxnVQoEsmItsHt74906cLp3xvM2e1zZewv sUOO0JpyKIcCWCkh5POgHs6D2IvgfaKCXsTpEehrfLKC7RqKp2SmnSpbZ9iaa7yy HGjN8LePrzmmVCYyb47iHsRVHqj08Nmlo80BSq9sQAHs76D6QXSylqzEf421EMAg pnrRWqtiY8kqJXvm+2JnviqUVEMdZJ3hdX9R2wq28sEs3QI6oyq3lOYry7eZ7GVZ mOwdFE2k2636BcKZGARAJMn32m+6Co+O -----END CERTIFICATE-----Generated at Tue Nov 4 08:14:08 2025 by rpki-client