$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: aekYGOXSvhLRzq8c2KfoOO+p4/N1CCKQnsdbl5xByUU= Subject key identifier: 6D:61:A1:A9:95:AC:81:C3:2B:EB:7E:45:C2:3A:5E:66:73:AC:23:74 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 39 Signing time: Wed 05 Nov 2025 07:46:26 +0000 Manifest this update: Wed 05 Nov 2025 07:46:25 +0000 Manifest next update: Wed 12 Nov 2025 07:46:25 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: lIE34nW03AGCTFanXjd3/ly4mHDHF0Ba00QRB1ywPjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Nov 5 07:46:25 2025 GMT Not After : Nov 12 07:46:25 2025 GMT Subject: CN=690b00d2-e7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:b7:d4:18:fd:31:a9:e8:d1:da:70:b3:0f: 10:12:cc:43:32:bd:5d:c4:70:5b:6b:65:4b:fc:1f: 19:99:d9:bd:c7:0f:a0:d6:80:45:4c:b8:d8:2b:b1: 59:d2:ec:2c:76:1a:53:fd:d5:58:94:d2:7b:6f:5e: 20:ce:b6:c4:24:aa:01:e2:9e:60:8e:d0:8b:f0:04: 68:5a:f4:71:2d:47:cb:9b:3f:a7:a2:ac:ba:38:34: bf:99:8a:e1:28:d4:2c:8e:4a:51:ed:7c:8b:b8:59: c2:69:0b:19:4a:e3:c7:d9:26:54:68:b1:61:0f:cd: 9b:6f:0b:c9:97:0d:ad:d1:1b:08:76:b6:e3:86:41: f7:6c:7f:d8:d1:a1:f7:9c:b9:f7:c5:48:47:98:a8: ca:c5:40:fb:6e:f6:3d:ee:28:a6:82:ae:76:04:27: b8:f7:8b:f9:c5:7b:ac:f2:91:6e:b3:2f:2a:5b:9c: 95:18:c7:e5:d3:3a:20:0d:36:5a:85:2f:9a:fe:18: f2:d4:31:db:dc:03:8a:0e:b1:07:5a:86:da:64:fa: 2d:17:90:78:5d:63:68:a9:9e:3b:bd:c9:8a:9f:50: 62:59:b1:4a:07:a9:ac:56:1a:8c:e6:b4:12:e8:2a: bc:f1:c3:26:70:3a:8b:c4:c9:ce:00:90:6e:b6:db: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:A1:A9:95:AC:81:C3:2B:EB:7E:45:C2:3A:5E:66:73:AC:23:74 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:56:4d:21:0b:d4:ae:cf:66:77:1f:1a:00:13:0d:0e:27:09: 26:b8:21:e2:ad:a3:49:cd:22:b6:77:ff:c1:6c:bf:c9:a7:93: cd:fd:d3:3a:7b:e0:32:92:f7:3b:cd:b5:71:1e:02:41:57:d6: 45:2e:12:9e:c7:74:06:71:45:1f:34:32:38:bb:d9:a5:1b:55: d1:c5:0c:37:37:6f:6d:00:f3:5e:02:47:39:52:3d:95:ca:a6: 42:36:fe:59:a2:c2:56:47:a3:78:8f:55:26:81:db:f1:27:66: 5a:b4:19:a8:d4:aa:bf:85:27:f8:18:3a:27:63:13:f3:ce:76: f5:92:88:63:c7:ad:ae:52:d5:22:32:7a:f8:43:db:1c:26:b6: b1:46:c5:a8:ed:14:15:59:92:4c:19:48:0e:13:11:9f:bd:5f: 53:93:ac:1d:69:d0:2d:cb:3d:d5:bb:a8:e1:13:48:cb:55:e8: 5e:64:3b:8d:11:3d:28:71:34:9b:8b:c2:e6:fe:0b:0a:54:87: 1e:18:72:de:37:5c:25:65:96:c8:69:b1:e3:5c:4d:86:74:e4: e4:38:10:c6:90:4c:c8:af:70:c0:4a:a3:c7:07:5d:f7:b3:e0: 2c:6c:6b:f9:1d:0f:10:fb:3e:b4:01:37:69:76:37:62:a8:32: ca:79:aa:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0 OURDMERCNzAeFw0yNTExMDUwNzQ2MjVaFw0yNTExMTIwNzQ2MjVaMBgxFjAUBgNV BAMTDTY5MGIwMGQyLWU3YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3W7fUGP0xqejR2nCzDxASzEMyvV3EcFtrZUv8HxmZ2b3HD6DWgEVMuNgrsVnS 7Cx2GlP91ViU0ntvXiDOtsQkqgHinmCO0IvwBGha9HEtR8ubP6eirLo4NL+ZiuEo 1CyOSlHtfIu4WcJpCxlK48fZJlRosWEPzZtvC8mXDa3RGwh2tuOGQfdsf9jRofec uffFSEeYqMrFQPtu9j3uKKaCrnYEJ7j3i/nFe6zykW6zLypbnJUYx+XTOiANNlqF L5r+GPLUMdvcA4oOsQdahtpk+i0XkHhdY2ipnju9yYqfUGJZsUoHqaxWGozmtBLo KrzxwyZwOovEyc4AkG622zcRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbWGhqZWs gcMr635FwjpeZnOsI3QwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG YzFYVGFRdmpzZTBuY0RiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMtWTSEL1K7PZncfGgATDQ4nCSa4IeKto0nNIrZ3/8Fsv8mnk8390zp7 4DKS9zvNtXEeAkFX1kUuEp7HdAZxRR80Mji72aUbVdHFDDc3b20A814CRzlSPZXK pkI2/lmiwlZHo3iPVSaB2/EnZlq0GajUqr+FJ/gYOidjE/POdvWSiGPHra5S1SIy evhD2xwmtrFGxajtFBVZkkwZSA4TEZ+9X1OTrB1p0C3LPdW7qOETSMtV6F5kO40R PShxNJuLwub+CwpUhx4Yct43XCVllshpseNcTYZ05OQ4EMaQTMivcMBKo8cHXfez 4Cxsa/kdDxD7PrQBN2l2N2KoMsp5qkA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:36 2025 by rpki-client