$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: akHHO42iz7yt9PQmq8Lq3uAS5vHOWxKdvbL2xaSOfoA= Subject key identifier: 98:C4:5D:2D:0D:BC:8A:6F:1A:29:71:DA:72:FF:CB:DC:E3:7B:F6:94 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 13DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 13D2 Signing time: Tue 04 Nov 2025 17:01:43 +0000 Manifest this update: Tue 04 Nov 2025 17:01:43 +0000 Manifest next update: Tue 11 Nov 2025 17:01:43 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: JQOyuf1YP9ZFPSYGqb3Dt4z9rCWJRaWxoLzaJpRrB4M=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Ps2kpMcHFW9xZn4cXtCxGzuJfkKA6kvJeaElditES+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5083 (0x13db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Nov 4 17:01:43 2025 GMT Not After : Nov 11 17:01:43 2025 GMT Subject: CN=690a3177-a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:cf:da:60:e4:70:ea:8f:07:d8:b7:3b:54: 4b:91:65:45:9a:e8:db:53:87:a4:30:cd:38:54:08: c1:d7:1c:83:1b:f1:7a:f5:ae:51:b1:5f:0d:02:4d: d6:65:3e:f2:79:51:92:48:a7:95:5a:94:b2:57:d2: 79:d7:03:89:a6:ba:91:5d:83:0a:6d:fb:12:2e:a6: 22:c7:c1:4e:df:ef:5e:59:af:b5:6b:f5:d7:06:4b: b7:76:f1:09:af:24:3d:9b:36:6b:64:08:3c:89:a4: a2:2a:da:10:6a:da:9f:bc:d7:21:a2:7c:db:ee:f2: 3b:82:c9:f3:e9:cc:17:9b:ce:eb:c3:55:37:61:29: 8c:4d:6d:3f:74:7e:b1:f4:62:c7:12:c8:a5:7f:02: db:32:9d:20:93:83:a6:77:82:27:32:d1:2a:00:3d: 8d:d5:5e:75:48:f9:e9:8f:6d:29:fd:19:2c:55:c2: b6:70:8a:a1:1a:82:d6:b4:8c:ec:d1:16:61:ca:0c: 1c:9f:6e:33:5e:8b:6c:74:58:a3:0a:6a:f7:8e:9a: c9:cb:d8:24:f4:f8:97:e0:2f:12:ff:78:59:e4:6c: 35:3a:54:5d:82:f1:5a:61:68:a9:28:06:3c:f5:30: 09:48:c1:af:7e:42:b0:54:54:2c:ec:7d:cb:f3:79: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C4:5D:2D:0D:BC:8A:6F:1A:29:71:DA:72:FF:CB:DC:E3:7B:F6:94 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b6:7a:0e:16:96:4e:e3:c8:f0:cc:ad:d9:c0:7e:a4:59:c3: d1:f1:3d:c5:26:01:43:29:c5:46:60:84:bb:2c:91:f0:24:c8: 6e:86:6e:2f:9c:59:22:78:86:5b:90:5f:9f:3a:ab:27:98:1e: bb:2b:c3:de:2e:21:db:02:f2:df:bc:c8:3e:1e:f8:12:08:fb: ba:a0:c5:7f:8b:64:f2:6d:31:93:0c:ad:2d:1c:92:73:1a:09: 14:f0:40:c4:4a:fe:f3:48:7a:7f:5d:67:ef:32:03:4d:28:de: 5b:53:38:2b:d6:72:9d:46:e1:2e:ed:81:16:ea:5b:ff:30:53: 18:5e:46:93:a9:32:d9:72:8a:c0:90:50:cf:9b:86:82:4e:f2: de:5d:16:05:30:50:84:45:1c:5c:d0:24:c5:89:1b:1a:09:a2: c5:63:ec:30:39:e9:15:16:25:59:17:d1:7b:7e:e7:94:85:ca: 57:ec:40:73:dc:d8:cb:a7:20:80:be:35:7a:8a:bc:25:02:a8: 26:7b:dd:f7:1d:20:22:1f:c7:5b:79:73:ff:b9:aa:da:b8:0f: 35:05:4c:90:b5:35:e2:e2:d7:c8:c8:12:2f:59:94:54:47:d2: 55:b3:50:bb:55:46:90:84:53:5a:a2:dc:07:47:f1:ce:28:79: 34:ce:3e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUxMTA0MTcwMTQzWhcNMjUxMTExMTcwMTQzWjAYMRYwFAYD VQQDEw02OTBhMzE3Ny1hMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mHP2mDkcOqPB9i3O1RLkWVFmujbU4ekMM04VAjB1xyDG/F69a5RsV8NAk3W ZT7yeVGSSKeVWpSyV9J51wOJprqRXYMKbfsSLqYix8FO3+9eWa+1a/XXBku3dvEJ ryQ9mzZrZAg8iaSiKtoQatqfvNchonzb7vI7gsnz6cwXm87rw1U3YSmMTW0/dH6x 9GLHEsilfwLbMp0gk4Omd4InMtEqAD2N1V51SPnpj20p/RksVcK2cIqhGoLWtIzs 0RZhygwcn24zXotsdFijCmr3jprJy9gk9PiX4C8S/3hZ5Gw1OlRdgvFaYWipKAY8 9TAJSMGvfkKwVFQs7H3L83nN6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjEXS0N vIpvGilx2nL/y9zje/aUMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBntnoOFpZO48jwzK3ZwH6kWcPR8T3FJgFDKcVGYIS7LJHwJMhuhm4v nFkieIZbkF+fOqsnmB67K8PeLiHbAvLfvMg+HvgSCPu6oMV/i2TybTGTDK0tHJJz GgkU8EDESv7zSHp/XWfvMgNNKN5bUzgr1nKdRuEu7YEW6lv/MFMYXkaTqTLZcorA kFDPm4aCTvLeXRYFMFCERRxc0CTFiRsaCaLFY+wwOekVFiVZF9F7fueUhcpX7EBz 3NjLpyCAvjV6irwlAqgme933HSAiH8dbeXP/uarauA81BUyQtTXi4tfIyBIvWZRU R9JVs1C7VUaQhFNaotwHR/HOKHk0zj5V -----END CERTIFICATE-----Generated at Tue Nov 4 18:41:01 2025 by rpki-client