$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json) Hash identifier: sYP+XWdqq1PNy6mOydISYjph93Owg49m38/8j5LVekg= Subject key identifier: 1C:90:F7:F5:4F:05:A7:4F:4B:FF:0E:01:27:5F:86:65:2D:6B:12:3B Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft Manifest number: 02 Signing time: Mon 03 Nov 2025 06:56:57 +0000 Manifest this update: Mon 03 Nov 2025 06:56:57 +0000 Manifest next update: Mon 10 Nov 2025 06:56:57 +0000 Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: qghDd9cEdw8ZYcM5jnZ4zQQcrxuucMf0u+Py98DmUN8=) 2: 4813CD7CB88211F0B689684AC4F9AE02.roa (hash: nxa5+HZlpRX/lbOxWkTwa/AB6o+F9Q2zmcbimMACVmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Nov 3 06:56:57 2025 GMT Not After : Nov 10 06:56:57 2025 GMT Subject: CN=69085239-17eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:05:05:b8:b9:db:c1:23:23:03:b8:6e:7a: bf:a8:9c:c4:ac:af:1d:4a:ab:f7:36:a7:db:cb:fb: d9:9c:93:ab:6b:2b:4d:73:05:21:bc:ca:15:73:1e: 76:52:6f:96:7a:c5:9b:bd:39:33:85:56:7b:24:8a: 92:89:e9:60:27:05:e9:0d:59:ce:4d:3b:b1:44:83: b8:02:9c:a4:0b:39:ae:e7:ef:cb:83:ed:b9:d8:ee: 47:d4:93:75:ea:92:a1:38:6a:8a:a1:ea:58:c6:ba: 9a:34:df:f5:7d:63:49:38:cf:d6:62:f2:9d:e7:1c: 6d:13:fb:01:48:ff:88:8a:51:04:0e:3a:1d:46:42: f9:f9:d0:3b:59:2d:b4:59:5a:4b:75:88:41:22:b9: 50:4e:20:4d:d5:d5:84:22:95:39:af:24:21:5c:35: c4:8e:85:01:94:0b:c9:87:41:2c:8b:cf:03:fd:a8: 4f:e7:90:5a:ca:3f:42:19:9a:c8:15:f1:a0:25:c9: 4b:7c:10:2b:21:57:c3:b2:50:3c:83:d6:5c:e8:3c: 51:81:cf:24:6e:06:e3:48:1f:bd:d4:98:cc:3f:73: fc:17:a2:62:17:41:48:f9:ee:0c:9b:a1:e7:fb:3c: a8:fe:eb:d1:42:a8:8f:51:93:16:6d:46:61:8c:79: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:F7:F5:4F:05:A7:4F:4B:FF:0E:01:27:5F:86:65:2D:6B:12:3B X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7f:ba:0a:c2:19:8a:f4:47:71:9b:45:ca:e3:2f:4b:7c:43: 72:b6:30:8a:49:ba:20:5c:26:42:e2:52:f7:80:64:77:1a:4d: f6:60:da:08:0f:56:a4:27:ca:76:05:ec:44:2c:46:f7:cf:8b: de:c6:13:2d:c7:10:b2:48:21:0d:97:cd:ec:76:ea:4a:c8:bf: 3a:11:4f:65:11:ba:7b:c9:67:bd:f8:e6:f2:fb:b6:91:dd:b7: 94:1f:22:17:85:34:33:f8:5a:22:f0:8b:23:e8:a4:45:8f:c5: 52:5e:ed:5b:7d:9d:cd:64:cb:40:e3:6c:04:e8:30:7f:44:d1: c7:71:16:cc:1e:70:10:76:13:01:17:cd:b0:ae:2f:7c:f9:a9: 25:f8:f2:06:cd:73:21:ae:7d:0c:10:81:63:f3:40:a4:51:3e: a4:8a:a5:c6:1e:23:0f:bf:df:35:88:a3:07:6e:11:f3:ab:82: 74:0b:39:13:41:95:6e:c4:f6:6e:41:73:80:a3:b9:67:d1:76: dd:a2:af:07:f4:f3:04:90:1b:24:c8:f9:8f:35:9a:47:de:97: 63:04:80:be:f5:d2:43:e4:e6:1b:8c:34:b0:e5:fd:14:0b:b9: ee:71:0f:02:22:78:4f:6d:30:de:a9:8c:10:ff:39:31:05:1e: cc:48:db:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkVDMjExMC8GA1UEBRMoNzQ1RDU3N0Y1QjhFN0Q0RjhEQjQ5QThEQjlBQ0IxM0ZD MjVBQTIzMzAeFw0yNTExMDMwNjU2NTdaFw0yNTExMTAwNjU2NTdaMBgxFjAUBgNV BAMTDTY5MDg1MjM5LTE3ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgBQUFuLnbwSMjA7huer+onMSsrx1Kq/c2p9vL+9mck6trK01zBSG8yhVzHnZS b5Z6xZu9OTOFVnskipKJ6WAnBekNWc5NO7FEg7gCnKQLOa7n78uD7bnY7kfUk3Xq kqE4aoqh6ljGupo03/V9Y0k4z9Zi8p3nHG0T+wFI/4iKUQQOOh1GQvn50DtZLbRZ Wkt1iEEiuVBOIE3V1YQilTmvJCFcNcSOhQGUC8mHQSyLzwP9qE/nkFrKP0IZmsgV 8aAlyUt8ECshV8OyUDyD1lzoPFGBzyRuBuNIH73UmMw/c/wXomIXQUj57gyboef7 PKj+69FCqI9RkxZtRmGMeXGdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHJD39U8F p09L/w4BJ1+GZS1rEjswHwYDVR0jBBgwFoAUdF1Xf1uOfU+NtJqNuayxP8JaojMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRUMyL0I4MkE5QTFDQjg3 RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9q TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEYxWGYxdU9mVS1OdEpxTnVheXhQOEphb2pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RUMyL0I4MkE5QTFDQjg3RjExRjA4NzFBRkY0MkM0RjlBRTAyL2RGMVhmMXVPZlUt TnRKcU51YXl4UDhKYW9qTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZ/ugrCGYr0R3GbRcrjL0t8Q3K2MIpJuiBcJkLiUveAZHcaTfZg2ggP VqQnynYF7EQsRvfPi97GEy3HELJIIQ2Xzex26krIvzoRT2URunvJZ7345vL7tpHd t5QfIheFNDP4WiLwiyPopEWPxVJe7Vt9nc1ky0DjbAToMH9E0cdxFswecBB2EwEX zbCuL3z5qSX48gbNcyGufQwQgWPzQKRRPqSKpcYeIw+/3zWIowduEfOrgnQLORNB lW7E9m5Bc4CjuWfRdt2irwf08wSQGyTI+Y81mkfel2MEgL710kPk5huMNLDl/RQL ue5xDwIieE9tMN6pjBD/OTEFHsxI28M= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:42 2025 by rpki-client