$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: hFuJApV1WCQm4H2A3aJCPNLw1YiIN2m2dsZR36//4PA= Subject key identifier: A6:4D:FF:16:B3:02:43:DE:75:8D:C0:32:F0:C0:DD:44:31:F7:DE:7A Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 1716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 1706 Signing time: Tue 04 Nov 2025 16:44:03 +0000 Manifest this update: Tue 04 Nov 2025 16:44:02 +0000 Manifest next update: Tue 11 Nov 2025 16:44:02 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: DEoGFgDC3ueVl5jvd9Zgg+6OTfFlANVsdH6YUM8oIkk=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: h+OprAj4V1ZkpAEr5nFzxG5bkNU3flbAc659nqXKwps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5910 (0x1716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Nov 4 16:44:02 2025 GMT Not After : Nov 11 16:44:02 2025 GMT Subject: CN=690a2d52-f101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:77:1c:9f:25:78:9f:0f:68:a5:80:fa:55: a5:ac:83:68:1c:ac:95:40:e0:29:44:11:ba:b3:ee: 18:e8:9d:fb:f9:ba:30:f2:c9:91:d0:a5:df:7a:68: ed:bd:05:4e:2e:87:a9:85:a1:15:44:b5:e5:0b:51: 71:3e:d8:e2:62:13:34:bc:9b:20:32:9f:0b:53:3a: 54:e3:27:02:e8:d5:af:3d:9a:1c:1d:0c:26:f6:82: d2:11:41:fc:9b:f0:00:a7:ed:04:12:a4:f2:f7:4b: cd:da:aa:71:2b:16:f7:04:0e:49:f1:c5:63:f4:15: 7a:05:13:87:49:d2:11:4a:c0:23:c6:70:11:17:86: 2c:bb:ac:26:45:f5:b9:4b:8f:93:60:2a:41:24:ce: 76:5b:bf:31:fd:3b:a4:9a:c7:82:9e:4f:12:ae:6e: 33:e3:13:70:37:4d:ed:ee:75:32:fb:0b:61:e1:c0: 98:e5:1f:36:40:3d:04:3f:05:6e:f7:a0:75:bb:eb: b1:99:8c:3c:26:de:91:db:31:60:b0:c9:16:ef:86: b2:a4:93:d7:24:4e:6c:a0:52:73:f7:1e:d9:2e:ca: 3f:22:fe:fd:f8:54:ac:5c:19:69:94:2a:01:67:54: 02:fc:42:05:bc:ff:63:78:c0:21:43:2f:b5:30:bb: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:FF:16:B3:02:43:DE:75:8D:C0:32:F0:C0:DD:44:31:F7:DE:7A X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:32:c6:91:6c:4e:64:ae:95:f1:78:b8:28:11:0b:50:68: b8:51:4a:eb:df:53:4d:df:66:f6:3b:d2:04:a6:e0:8a:d1:72: 83:4f:b3:f1:fe:12:a6:00:04:ef:cd:eb:67:cd:2f:23:03:0a: 63:30:7e:03:7b:b8:4c:56:ea:e1:d1:30:db:9a:f8:51:cd:bc: 07:1e:52:07:3f:b2:24:9c:92:25:c7:ed:6c:e1:64:ef:38:4b: e7:13:29:da:aa:99:81:8e:0a:e4:6f:c9:c3:4f:a8:92:42:34: e7:a9:b9:73:ab:fa:04:72:9b:6b:24:ee:e0:c2:07:88:ac:c1: fc:b9:ad:29:93:2f:61:65:a1:fc:65:ba:81:cc:03:2f:e3:69: 2e:32:27:08:16:d5:a6:01:e1:13:0d:45:5c:fd:ce:e0:62:f5: 3a:51:87:11:f5:70:75:d6:07:89:96:40:e8:fc:eb:f2:94:7e: 1e:c0:d5:4b:eb:c7:24:eb:9a:f2:73:33:fe:12:b8:cb:21:af: f9:e8:f9:0b:f7:09:0a:91:3b:8a:91:41:b4:e3:d1:90:89:6e: c2:47:df:f5:d8:52:2d:68:25:12:fd:b3:7a:57:4f:6e:65:72: ef:1b:cb:6a:09:f4:05:2e:91:41:77:2a:2f:9a:d9:e5:db:36: 2f:da:8f:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUxMTA0MTY0NDAyWhcNMjUxMTExMTY0NDAyWjAYMRYwFAYD VQQDEw02OTBhMmQ1Mi1mMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeB3HJ8leJ8PaKWA+lWlrINoHKyVQOApRBG6s+4Y6J37+bow8smR0KXfemjt vQVOLoephaEVRLXlC1FxPtjiYhM0vJsgMp8LUzpU4ycC6NWvPZocHQwm9oLSEUH8 m/AAp+0EEqTy90vN2qpxKxb3BA5J8cVj9BV6BROHSdIRSsAjxnARF4Ysu6wmRfW5 S4+TYCpBJM52W78x/TukmseCnk8Srm4z4xNwN03t7nUy+wth4cCY5R82QD0EPwVu 96B1u+uxmYw8Jt6R2zFgsMkW74aypJPXJE5soFJz9x7ZLso/Iv79+FSsXBlplCoB Z1QC/EIFvP9jeMAhQy+1MLsw2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZN/xaz AkPedY3AMvDA3UQx9956MB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMfzLGkWxOZK6V8Xi4KBELUGi4UUrr31NN32b2O9IEpuCK0XKDT7Px /hKmAATvzetnzS8jAwpjMH4De7hMVurh0TDbmvhRzbwHHlIHP7IknJIlx+1s4WTv OEvnEynaqpmBjgrkb8nDT6iSQjTnqblzq/oEcptrJO7gwgeIrMH8ua0pky9hZaH8 ZbqBzAMv42kuMicIFtWmAeETDUVc/c7gYvU6UYcR9XB11geJlkDo/OvylH4ewNVL 68ck65ryczP+ErjLIa/56PkL9wkKkTuKkUG049GQiW7CR9/12FItaCUS/bN6V09u ZXLvG8tqCfQFLpFBdyovmtnl2zYv2o/3 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:50 2025 by rpki-client