$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: vZjvDwzwu1a1VAiW6w2HVTeXA/cKSgEmO349YtwMNaw= Subject key identifier: 55:9F:9E:F0:FF:1F:FD:D5:50:F8:B4:9B:29:4D:87:C6:68:10:A0:A6 Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 0646 Signing time: Tue 04 Nov 2025 22:47:54 +0000 Manifest this update: Tue 04 Nov 2025 22:47:53 +0000 Manifest next update: Tue 11 Nov 2025 22:47:53 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: eAoroJgbmnL3RiouRv3ukEX1btHsr1wiTRQ5cOS9Ks4=) 2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 79HGgLT4UvpWXoWIU4dQI1xmx9s6FLe8XfJ4mBLvcew=) 3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: ncmb5q9rR1siQY10NSuWDQXTtyorRNilXo5iuSRTX3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: Nov 4 22:47:53 2025 GMT Not After : Nov 11 22:47:53 2025 GMT Subject: CN=690a8299-9e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:67:8f:c6:3a:3c:13:6c:d7:4a:c5:c5:c6: ee:20:a2:f0:44:b6:40:ee:bd:e9:66:25:41:cf:37: 0e:2e:9b:95:3b:1d:5c:f0:d9:d4:75:7a:ab:4c:99: 04:17:36:7e:77:24:4d:30:01:76:df:d7:de:0f:a7: b3:11:12:e6:e2:f7:50:c6:0e:bf:c6:02:6c:d2:bd: c9:d0:73:52:ed:11:aa:3f:c9:cd:5b:07:09:2e:6c: 97:48:fb:3a:d0:1e:ed:db:f7:14:bc:79:82:a5:62: 14:f6:ba:42:d5:f9:05:48:70:db:d1:9d:0d:08:be: 6a:21:fe:7b:3c:9c:71:12:3d:a5:21:4e:a2:34:28: 76:e8:2d:d0:7d:e2:13:c1:54:61:d4:ed:87:20:44: b7:34:9a:a7:da:36:e6:e3:ed:59:ae:86:9b:2a:65: 2b:bb:89:9b:8f:c5:bb:a5:ea:c0:03:78:a9:9c:d9: 06:aa:02:d6:a1:1a:13:cc:86:f0:93:e5:be:83:2e: 3e:42:2f:dc:2b:d3:de:7f:2a:0e:df:18:3a:ba:94: d7:35:73:28:ac:a1:b6:20:2a:65:ca:6f:1a:80:4d: 22:35:d6:70:87:fe:d1:07:26:d2:40:14:42:94:06: 56:63:18:73:9a:92:94:f4:3f:de:6d:e1:f7:45:31: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9F:9E:F0:FF:1F:FD:D5:50:F8:B4:9B:29:4D:87:C6:68:10:A0:A6 X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fe:8d:43:f1:c6:0a:c0:23:68:4e:46:c9:d1:04:56:c3:1a: 99:a1:1c:b9:ce:9e:c0:12:36:8a:d4:01:56:c6:60:c0:45:a3: ad:5e:23:09:17:0d:35:26:33:3e:f1:f2:ef:1b:37:c8:6a:9c: a3:f5:55:8e:b9:be:ce:5a:d5:ea:f4:e1:03:45:0f:0b:f0:b5: 77:79:76:b4:88:0a:00:7a:b8:d1:76:7d:b2:7f:e6:e2:67:d6: 43:bd:89:cb:5c:10:e0:92:92:a4:c2:f3:23:25:fb:58:94:9f: 7c:9a:16:96:b1:2f:18:73:9b:d6:2b:74:47:8e:94:47:07:d1: 90:1a:c0:fc:a7:99:61:76:4e:a2:e3:d3:1b:7a:c4:bf:ab:c8: dc:18:c0:f3:db:b2:9f:8c:7d:3a:e1:c0:7c:53:91:1a:3c:d3: 1a:d5:f4:d2:42:a2:43:b0:d5:71:58:da:05:6d:37:8f:8e:65: aa:47:a3:23:01:cd:d5:8e:5e:6a:17:d4:53:ff:38:10:05:7e: fe:99:56:47:5f:d7:93:e7:82:d6:96:8d:5b:db:16:3d:64:d3: b2:db:9c:c6:2e:4a:12:71:8a:a8:a9:24:21:fd:b9:2e:9a:da: 8a:de:ed:53:9b:f0:ab:a8:1b:71:1b:b9:49:16:bf:b2:e9:1f: 0d:a2:08:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjUxMTA0MjI0NzUzWhcNMjUxMTExMjI0NzUzWjAYMRYwFAYD VQQDEw02OTBhODI5OS05ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tVnj8Y6PBNs10rFxcbuIKLwRLZA7r3pZiVBzzcOLpuVOx1c8NnUdXqrTJkE FzZ+dyRNMAF239feD6ezERLm4vdQxg6/xgJs0r3J0HNS7RGqP8nNWwcJLmyXSPs6 0B7t2/cUvHmCpWIU9rpC1fkFSHDb0Z0NCL5qIf57PJxxEj2lIU6iNCh26C3QfeIT wVRh1O2HIES3NJqn2jbm4+1ZroabKmUru4mbj8W7perAA3ipnNkGqgLWoRoTzIbw k+W+gy4+Qi/cK9PefyoO3xg6upTXNXMorKG2ICplym8agE0iNdZwh/7RBybSQBRC lAZWYxhzmpKU9D/ebeH3RTGtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWfnvD/ H/3VUPi0mylNh8ZoEKCmMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/o1D8cYKwCNoTkbJ0QRWwxqZoRy5zp7AEjaK1AFWxmDARaOtXiMJ Fw01JjM+8fLvGzfIapyj9VWOub7OWtXq9OEDRQ8L8LV3eXa0iAoAerjRdn2yf+bi Z9ZDvYnLXBDgkpKkwvMjJftYlJ98mhaWsS8Yc5vWK3RHjpRHB9GQGsD8p5lhdk6i 49MbesS/q8jcGMDz27KfjH064cB8U5EaPNMa1fTSQqJDsNVxWNoFbTePjmWqR6Mj Ac3Vjl5qF9RT/zgQBX7+mVZHX9eT54LWlo1b2xY9ZNOy25zGLkoScYqoqSQh/bku mtqK3u1Tm/CrqBtxG7lJFr+y6R8NoggI -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:52 2025 by rpki-client