$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: ElxJ2xdRCo+xEU2rhEGjzrUZk+6RVeFQKxJZ2VHzxus= Subject key identifier: 76:C8:B6:28:F9:0A:91:23:1B:17:F1:84:17:56:89:A5:FA:0D:23:36 Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 04C6 Signing time: Sun 02 Nov 2025 23:48:58 +0000 Manifest this update: Sun 02 Nov 2025 23:48:58 +0000 Manifest next update: Sun 09 Nov 2025 23:48:58 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: oqbp8J4vRybntSI4T50I3bzRwcxv/miI5c1h8zomNBc=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: mciOFoWN4OGu4gy01Ach9NNCm4o/f8zqGbHO8EJqoLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: Nov 2 23:48:58 2025 GMT Not After : Nov 9 23:48:58 2025 GMT Subject: CN=6907edea-bf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:ce:81:b1:42:75:68:66:06:d6:72:f5:a2: 19:8c:53:f5:5e:f5:5f:8f:33:56:8d:80:d3:f1:f7: 88:83:22:50:df:27:63:ad:26:d6:7c:b9:9e:64:43: bc:4f:58:18:ff:65:f0:14:d1:cb:f4:12:7b:4a:b4: 78:fe:71:83:e7:61:12:8e:5a:a5:82:42:de:ac:9d: 23:21:37:49:75:bc:af:01:2e:14:9d:77:50:a6:30: 27:c9:6f:a8:3d:fb:12:b7:a4:3c:00:3a:dc:71:fd: d8:06:73:1f:a0:06:84:f5:45:a9:f1:fe:e7:40:b8: 89:ac:c0:be:0a:4f:44:25:d8:a9:7f:cf:b2:7f:82: 7f:a7:6a:8a:c4:fe:45:7b:7e:2b:28:45:aa:6b:aa: f2:51:eb:b2:84:eb:e6:21:ef:ee:f5:9d:f3:68:1c: 71:07:59:59:1f:c2:d3:97:e7:de:3c:ea:b3:b7:61: b7:90:40:c6:4b:b1:bc:2f:c3:9a:01:4a:83:b8:f3: c9:dd:2f:98:fe:51:97:f7:98:7d:f3:22:4a:b0:c6: b7:47:a0:bd:81:d1:d5:39:38:1a:71:8b:98:c4:c0: 32:68:98:30:1e:dc:2f:36:66:15:a7:fd:28:fb:a7: 55:71:60:d3:f7:81:87:fb:92:77:ee:0a:c1:49:7f: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:B6:28:F9:0A:91:23:1B:17:F1:84:17:56:89:A5:FA:0D:23:36 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:af:cd:76:9e:ec:7e:b9:e7:fc:88:b1:e1:7e:c2:bb:58: c0:1b:cd:56:2b:92:89:c8:9c:99:5b:32:44:fc:cf:da:b5:70: a2:0b:64:f3:8a:83:04:d9:87:7c:23:f1:38:d0:37:72:a1:c3: 9f:d4:3d:a5:8d:44:fb:f5:53:81:66:8f:ec:f3:9b:ad:be:d1: 6f:8e:61:55:79:85:5b:ab:6d:16:a4:58:34:99:af:43:ae:82: 0d:84:81:92:18:b3:7f:cd:dd:05:bd:09:ef:6e:e6:38:8e:98: 32:97:83:bb:d6:e3:c6:37:25:63:05:af:cc:67:d8:cf:af:72: c1:dd:a2:68:97:05:b7:be:df:d8:43:72:2a:9c:50:2c:f2:69: 6b:53:ec:3b:f2:50:7a:9c:36:34:eb:eb:37:e8:3b:30:f5:73: 4c:e1:0d:6b:1b:7a:6b:ff:55:1b:63:fa:24:61:45:52:8d:70: 1e:ad:2b:ff:2a:e7:31:5c:7b:a8:58:96:39:bb:60:11:3e:97: fd:6d:60:7c:f0:8c:94:58:d5:d9:e2:e1:4c:c7:ef:23:8d:e5: 47:91:3c:ed:5f:1c:02:fd:87:e8:8c:27:d1:2a:a6:56:65:a3: 93:36:f4:4b:7f:ef:86:39:30:f9:56:a9:5b:1a:93:17:27:5a: e1:54:82:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUxMTAyMjM0ODU4WhcNMjUxMTA5MjM0ODU4WjAYMRYwFAYD VQQDEw02OTA3ZWRlYS1iZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLHOgbFCdWhmBtZy9aIZjFP1XvVfjzNWjYDT8feIgyJQ3ydjrSbWfLmeZEO8 T1gY/2XwFNHL9BJ7SrR4/nGD52ESjlqlgkLerJ0jITdJdbyvAS4UnXdQpjAnyW+o PfsSt6Q8ADrccf3YBnMfoAaE9UWp8f7nQLiJrMC+Ck9EJdipf8+yf4J/p2qKxP5F e34rKEWqa6ryUeuyhOvmIe/u9Z3zaBxxB1lZH8LTl+fePOqzt2G3kEDGS7G8L8Oa AUqDuPPJ3S+Y/lGX95h98yJKsMa3R6C9gdHVOTgacYuYxMAyaJgwHtwvNmYVp/0o +6dVcWDT94GH+5J37grBSX9GJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbItij5 CpEjGxfxhBdWiaX6DSM2MB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBto6/Ndp7sfrnn/Iix4X7Cu1jAG81WK5KJyJyZWzJE/M/atXCiC2Tz ioME2Yd8I/E40DdyocOf1D2ljUT79VOBZo/s85utvtFvjmFVeYVbq20WpFg0ma9D roINhIGSGLN/zd0FvQnvbuY4jpgyl4O71uPGNyVjBa/MZ9jPr3LB3aJolwW3vt/Y Q3IqnFAs8mlrU+w78lB6nDY06+s36Dsw9XNM4Q1rG3pr/1UbY/okYUVSjXAerSv/ KucxXHuoWJY5u2ARPpf9bWB88IyUWNXZ4uFMx+8jjeVHkTztXxwC/YfojCfRKqZW ZaOTNvRLf++GOTD5VqlbGpMXJ1rhVILT -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:57 2025 by rpki-client