$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json) Hash identifier: VLF4aN/qtox5k9tO0bVr4pyX50Jhu1sPFjkZLFX+VQA= Subject key identifier: EB:3F:44:B0:A8:76:BC:5D:62:B5:9D:A4:AA:5B:11:A5:56:F1:8F:5B Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft Manifest number: 0BCE Signing time: Tue 04 Nov 2025 19:00:11 +0000 Manifest this update: Tue 04 Nov 2025 19:00:11 +0000 Manifest next update: Tue 11 Nov 2025 19:00:11 +0000 Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: 5nR6LczWAkIseHvQXzpz30eDzsZSH7cabXCjGc9cKY8=) 2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Validity Not Before: Nov 4 19:00:11 2025 GMT Not After : Nov 11 19:00:11 2025 GMT Subject: CN=690a4d3b-1774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:be:47:08:fd:2d:41:b2:f2:02:68:7b:ad: 13:43:77:4a:21:e9:d6:0c:8b:55:db:bc:fc:f9:50: f7:45:75:c0:23:e9:91:a6:89:fa:37:a8:6b:cb:91: e5:74:1c:07:bc:59:52:1f:d5:e8:c1:9b:a8:a9:5b: 31:27:73:47:74:e5:dc:6b:96:62:95:0b:26:c8:0d: b8:6d:da:35:b8:74:bc:d5:64:c5:97:e0:e5:dc:02: 71:6d:29:f8:d6:8f:8f:1b:c9:a5:fe:d6:a2:7e:2a: 2b:fc:78:7e:88:01:a4:ea:b6:7c:9a:0f:78:77:d6: 39:29:c5:ad:cd:99:7e:47:07:b1:5b:2c:56:f4:f0: ef:04:9a:18:53:c2:b2:c7:75:37:88:d7:58:9b:75: 3c:4f:79:5b:cd:48:b3:2b:87:1b:a6:86:ca:4a:aa: 84:02:64:e4:f9:fa:7b:76:58:ac:45:f7:48:db:eb: 0f:f3:03:6a:6a:73:87:03:72:d9:23:d6:a0:d8:9a: 12:5d:e1:bb:5d:56:1b:dd:62:97:84:91:87:38:dc: 1d:97:f3:93:8a:5b:b5:ee:30:57:57:8c:d2:88:f4: 26:b9:6b:cd:14:86:d6:b6:07:c1:50:09:c8:14:5b: 4c:4c:cb:a5:6f:74:57:4f:27:bc:c6:32:45:b1:ad: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3F:44:B0:A8:76:BC:5D:62:B5:9D:A4:AA:5B:11:A5:56:F1:8F:5B X509v3 Authority Key Identifier: keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cd:b4:ad:18:cc:04:a7:8d:3e:0f:2b:a8:d4:57:4b:8f:d5: 17:db:f0:cd:7b:e4:10:9e:ba:58:d4:22:19:29:25:0a:56:45: 58:24:c2:65:db:56:08:66:1a:e4:28:b1:67:1d:4b:55:4e:1b: 2d:91:5d:1d:5c:ca:76:b3:a6:e8:3a:a0:7a:2f:55:7d:ef:e6: 08:9e:12:d2:4e:e4:06:fa:14:b1:4d:03:5a:14:1c:9c:d4:12: cd:14:b2:cd:28:0f:0e:a2:e3:50:5e:5d:e5:24:ae:6d:a0:fe: b5:25:4a:43:b3:2c:6e:80:f9:0e:7c:70:98:67:06:26:fc:a4: 23:4e:aa:2d:0a:e8:5a:16:91:9d:8a:2e:6b:96:db:c3:ed:08: b9:29:7f:d1:bf:93:bf:3a:74:d2:86:6c:1f:42:88:99:d1:45: 39:fa:43:2c:8e:aa:38:c1:f7:29:9b:ae:94:ea:0f:40:15:d2: 73:dd:f5:e9:13:2e:3b:fd:60:58:08:93:ef:ff:91:72:86:cc: 5c:a0:1c:9e:dc:17:cd:7d:a6:ee:db:53:51:b7:71:a6:3b:0f: db:09:a1:98:1b:c9:41:7f:a9:9e:0c:39:47:7e:cd:2c:1e:4c: 0c:0e:1f:3c:e7:2a:5e:2e:b9:70:55:5d:73:48:bb:dc:aa:32: c3:1b:4a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFODkxMTAvBgNVBAUTKDBERkQ4MDFFRTk2NjIyRUQxN0RGNTVEN0FBQTY0Qzcx RUZGOUI3QkQwHhcNMjUxMTA0MTkwMDExWhcNMjUxMTExMTkwMDExWjAYMRYwFAYD VQQDEw02OTBhNGQzYi0xNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohK+Rwj9LUGy8gJoe60TQ3dKIenWDItV27z8+VD3RXXAI+mRpon6N6hry5Hl dBwHvFlSH9XowZuoqVsxJ3NHdOXca5ZilQsmyA24bdo1uHS81WTFl+Dl3AJxbSn4 1o+PG8ml/taifior/Hh+iAGk6rZ8mg94d9Y5KcWtzZl+RwexWyxW9PDvBJoYU8Ky x3U3iNdYm3U8T3lbzUizK4cbpobKSqqEAmTk+fp7dlisRfdI2+sP8wNqanOHA3LZ I9ag2JoSXeG7XVYb3WKXhJGHONwdl/OTilu17jBXV4zSiPQmuWvNFIbWtgfBUAnI FFtMTMulb3RXTye8xjJFsa2cuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs/RLCo drxdYrWdpKpbEaVW8Y9bMB8GA1UdIwQYMBaAFA39gB7pZiLtF99V16qmTHHv+be9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEU4OS9DNTMzRDcyNDJB RjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1MFgzMVhYcXFaTWNlXzV0 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmMkFIdWxtSXUwWDMxWFhxcVpNY2VfNXQ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEU4OS9DNTMzRDcyNDJBRjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1 MFgzMVhYcXFaTWNlXzV0NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9zbStGMwEp40+Dyuo1FdLj9UX2/DNe+QQnrpY1CIZKSUKVkVYJMJl 21YIZhrkKLFnHUtVThstkV0dXMp2s6boOqB6L1V97+YInhLSTuQG+hSxTQNaFByc 1BLNFLLNKA8OouNQXl3lJK5toP61JUpDsyxugPkOfHCYZwYm/KQjTqotCuhaFpGd ii5rltvD7Qi5KX/Rv5O/OnTShmwfQoiZ0UU5+kMsjqo4wfcpm66U6g9AFdJz3fXp Ey47/WBYCJPv/5FyhsxcoBye3BfNfabu21NRt3GmOw/bCaGYG8lBf6meDDlHfs0s HkwMDh885ypeLrlwVV1zSLvcqjLDG0qO -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:44 2025 by rpki-client