$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: YXNBEJ1TmnRoFvSW0N0hK0oFvHPqyv0bwvtnCjJYIVs= Subject key identifier: 4B:5D:FB:21:D9:8B:A9:D4:68:6A:2D:4D:8E:1C:DE:EF:92:3F:FD:D6 Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 02E3 Signing time: Wed 05 Nov 2025 01:23:08 +0000 Manifest this update: Wed 05 Nov 2025 01:23:07 +0000 Manifest next update: Wed 12 Nov 2025 01:23:07 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: kxfYA/ATtVrHsGh+avE2shulCGIdHIzOFHF3q2ETUCQ=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: ZYQF+B8J3kvs5xBRsxJyyeizflCtkKmYQojiW1ynZsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Nov 5 01:23:07 2025 GMT Not After : Nov 12 01:23:07 2025 GMT Subject: CN=690aa6fc-43e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:a4:14:8b:3f:93:e9:93:e2:c2:80:3d:9b: ab:03:fe:15:e6:0c:4a:91:0e:ea:36:27:c2:5a:d2: 60:fb:30:c7:16:ce:72:da:7c:0b:8b:8f:66:17:e7: f2:0f:4c:d5:dd:12:08:29:19:ae:0a:50:8b:97:28: 83:46:1c:af:b5:08:4a:df:16:f4:86:15:d0:c8:ae: dd:b2:6a:b1:73:10:5b:e6:1a:73:d0:6c:f6:da:b2: 3f:05:0c:4b:80:89:26:98:8b:e2:d8:e3:d2:41:98: d0:d4:0f:fe:aa:9f:fe:db:02:d8:6f:14:a5:68:ea: c2:a9:78:d1:3b:5f:43:5d:d4:70:78:b9:07:52:18: 5f:a6:52:ca:a7:19:c1:93:7b:f1:a1:7e:46:97:eb: 4a:c2:02:65:d4:1a:3f:10:d3:5a:27:e3:3c:f3:b6: 94:91:81:da:75:10:3d:11:0a:3e:da:8d:93:06:6d: 1c:45:7d:fe:7c:04:20:96:07:de:84:b2:58:14:cc: a0:fd:00:d2:6e:3f:44:96:e0:ee:94:d8:62:b2:f5: e4:be:34:a8:df:0d:07:0e:e4:cd:77:0e:8b:af:9f: de:84:fc:45:ba:6d:0e:c3:b2:cb:25:57:2f:51:fc: 2e:18:fa:b2:9d:54:aa:ff:90:8d:9a:ba:31:40:d3: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:FB:21:D9:8B:A9:D4:68:6A:2D:4D:8E:1C:DE:EF:92:3F:FD:D6 X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:23:bf:77:ad:61:a6:84:5e:9d:59:c7:56:a8:47:be:5c: 08:79:79:21:b3:03:8d:d2:82:90:d8:53:3e:85:ed:cc:ee:7d: fc:11:11:d7:b3:f1:ad:ea:fd:46:d4:3e:eb:ea:02:e2:3a:df: 7e:f7:95:4f:4e:3e:08:e8:de:10:2c:1c:15:e9:30:26:13:49: b0:75:c3:37:23:8e:36:0c:39:32:e3:94:2d:ee:41:a4:44:1b: 87:e1:45:20:b2:2e:18:28:ec:74:f8:90:74:21:51:7b:d4:d9: 23:47:0c:cf:07:6c:d2:3e:9d:db:07:a1:84:82:3e:33:62:90: 12:2d:42:40:31:3f:52:57:95:d0:51:6b:11:b9:4d:ca:ab:d3: c3:03:ce:c9:48:d1:73:62:a0:ae:9b:19:2c:fe:da:15:b4:d6: 4d:5b:e3:70:49:97:a7:53:cf:ac:53:f6:a9:49:5c:ae:33:69: 92:a7:07:b4:44:5c:ee:bf:8c:94:74:0d:86:45:9b:d3:b5:ce: f6:64:41:62:bc:06:e7:85:df:28:e6:6f:22:cc:26:ed:8f:aa: c4:81:33:be:60:12:a6:53:4f:81:ae:5f:0d:e9:78:e0:b1:c1: 3b:2c:58:32:b8:1d:fb:b1:0a:41:00:cc:53:df:4f:0d:f6:b3: 7a:ce:6f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUxMTA1MDEyMzA3WhcNMjUxMTEyMDEyMzA3WjAYMRYwFAYD VQQDEw02OTBhYTZmYy00M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXmkFIs/k+mT4sKAPZurA/4V5gxKkQ7qNifCWtJg+zDHFs5y2nwLi49mF+fy D0zV3RIIKRmuClCLlyiDRhyvtQhK3xb0hhXQyK7dsmqxcxBb5hpz0Gz22rI/BQxL gIkmmIvi2OPSQZjQ1A/+qp/+2wLYbxSlaOrCqXjRO19DXdRweLkHUhhfplLKpxnB k3vxoX5Gl+tKwgJl1Bo/ENNaJ+M887aUkYHadRA9EQo+2o2TBm0cRX3+fAQglgfe hLJYFMyg/QDSbj9EluDulNhisvXkvjSo3w0HDuTNdw6Lr5/ehPxFum0Ow7LLJVcv UfwuGPqynVSq/5CNmroxQNNXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtd+yHZ i6nUaGotTY4c3u+SP/3WMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlYCO/d61hpoRenVnHVqhHvlwIeXkhswON0oKQ2FM+he3M7n38ERHX s/Gt6v1G1D7r6gLiOt9+95VPTj4I6N4QLBwV6TAmE0mwdcM3I442DDky45Qt7kGk RBuH4UUgsi4YKOx0+JB0IVF71NkjRwzPB2zSPp3bB6GEgj4zYpASLUJAMT9SV5XQ UWsRuU3Kq9PDA87JSNFzYqCumxks/toVtNZNW+NwSZenU8+sU/apSVyuM2mSpwe0 RFzuv4yUdA2GRZvTtc72ZEFivAbnhd8o5m8izCbtj6rEgTO+YBKmU0+Brl8N6Xjg scE7LFgyuB37sQpBAMxT308N9rN6zm/u -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:27 2025 by rpki-client