$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: rg4+v0U6lGgpxFHLYX631cPod1WZy8Aiq0Uzfi/1wgg= Subject key identifier: C0:B9:F2:89:15:39:AB:5B:F4:0B:09:81:B8:6D:E8:8A:57:61:C5:E5 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34D3 Signing time: Tue 04 Nov 2025 15:15:12 +0000 Manifest this update: Tue 04 Nov 2025 15:15:12 +0000 Manifest next update: Tue 11 Nov 2025 15:15:12 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: rSAtfJhZI28aqwKzuiIeKfq+izJ3MpPnTxiCxG9vVLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Nov 4 15:15:12 2025 GMT Not After : Nov 11 15:15:12 2025 GMT Subject: CN=690a1880-d1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:95:cf:e4:37:13:37:08:b2:df:40:61:59: a4:e2:87:51:92:fe:59:57:8a:b1:1f:41:d1:5d:90: fe:d1:21:9c:a5:8a:4d:b5:b9:8d:21:77:94:33:da: ca:c3:3f:05:bd:67:dc:48:d3:ed:ac:b0:7d:c8:9b: e9:a2:7e:bb:7c:0f:89:55:d2:ca:90:88:3f:2d:86: 1c:3e:5d:17:38:03:4c:48:7d:b3:a2:d6:f1:21:d5: 81:38:48:62:c4:f0:6c:56:f0:e3:2e:23:2c:5c:fd: e1:d1:f8:82:57:5a:72:d2:ae:9a:f6:dd:72:96:4b: 3c:5b:f8:d3:41:7b:6c:b3:09:78:f1:ab:8a:47:95: 92:dd:0a:53:e8:76:4b:96:16:f5:65:f7:47:e1:87: cb:b6:e5:6e:4c:2c:3e:5b:3f:d3:db:41:24:60:9d: d2:8b:38:53:17:1d:0c:04:df:98:70:c2:28:73:37: 54:97:43:a7:81:93:61:e7:77:5f:e8:5e:d5:3a:b4: 36:a9:be:1c:bb:51:ce:6b:21:ae:9d:97:7f:d7:ed: a5:18:78:98:4c:16:ff:f6:7b:c4:46:3b:fe:6d:f9: b2:7c:3f:91:f5:64:2d:68:4c:0e:1c:25:45:eb:23: 31:b1:d2:f2:30:04:15:cc:1e:1b:48:6d:93:ac:3b: c7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B9:F2:89:15:39:AB:5B:F4:0B:09:81:B8:6D:E8:8A:57:61:C5:E5 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:27:be:1a:af:10:73:2c:ee:ee:3c:c8:f9:8d:b2:91:9f:ad: 94:5e:31:f1:e8:f7:8f:ef:91:6d:54:2b:d4:58:f6:25:89:28: 9e:00:f5:a6:7e:9b:ee:c7:d2:3c:2b:68:ae:f8:03:8d:b3:23: 14:09:01:6f:e9:8f:29:57:19:92:71:cf:d2:40:f5:00:a4:e2: 74:93:27:e3:5b:fb:ad:89:ef:c7:12:f5:48:3c:c4:fc:0d:6f: 65:3d:2b:64:f4:a1:59:74:0a:dc:1f:75:4c:32:f1:de:16:ca: 66:98:f9:b5:fa:9b:0d:b0:92:0a:6d:e5:71:b1:6e:eb:07:10: 41:ff:15:f3:e7:17:29:60:d2:5a:67:a1:63:a2:ac:52:8d:24: 04:ac:65:da:33:e2:10:5a:5d:bd:00:58:be:63:ff:86:f6:73: 18:94:57:f4:5f:f5:71:3b:fc:a1:41:dd:63:e7:52:20:e4:0e: 8f:e3:0d:ba:a0:8d:90:98:6e:66:50:35:12:53:77:a9:1e:d2: 09:3a:38:b2:a0:0e:db:50:7b:74:ed:11:71:ab:6a:be:70:62: 24:8e:42:8d:5a:dd:ee:8b:83:b7:19:dc:67:8e:1a:11:df:cc: 62:c2:b2:62:aa:71:55:42:89:09:94:4c:0b:c7:ba:8f:64:9d: d5:29:7d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUxMTA0MTUxNTEyWhcNMjUxMTExMTUxNTEyWjAYMRYwFAYD VQQDEw02OTBhMTg4MC1kMWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1viVz+Q3EzcIst9AYVmk4odRkv5ZV4qxH0HRXZD+0SGcpYpNtbmNIXeUM9rK wz8FvWfcSNPtrLB9yJvpon67fA+JVdLKkIg/LYYcPl0XOANMSH2zotbxIdWBOEhi xPBsVvDjLiMsXP3h0fiCV1py0q6a9t1ylks8W/jTQXtsswl48auKR5WS3QpT6HZL lhb1ZfdH4YfLtuVuTCw+Wz/T20EkYJ3SizhTFx0MBN+YcMIoczdUl0OngZNh53df 6F7VOrQ2qb4cu1HOayGunZd/1+2lGHiYTBb/9nvERjv+bfmyfD+R9WQtaEwOHCVF 6yMxsdLyMAQVzB4bSG2TrDvHiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC58okV Oatb9AsJgbht6IpXYcXlMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEJ74arxBzLO7uPMj5jbKRn62UXjHx6PeP75FtVCvUWPYliSieAPWm fpvux9I8K2iu+AONsyMUCQFv6Y8pVxmScc/SQPUApOJ0kyfjW/utie/HEvVIPMT8 DW9lPStk9KFZdArcH3VMMvHeFspmmPm1+psNsJIKbeVxsW7rBxBB/xXz5xcpYNJa Z6FjoqxSjSQErGXaM+IQWl29AFi+Y/+G9nMYlFf0X/VxO/yhQd1j51Ig5A6P4w26 oI2QmG5mUDUSU3epHtIJOjiyoA7bUHt07RFxq2q+cGIkjkKNWt3ui4O3GdxnjhoR 38xiwrJiqnFVQokJlEwLx7qPZJ3VKX3q -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:42 2025 by rpki-client