$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: WwhOs5TA1KL/H4Sjq9cKtnRl+jrziPYKG7orup2WH5g= Subject key identifier: 39:25:BA:DE:D3:6D:19:8A:BA:CF:45:CF:AA:D1:0C:88:A9:3E:C8:54 Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02EF Signing time: Sun 19 Oct 2025 03:20:44 +0000 Manifest this update: Sun 19 Oct 2025 03:20:43 +0000 Manifest next update: Sun 26 Oct 2025 03:20:43 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: o3KlzQo1p4qSx77xiWx2yyAlUXWQKrQgPF74HfGQ/1Y=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Oct 19 03:20:43 2025 GMT Not After : Oct 26 03:20:43 2025 GMT Subject: CN=68f4590b-aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:8e:f3:96:13:c8:bf:fb:53:4c:8a:d5:f5: a5:ea:b5:8f:9b:2c:25:0d:37:9a:71:5a:71:1c:f8: 6d:36:e6:3a:5b:50:0a:08:17:9a:94:eb:d8:33:c5: 58:27:63:3f:47:27:13:aa:00:d5:63:f7:f1:69:43: 1c:2c:47:06:25:0a:f4:4e:7c:1d:5f:74:b5:fa:96: 2b:c6:54:59:26:4b:83:e6:87:80:59:06:da:63:b8: e2:65:86:f6:a2:d2:48:fd:87:37:f4:16:30:80:c5: 40:4a:14:ff:0d:52:7b:d3:43:38:64:d6:02:b3:d6: 51:cb:69:00:f6:4a:85:f6:d0:22:68:2b:5d:31:35: 41:d0:d9:c8:b4:c7:07:17:99:f8:8a:3e:45:d6:4b: 18:ff:81:72:07:2f:68:7e:36:1c:9c:36:20:60:bd: c2:9d:16:13:19:7a:11:bc:3b:39:78:1e:0c:45:ff: 1c:26:69:2b:09:43:ce:13:45:a2:38:89:c9:d9:4f: 90:ec:34:80:6e:73:43:8e:8b:6c:65:3b:b4:d9:76: df:9f:f5:2e:e2:0d:69:db:ca:0c:01:63:0f:2a:ba: fd:c9:fc:2c:55:e0:d5:29:19:d3:b6:01:a9:85:38: eb:32:79:87:28:bf:79:0d:56:78:a9:bb:e8:a3:9f: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:BA:DE:D3:6D:19:8A:BA:CF:45:CF:AA:D1:0C:88:A9:3E:C8:54 X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:b9:c6:79:ab:fd:a9:33:24:42:3f:24:36:7f:91:91:e8: 60:ff:ec:92:39:2a:19:98:c7:58:71:b9:c8:61:b1:89:69:48: 1f:fa:bc:cb:3f:31:3c:d8:3a:5f:64:00:ec:29:ca:b9:77:f3: d2:d0:31:33:03:25:3a:b4:7e:09:b5:17:f6:20:f7:18:c5:d5: f8:b6:20:02:ad:2a:53:69:b4:d5:2f:10:16:68:fa:f9:54:fc: ee:f5:21:c6:11:f2:cc:89:d9:36:ad:29:3d:b4:f6:38:5a:3a: 4b:79:6a:27:c1:e5:fd:81:46:ae:df:64:ca:95:fc:26:ee:f5: de:ab:19:ac:94:60:80:09:d7:be:60:36:fa:0a:58:47:bc:ca: 2a:79:cf:24:ef:0a:e7:81:44:86:87:5d:c4:41:3d:91:c2:e0: c6:6a:32:6a:5a:37:f0:b3:63:9b:fe:21:97:28:d9:e3:45:96: bb:dc:a3:66:fc:53:c4:e6:eb:1b:11:64:99:09:6f:c9:d7:fa: 05:06:d4:d1:55:09:aa:a5:c5:fc:ba:fc:32:da:36:fc:08:15: 19:6f:e3:e0:78:26:19:b0:e4:0b:8c:42:e8:a8:4e:50:10:44: c5:4a:8b:cb:bd:82:f2:77:58:5e:b3:ed:34:f0:4d:fd:6c:2d: 1c:e4:32:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUxMDE5MDMyMDQzWhcNMjUxMDI2MDMyMDQzWjAYMRYwFAYD VQQDEw02OGY0NTkwYi1hYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjiO85YTyL/7U0yK1fWl6rWPmywlDTeacVpxHPhtNuY6W1AKCBealOvYM8VY J2M/RycTqgDVY/fxaUMcLEcGJQr0TnwdX3S1+pYrxlRZJkuD5oeAWQbaY7jiZYb2 otJI/Yc39BYwgMVAShT/DVJ700M4ZNYCs9ZRy2kA9kqF9tAiaCtdMTVB0NnItMcH F5n4ij5F1ksY/4FyBy9ofjYcnDYgYL3CnRYTGXoRvDs5eB4MRf8cJmkrCUPOE0Wi OInJ2U+Q7DSAbnNDjotsZTu02Xbfn/Uu4g1p28oMAWMPKrr9yfwsVeDVKRnTtgGp hTjrMnmHKL95DVZ4qbvoo596rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDklut7T bRmKus9Fz6rRDIipPshUMB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJbnGeav9qTMkQj8kNn+Rkehg/+ySOSoZmMdYcbnIYbGJaUgf+rzL PzE82DpfZADsKcq5d/PS0DEzAyU6tH4JtRf2IPcYxdX4tiACrSpTabTVLxAWaPr5 VPzu9SHGEfLMidk2rSk9tPY4WjpLeWonweX9gUau32TKlfwm7vXeqxmslGCACde+ YDb6ClhHvMoqec8k7wrngUSGh13EQT2RwuDGajJqWjfws2Ob/iGXKNnjRZa73KNm /FPE5usbEWSZCW/J1/oFBtTRVQmqpcX8uvwy2jb8CBUZb+PgeCYZsOQLjELoqE5Q EETFSovLvYLyd1hes+008E39bC0c5DK3 -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:21 2025 by rpki-client