$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: XL44TPI7oTyEhqCqv6zj7HiJeSlPk/wrm6A07GTvnBI= Subject key identifier: 4A:32:9A:73:31:5C:27:29:AB:4D:4B:23:78:F2:25:3D:95:30:EF:5E Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B9C Signing time: Sat 18 Oct 2025 19:53:45 +0000 Manifest this update: Sat 18 Oct 2025 19:53:44 +0000 Manifest next update: Sat 25 Oct 2025 19:53:44 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: tsI3R1sk8j+/GlX728Rp4gevplzAkjfRulDBKon+SdQ=) 2: C09C5F7A939311F08A23CC30C4F9AE02.roa (hash: 9UkwYr6RxIOU+VmHhcff4g0hfkxJiT6GBYh6i9TGpz4=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Oct 18 19:53:44 2025 GMT Not After : Oct 25 19:53:44 2025 GMT Subject: CN=68f3f048-d79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:c4:7e:6c:3d:43:f4:97:72:71:a1:d6:eb: 29:83:ba:e3:0a:0a:14:b9:36:72:40:8d:81:72:51: b0:fa:24:f8:1a:5e:4f:fa:bb:2f:f9:dc:94:16:82: 41:88:ea:9e:20:2f:0f:f4:ea:1a:b4:00:94:6e:64: be:85:cc:8f:ec:bf:b2:28:dc:fe:05:04:bc:f4:3b: cd:e7:33:c2:1f:d5:74:c9:73:7a:cc:40:ac:12:f3: d3:6a:ac:71:f1:46:7f:76:c1:84:13:c1:ef:cf:66: 99:0f:49:96:82:f7:60:22:63:58:69:47:23:c7:28: d8:10:be:2d:ae:e4:6c:3a:cb:61:10:2e:7c:4b:de: 96:a9:70:e3:5f:d0:8e:66:6e:bb:2a:df:53:2e:42: 41:db:75:fb:25:ec:fe:88:57:55:c6:8f:eb:84:30: f6:cc:9d:84:fd:c4:cb:65:b1:f3:97:73:c6:24:04: 36:ed:70:8d:11:ed:4b:98:b6:05:4d:30:ba:39:3a: 52:6a:32:cc:b6:e5:da:6f:86:08:5f:67:48:aa:eb: 5f:4e:9f:66:20:86:86:13:76:d6:5d:1a:fb:ae:e0: cf:88:1b:b4:c9:ad:1c:3a:6d:d0:d7:a3:19:c9:8e: 61:d5:ec:31:87:c0:5d:2c:09:1b:cb:e8:93:1e:ad: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:32:9A:73:31:5C:27:29:AB:4D:4B:23:78:F2:25:3D:95:30:EF:5E X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:a4:0e:fb:24:50:5a:c8:ed:f6:b3:1d:3d:4e:7b:1d:ff: 7c:29:9b:b9:63:70:bd:7b:cb:de:31:7a:13:74:53:eb:56:de: 49:55:23:f4:46:3b:5d:dc:ff:f7:88:53:ff:b4:10:ae:12:b0: e5:e6:2f:ba:07:c1:66:e9:50:b4:08:43:7c:9f:91:92:b6:b9: c5:04:92:6c:c3:d6:9c:ae:11:fe:1f:77:75:56:86:5a:c8:b4: 14:5c:3d:6d:0f:43:3d:f0:e1:82:33:20:74:d7:51:ee:f7:e5: 58:b8:b8:3d:25:39:e7:b5:1b:0a:02:f7:aa:6c:2d:61:fa:13: 26:94:50:1d:fb:d8:6d:e0:cc:f8:23:85:31:11:a2:1f:15:7e: fd:31:17:dd:5e:ac:63:81:cc:4c:4a:4e:5b:e5:c8:e9:04:bb: 8e:33:0e:9a:f0:30:14:64:e4:b4:f2:5d:14:eb:d5:17:2a:88: 0b:71:54:e6:72:a1:c6:ba:b8:c7:37:06:8f:76:ca:a5:46:bf: dd:24:b8:df:63:cf:dd:25:87:c4:86:0a:0f:29:b3:bd:c5:bc: 4d:f6:90:dd:72:01:fe:51:49:1b:cb:58:42:ed:9b:54:97:63: 6d:d0:c2:9e:94:7f:2c:02:27:7c:3d:c9:78:76:af:18:72:c8: 87:51:83:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUxMDE4MTk1MzQ0WhcNMjUxMDI1MTk1MzQ0WjAYMRYwFAYD VQQDEw02OGYzZjA0OC1kNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzPEfmw9Q/SXcnGh1uspg7rjCgoUuTZyQI2BclGw+iT4Gl5P+rsv+dyUFoJB iOqeIC8P9OoatACUbmS+hcyP7L+yKNz+BQS89DvN5zPCH9V0yXN6zECsEvPTaqxx 8UZ/dsGEE8Hvz2aZD0mWgvdgImNYaUcjxyjYEL4truRsOsthEC58S96WqXDjX9CO Zm67Kt9TLkJB23X7Jez+iFdVxo/rhDD2zJ2E/cTLZbHzl3PGJAQ27XCNEe1LmLYF TTC6OTpSajLMtuXab4YIX2dIqutfTp9mIIaGE3bWXRr7ruDPiBu0ya0cOm3Q16MZ yY5h1ewxh8BdLAkby+iTHq3FyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoymnMx XCcpq01LI3jyJT2VMO9eMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApfqQO+yRQWsjt9rMdPU57Hf98KZu5Y3C9e8veMXoTdFPrVt5JVSP0 Rjtd3P/3iFP/tBCuErDl5i+6B8Fm6VC0CEN8n5GStrnFBJJsw9acrhH+H3d1VoZa yLQUXD1tD0M98OGCMyB011Hu9+VYuLg9JTnntRsKAveqbC1h+hMmlFAd+9ht4Mz4 I4UxEaIfFX79MRfdXqxjgcxMSk5b5cjpBLuOMw6a8DAUZOS08l0U69UXKogLcVTm cqHGurjHNwaPdsqlRr/dJLjfY8/dJYfEhgoPKbO9xbxN9pDdcgH+UUkby1hC7ZtU l2Nt0MKelH8sAid8Pcl4dq8YcsiHUYOS -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:20 2025 by rpki-client