$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: 0M1zhCgQxtZYDyENT5mbe7Enr3eQdolS4qjWHKCz960= Subject key identifier: 68:FF:B6:2A:13:CE:95:16:73:D4:3D:49:99:7A:47:74:23:2E:72:3A Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 089B Signing time: Sat 18 Oct 2025 21:41:51 +0000 Manifest this update: Sat 18 Oct 2025 21:41:50 +0000 Manifest next update: Sat 25 Oct 2025 21:41:50 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: RydxPUdNsXGVwyufHiVo6f1lBxzhYWw+VCveKb6FmCw=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Oct 18 21:41:50 2025 GMT Not After : Oct 25 21:41:50 2025 GMT Subject: CN=68f4099e-82f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d3:b5:6e:3d:c8:da:8a:0e:3e:ce:ca:97:97: 8d:d4:ff:a8:dd:13:4b:18:6b:dd:33:46:e0:7b:14: c4:d0:37:0e:f7:db:56:b7:7e:90:9d:dc:e5:fe:14: 7d:bd:9d:70:35:de:54:88:23:f3:60:a3:e2:03:aa: 1f:87:d0:02:c6:0f:26:a6:00:28:5d:88:ca:a5:69: 21:cc:0f:6f:61:5b:f1:ad:19:c8:b3:12:40:d2:f2: ca:34:e5:c2:2d:a5:2f:6e:6b:31:78:db:5b:c2:4b: ae:12:0c:be:5c:54:a5:8e:03:78:f8:b3:e3:5f:d8: f9:51:f1:6a:f9:b7:ce:7a:6c:cb:8e:12:31:56:19: 34:9b:8f:08:d3:29:07:ae:cd:cf:df:72:2c:94:bd: 81:ed:85:c5:5c:5a:92:1a:93:e3:06:3c:af:a6:aa: ad:4b:f5:63:8c:85:bb:d6:cb:68:2c:e0:90:6e:14: b8:08:1b:35:32:9e:3d:49:b7:71:ab:48:b4:c1:80: 2e:b8:f5:44:c8:4e:04:2a:ed:db:09:11:e9:b5:73: 2f:5d:78:e3:70:12:79:2f:f4:1d:6d:1d:02:f3:7e: 5b:a1:9c:11:d2:f5:d4:6f:27:97:db:61:91:0e:5f: a5:10:01:4b:25:3e:68:34:9b:a0:17:2b:f3:ec:cf: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:B6:2A:13:CE:95:16:73:D4:3D:49:99:7A:47:74:23:2E:72:3A X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:bb:78:bd:cc:e8:bf:b0:e2:d8:b1:81:20:0e:aa:d5:6c: 49:26:58:0d:63:a4:6b:cb:f8:21:4f:c0:53:1a:a3:24:71:45: 94:f2:cc:11:31:74:d7:47:e2:9f:ce:78:8f:f6:35:b9:e2:e5: df:0d:d8:71:ae:80:46:a1:25:09:7a:cd:a8:f1:9d:60:69:59: 06:de:d7:a9:7d:e6:4f:78:9e:ed:d4:ea:fe:1b:da:4e:3c:75: 22:76:5d:86:bd:28:db:b6:c8:11:e6:14:5f:67:7d:9f:b5:bb: 76:89:bd:c8:d1:1e:44:1c:cf:9b:d8:fd:fe:cf:f3:48:4d:ad: eb:ac:0f:ca:85:ac:2d:c2:48:e3:5c:02:a6:50:15:30:44:3e: 63:b7:1c:59:59:54:18:86:76:cd:97:59:f9:18:ab:87:a5:06: bb:f9:3d:2f:d5:42:1e:60:9d:2c:44:bb:32:78:bb:97:e4:5d: 16:ad:3f:0e:7b:96:d4:14:16:b2:ac:3d:62:e0:61:4a:0c:56: bc:4c:d7:44:3a:24:78:9d:35:e9:a8:16:00:47:e2:97:99:53: 21:9b:90:d5:00:cf:6c:92:32:61:98:24:df:24:03:8a:cf:8e: 07:47:67:fb:71:51:c9:e0:a2:28:bf:27:4c:df:22:84:1a:4a: a0:b3:79:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUxMDE4MjE0MTUwWhcNMjUxMDI1MjE0MTUwWjAYMRYwFAYD VQQDEw02OGY0MDk5ZS04MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dO1bj3I2ooOPs7Kl5eN1P+o3RNLGGvdM0bgexTE0DcO99tWt36Qndzl/hR9 vZ1wNd5UiCPzYKPiA6ofh9ACxg8mpgAoXYjKpWkhzA9vYVvxrRnIsxJA0vLKNOXC LaUvbmsxeNtbwkuuEgy+XFSljgN4+LPjX9j5UfFq+bfOemzLjhIxVhk0m48I0ykH rs3P33IslL2B7YXFXFqSGpPjBjyvpqqtS/VjjIW71stoLOCQbhS4CBs1Mp49Sbdx q0i0wYAuuPVEyE4EKu3bCRHptXMvXXjjcBJ5L/QdbR0C835boZwR0vXUbyeX22GR Dl+lEAFLJT5oNJugFyvz7M+oCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj/tioT zpUWc9Q9SZl6R3QjLnI6MB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQv7t4vczov7Di2LGBIA6q1WxJJlgNY6Rry/ghT8BTGqMkcUWU8swR MXTXR+KfzniP9jW54uXfDdhxroBGoSUJes2o8Z1gaVkG3tepfeZPeJ7t1Or+G9pO PHUidl2GvSjbtsgR5hRfZ32ftbt2ib3I0R5EHM+b2P3+z/NITa3rrA/Khawtwkjj XAKmUBUwRD5jtxxZWVQYhnbNl1n5GKuHpQa7+T0v1UIeYJ0sRLsyeLuX5F0WrT8O e5bUFBayrD1i4GFKDFa8TNdEOiR4nTXpqBYAR+KXmVMhm5DVAM9skjJhmCTfJAOK z44HR2f7cVHJ4KIovydM3yKEGkqgs3mu -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:23 2025 by rpki-client