$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json) Hash identifier: F1E3DPwjBlmr/d7WOI+Ry+6K3M2d+XN4XvPH3EVHAmo= Subject key identifier: C4:D4:14:DA:46:F1:50:EE:FB:33:30:74:22:60:20:EB:4E:41:F3:F4 Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft Manifest number: 01A7 Signing time: Sun 19 Oct 2025 05:52:51 +0000 Manifest this update: Sun 19 Oct 2025 05:52:50 +0000 Manifest next update: Sun 26 Oct 2025 05:52:50 +0000 Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: yXWV0p/KNHATO617+BG1pjQlXYHG2kXSP1Y0OKdUafE=) 2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w1yfyWSTFZ2T3mamuS/YlpEjcUFBj5Vw4U9ZO7o84Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9 Validity Not Before: Oct 19 05:52:50 2025 GMT Not After : Oct 26 05:52:50 2025 GMT Subject: CN=68f47cb3-ab0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:7d:e6:9c:50:1b:23:c3:b4:5b:9d:37:a8: 66:6b:1d:16:c6:2d:a8:78:69:52:e3:38:90:74:9b: ff:91:98:a9:b6:7f:52:ee:0a:13:57:cb:c4:44:ac: 1c:0c:7a:4f:08:00:67:b9:64:b0:bc:f6:7f:ed:af: 59:e1:bf:99:74:97:61:e2:6e:7f:0b:5e:5e:9c:10: 60:cf:8c:5d:d4:b8:cb:29:1f:fd:f3:de:78:3d:3c: 6b:d5:d7:19:9a:dc:19:fe:36:96:bf:15:59:b0:1f: 86:70:41:3c:7e:bd:4d:df:55:dd:b9:17:7f:f6:bf: 18:71:6c:47:aa:62:c5:ec:ee:1e:c9:2c:f9:1f:e0: f0:bd:50:96:9d:6d:ea:d5:a1:87:a9:cf:6a:ee:41: 00:70:80:a6:b7:9e:02:5b:4a:5b:8f:d9:a2:0e:aa: 1d:38:42:d4:67:ca:e5:86:ad:96:ef:b3:4c:d6:b5: 3e:fa:e2:80:45:63:6d:0f:d0:0a:23:b1:f1:1c:0a: bf:42:a9:cb:93:fb:77:86:6a:f6:44:13:da:70:f3: 35:7f:a8:7f:65:a2:e1:dc:60:c4:45:ee:16:74:4d: d2:09:24:95:e2:53:d2:63:96:46:71:d8:67:bf:16: 0b:fa:36:b8:a5:96:cd:25:0f:b9:c6:8e:bb:eb:d8: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:14:DA:46:F1:50:EE:FB:33:30:74:22:60:20:EB:4E:41:F3:F4 X509v3 Authority Key Identifier: keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fb:e8:3d:06:ab:8e:a9:54:2b:5d:05:71:cc:bb:2f:e5:a6: 80:79:7d:8f:35:95:82:c2:8e:e1:d2:38:d3:80:8f:b8:b5:1e: d1:7a:58:52:f5:f6:ef:a8:6d:4e:62:82:d2:58:0c:a8:4b:1a: 2c:10:47:38:f9:ea:01:9b:70:a9:5c:33:83:be:b3:79:fe:10: da:2d:98:ae:66:86:1c:51:e7:f3:0d:ee:87:cd:63:8d:68:ac: 14:9e:b8:32:2b:b6:0e:00:25:0c:7f:53:f8:cb:99:7f:c3:18: 65:5e:16:71:8d:01:58:a5:a2:4f:b6:0e:f9:f6:08:79:5e:8e: 96:76:42:92:a1:1e:9d:98:d9:78:fb:0c:fc:ca:ab:31:b9:bb: 93:1e:0a:80:55:12:24:75:b2:ed:34:f3:b9:92:a0:74:e8:c6: c0:82:a3:6d:54:bb:1a:ec:d4:12:e3:60:62:68:af:14:a5:da: b8:48:99:f1:26:ad:58:ae:e1:45:d9:16:9b:f3:20:3a:59:cd: 26:06:b2:63:51:0e:19:f9:96:ce:b3:f8:fd:3c:e1:0d:26:a7: c8:be:ed:c9:ef:d9:b0:bd:5e:12:9a:2c:17:61:09:6c:4a:b8: 25:39:67:fc:1b:f6:05:8e:79:76:a0:bf:03:35:c6:e0:71:fc: 4b:8b:3d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw RDZFM0U3QzkwHhcNMjUxMDE5MDU1MjUwWhcNMjUxMDI2MDU1MjUwWjAYMRYwFAYD VQQDEw02OGY0N2NiMy1hYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2N95pxQGyPDtFudN6hmax0Wxi2oeGlS4ziQdJv/kZiptn9S7goTV8vERKwc DHpPCABnuWSwvPZ/7a9Z4b+ZdJdh4m5/C15enBBgz4xd1LjLKR/98954PTxr1dcZ mtwZ/jaWvxVZsB+GcEE8fr1N31XduRd/9r8YcWxHqmLF7O4eySz5H+DwvVCWnW3q 1aGHqc9q7kEAcICmt54CW0pbj9miDqodOELUZ8rlhq2W77NM1rU++uKARWNtD9AK I7HxHAq/QqnLk/t3hmr2RBPacPM1f6h/ZaLh3GDERe4WdE3SCSSV4lPSY5ZGcdhn vxYL+ja4pZbNJQ+5xo6769jkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTUFNpG 8VDu+zMwdCJgIOtOQfP0MB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1 alItV1dfb2RRS0VOYmo1OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN++g9BquOqVQrXQVxzLsv5aaAeX2PNZWCwo7h0jjTgI+4tR7RelhS 9fbvqG1OYoLSWAyoSxosEEc4+eoBm3CpXDODvrN5/hDaLZiuZoYcUefzDe6HzWON aKwUnrgyK7YOACUMf1P4y5l/wxhlXhZxjQFYpaJPtg759gh5Xo6WdkKSoR6dmNl4 +wz8yqsxubuTHgqAVRIkdbLtNPO5kqB06MbAgqNtVLsa7NQS42BiaK8Updq4SJnx Jq1YruFF2Rab8yA6Wc0mBrJjUQ4Z+ZbOs/j9POENJqfIvu3J79mwvV4SmiwXYQls SrglOWf8G/YFjnl2oL8DNcbgcfxLiz3y -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:39 2025 by rpki-client