$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft File: dJiIGBZVJCNyxOChDgY3mbhw3hs.mft (raw, json) Hash identifier: 7nBHGgUjEtTDRYLhQe/Do8qnm3K0lCLJIXTTh1kXOXI= Subject key identifier: A0:1D:E5:42:10:8B:9F:D8:08:CE:8A:F8:5E:88:38:B1:7A:A7:34:B8 Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft Manifest number: 0376 Signing time: Sun 19 Oct 2025 02:54:33 +0000 Manifest this update: Sun 19 Oct 2025 02:54:32 +0000 Manifest next update: Sun 26 Oct 2025 02:54:32 +0000 Files and hashes: 1: dJiIGBZVJCNyxOChDgY3mbhw3hs.crl (hash: LbrErLNUA/NLOlVcOTDflgpWLABA2oHHHN0uGmCIf7s=) 2: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (hash: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Oct 19 02:54:32 2025 GMT Not After : Oct 26 02:54:32 2025 GMT Subject: CN=68f452e8-69de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:6b:f6:02:c0:57:61:34:99:5e:68:c8:b9: c1:fd:38:fe:18:2e:33:34:f9:d4:23:43:56:9f:7d: 35:10:13:60:66:b2:1d:8e:c4:4e:7c:d5:2b:7f:3d: fd:1e:3c:e5:10:8a:c5:64:38:51:f0:bb:21:67:65: 86:d4:4e:53:2d:26:f8:6c:46:4a:b8:21:63:cd:3c: ff:9b:81:03:ad:f5:b5:ee:b0:1e:78:45:b6:7f:6d: dd:0a:be:41:06:56:12:57:79:4d:30:46:84:cb:9e: 9b:f1:40:1c:d1:0a:ff:8b:56:03:fe:b8:5d:e1:16: 98:a9:af:2a:c5:39:68:c1:da:70:00:45:ed:48:62: 1f:71:7e:c0:ca:4d:13:b9:bf:55:58:01:f5:24:ee: ad:e8:fc:26:bc:22:78:8d:7b:19:ae:27:5f:d2:9e: b7:8b:3e:03:a1:28:40:56:c7:23:db:09:cf:d4:bf: 5a:3b:21:12:4e:f1:c3:75:ee:37:7c:df:6e:1a:6f: 44:78:7b:e6:6a:9e:dd:e7:8b:86:ee:8c:90:72:ee: a3:8b:1a:f0:2f:a0:f3:ad:c3:42:58:ad:42:98:bd: c5:a9:02:0b:b5:e4:b7:07:f7:ca:d0:e7:5d:62:63: c3:d3:1a:93:1b:6b:2e:b5:5b:d5:4c:30:a0:17:1f: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1D:E5:42:10:8B:9F:D8:08:CE:8A:F8:5E:88:38:B1:7A:A7:34:B8 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1b:3e:8c:d5:8e:0b:dc:bc:63:21:df:92:96:22:de:e0:d8: e4:b5:87:c3:60:2b:1b:3f:e6:43:83:99:da:a8:bd:98:97:c3: 80:5c:5c:fa:6d:41:51:13:99:c2:71:93:d2:4e:eb:fa:be:d6: ce:76:4b:2d:8c:ce:1b:93:d1:4b:f5:bc:74:03:58:a3:49:92: e9:9a:bf:d8:72:94:f6:48:82:08:66:ca:fb:01:de:79:8b:1c: 6c:84:8d:61:6a:4c:43:0e:ee:67:7b:1a:1b:9c:9a:a4:ef:bb: be:81:4e:84:a7:9c:ae:37:ac:53:0d:ce:cb:97:1f:d6:b0:59: 3e:66:72:42:27:30:f4:9b:3d:64:b4:c6:ee:4f:5e:a4:96:2e: eb:32:f3:f1:95:50:34:30:4b:62:e9:db:49:3e:c9:15:83:0d: c3:84:85:40:19:15:8b:d7:42:07:47:ba:02:f7:43:5d:0a:92: 31:0f:dc:9c:78:29:db:7a:01:0e:48:19:2d:fd:6c:c2:c3:0c: 4b:8e:7d:1b:6e:88:78:95:32:71:9c:77:22:94:49:fa:43:0c: 48:ff:13:c1:35:33:ff:04:1a:60:de:58:0c:ba:60:2d:94:d6: 4d:83:d3:94:f2:16:f9:8d:6a:91:34:52:e9:ed:63:01:b1:88: ed:78:dc:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUxMDE5MDI1NDMyWhcNMjUxMDI2MDI1NDMyWjAYMRYwFAYD VQQDEw02OGY0NTJlOC02OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3Rr9gLAV2E0mV5oyLnB/Tj+GC4zNPnUI0NWn301EBNgZrIdjsROfNUrfz39 HjzlEIrFZDhR8LshZ2WG1E5TLSb4bEZKuCFjzTz/m4EDrfW17rAeeEW2f23dCr5B BlYSV3lNMEaEy56b8UAc0Qr/i1YD/rhd4RaYqa8qxTlowdpwAEXtSGIfcX7Ayk0T ub9VWAH1JO6t6PwmvCJ4jXsZridf0p63iz4DoShAVscj2wnP1L9aOyESTvHDde43 fN9uGm9EeHvmap7d54uG7oyQcu6jixrwL6DzrcNCWK1CmL3FqQILteS3B/fK0Odd YmPD0xqTG2sutVvVTDCgFx8JuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAd5UIQ i5/YCM6K+F6IOLF6pzS4MB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNGOS8xQ0Y1OTc0NkM2QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpD Tnl4T0NoRGdZM21iaHczaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGz6M1Y4L3LxjId+SliLe4NjktYfDYCsbP+ZDg5naqL2Yl8OAXFz6 bUFRE5nCcZPSTuv6vtbOdkstjM4bk9FL9bx0A1ijSZLpmr/YcpT2SIIIZsr7Ad55 ixxshI1hakxDDu5nexobnJqk77u+gU6Ep5yuN6xTDc7Llx/WsFk+ZnJCJzD0mz1k tMbuT16kli7rMvPxlVA0MEti6dtJPskVgw3DhIVAGRWL10IHR7oC90NdCpIxD9yc eCnbegEOSBkt/WzCwwxLjn0bboh4lTJxnHcilEn6QwxI/xPBNTP/BBpg3lgMumAt lNZNg9OU8hb5jWqRNFLp7WMBsYjteNzW -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:59 2025 by rpki-client