$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: tnoNRYVSw12Xssz7jSTRZQs9t4Kslps9BB6p+eCjlXc= Subject key identifier: 9F:2B:62:C1:BD:74:19:DD:8B:6B:44:D6:B0:C6:77:DB:B5:2F:3C:A9 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 068C Signing time: Sat 18 Oct 2025 23:52:59 +0000 Manifest this update: Sat 18 Oct 2025 23:52:59 +0000 Manifest next update: Sat 25 Oct 2025 23:52:59 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: i5w4JnvAVYvAsDSyeku6CrJpc2rx4wSt7cNBzGcq/d4=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Oct 18 23:52:59 2025 GMT Not After : Oct 25 23:52:59 2025 GMT Subject: CN=68f4285b-6a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:7b:6a:7c:e5:5f:12:6d:61:8d:ef:52:1c: db:a1:0b:f7:d1:4c:de:26:c6:3b:13:64:fb:56:30: 01:f2:a1:fe:be:70:4a:35:e2:aa:9c:ae:6c:78:1c: 2d:15:59:24:e8:4d:29:8c:2e:07:b3:d5:a3:c1:72: 19:ce:03:2d:7e:70:93:99:11:1a:28:e7:c8:3b:7f: 86:c9:e7:77:9b:57:70:68:e3:71:5e:3b:6d:f6:f4: e9:b0:db:a4:7f:12:04:02:72:92:e3:43:61:8e:56: 27:53:a8:cd:28:51:6e:b7:4c:df:61:4a:21:8c:b0: 3e:3c:8e:cb:34:df:a6:cb:7e:da:4a:3b:d8:27:01: 90:e1:5d:76:4f:bc:23:2d:d3:26:e1:9f:48:1d:46: b6:43:10:ca:08:1f:94:4e:d9:c5:26:35:97:a1:22: 83:68:42:ac:1c:fc:ba:92:46:e5:21:a4:9c:f5:f5: 0b:7b:ea:0d:d4:28:d1:30:8c:52:31:ef:80:3c:cc: f5:2c:93:24:58:64:4f:dd:ae:5e:20:91:19:ae:e3: 83:bc:7b:8c:64:6c:4d:8e:d8:03:8d:6d:75:26:ac: 4e:ad:56:f7:c4:05:09:54:d6:9e:46:d9:af:5d:0e: 81:a8:15:47:99:81:86:6b:9a:bf:fc:86:93:20:63: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:62:C1:BD:74:19:DD:8B:6B:44:D6:B0:C6:77:DB:B5:2F:3C:A9 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b7:33:c8:9f:33:25:24:dc:a4:86:84:9b:8e:2b:86:f4:e7: fd:e3:24:9d:76:de:0f:95:10:57:3e:81:ff:ba:19:26:03:88: 13:be:b9:cb:34:41:c8:7d:a1:73:58:3c:61:ec:60:48:11:9e: 27:83:53:0f:15:a4:07:8b:f3:48:c3:ce:d4:8b:14:d6:39:f8: 0a:c5:9f:dd:db:5e:31:e7:18:80:28:fc:e7:0c:a9:f4:97:a3: 58:85:70:54:7f:74:6b:cb:b8:8f:d3:4e:6f:72:6e:9b:55:4a: 3e:ec:12:4d:7c:97:ef:6d:06:6a:5e:b9:e8:46:56:20:ca:b2: 87:17:a9:c5:02:51:e7:3f:62:9d:03:b4:ba:44:6d:e2:6d:ab: 03:37:7d:0f:86:b0:d7:a4:3a:29:02:10:15:ad:af:70:a3:ff: 54:aa:51:b1:6a:b4:43:bb:14:4b:4d:d1:1e:5d:fb:9b:c5:71: 87:6e:0d:67:2f:b8:70:0c:21:4e:69:2c:a0:aa:50:a0:2c:c7: 86:70:b8:85:98:d6:01:94:67:c0:ae:b2:5a:fa:68:af:f8:3c: 85:bd:d3:89:ef:ed:5e:d3:11:f7:22:ae:cb:a7:95:85:f2:b3: e5:df:20:08:6c:fe:af:ab:72:29:db:ff:37:bc:da:62:06:3c: e0:95:39:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUxMDE4MjM1MjU5WhcNMjUxMDI1MjM1MjU5WjAYMRYwFAYD VQQDEw02OGY0Mjg1Yi02YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9d7anzlXxJtYY3vUhzboQv30UzeJsY7E2T7VjAB8qH+vnBKNeKqnK5seBwt FVkk6E0pjC4Hs9WjwXIZzgMtfnCTmREaKOfIO3+Gyed3m1dwaONxXjtt9vTpsNuk fxIEAnKS40NhjlYnU6jNKFFut0zfYUohjLA+PI7LNN+my37aSjvYJwGQ4V12T7wj LdMm4Z9IHUa2QxDKCB+UTtnFJjWXoSKDaEKsHPy6kkblIaSc9fULe+oN1CjRMIxS Me+APMz1LJMkWGRP3a5eIJEZruODvHuMZGxNjtgDjW11JqxOrVb3xAUJVNaeRtmv XQ6BqBVHmYGGa5q//IaTIGO9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8rYsG9 dBndi2tE1rDGd9u1LzypMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAptzPInzMlJNykhoSbjiuG9Of94ySddt4PlRBXPoH/uhkmA4gTvrnL NEHIfaFzWDxh7GBIEZ4ng1MPFaQHi/NIw87UixTWOfgKxZ/d214x5xiAKPznDKn0 l6NYhXBUf3Rry7iP005vcm6bVUo+7BJNfJfvbQZqXrnoRlYgyrKHF6nFAlHnP2Kd A7S6RG3ibasDN30PhrDXpDopAhAVra9wo/9UqlGxarRDuxRLTdEeXfubxXGHbg1n L7hwDCFOaSygqlCgLMeGcLiFmNYBlGfArrJa+miv+DyFvdOJ7+1e0xH3Iq7Lp5WF 8rPl3yAIbP6vq3Ip2/83vNpiBjzglTnQ -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:48 2025 by rpki-client