$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: jEcf5KgTJG3dyyzlaHOtzfvgAxDQaYN4OKmv5WmfQ58= Subject key identifier: 48:E7:B3:F9:35:BF:6C:CD:57:4F:83:A1:EB:9F:8E:31:B6:25:F0:35 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 0157 Signing time: Sun 19 Oct 2025 06:51:47 +0000 Manifest this update: Sun 19 Oct 2025 06:51:46 +0000 Manifest next update: Sun 26 Oct 2025 06:51:46 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: kHNB4ro05uLvhRVtD5gCVZ3cKvhoG49/+pv6e5EsZ0M=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Oct 19 06:51:46 2025 GMT Not After : Oct 26 06:51:46 2025 GMT Subject: CN=68f48a82-44b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:ea:a1:c7:1a:88:17:25:57:03:a7:1a:fe: ee:2f:b7:71:d8:77:37:6d:fc:0f:ee:32:ef:16:ca: 59:32:ae:b5:ba:7a:ce:6f:bb:8e:a1:b6:36:af:20: fb:01:14:be:16:f3:e9:c0:cd:f4:81:86:4d:ec:c5: 0d:49:3e:9e:72:62:fa:c0:48:13:91:fb:73:f6:77: 5c:71:a2:a8:9d:74:04:98:50:bb:bd:44:82:89:f9: 26:db:2a:24:54:aa:88:ad:0b:58:d8:04:45:93:4e: 44:c7:61:f6:c2:d6:d4:cf:9f:eb:e3:41:9f:1d:2e: 34:f0:2f:04:1e:5f:39:8d:d0:da:20:3d:24:54:88: 8c:0f:bb:00:34:fb:ad:c0:0b:aa:9c:1c:55:fc:8e: 5d:75:af:71:61:5c:7e:74:8f:6e:2c:51:82:03:da: 86:ea:28:b0:05:0e:17:c5:df:9f:5c:c0:99:56:c3: b2:73:93:8d:63:03:d3:cf:cd:c4:d2:85:bd:40:22: 72:bf:27:92:6f:68:c5:77:7a:ae:b9:7d:68:1b:20: 99:42:e3:ee:2d:8f:76:58:7e:4d:88:a9:66:d8:c7: 3e:cb:fd:dc:10:15:47:d8:ce:fb:f3:73:df:61:8f: 05:00:13:53:ed:0d:a8:eb:29:7d:6c:ac:bc:33:36: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:B3:F9:35:BF:6C:CD:57:4F:83:A1:EB:9F:8E:31:B6:25:F0:35 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:21:4a:4d:2d:33:c6:3a:a9:ce:ea:a6:9e:a2:03:48:db:ea: e1:f5:91:12:b6:89:47:e0:ed:15:ee:c2:e3:ce:8f:fa:7c:26: 76:df:86:0b:01:f2:6f:4b:b7:17:51:e2:2f:97:c4:78:7c:4f: 1b:27:e1:ce:92:43:f2:78:77:4f:b1:59:5b:2d:44:40:5c:9d: 6a:8a:39:14:9a:61:ca:8e:31:d1:67:32:3a:21:99:a6:2c:cb: 4b:ff:60:ff:34:6a:bc:8b:b8:5a:d9:98:10:0f:2d:64:d0:a4: 39:88:e1:57:74:a3:c1:33:18:3a:e5:29:24:ad:e0:6f:31:70: 81:dc:64:2a:f7:cc:b7:b0:f8:1c:6a:f1:70:38:1d:03:0f:ec: 8a:f3:1a:96:aa:39:0a:c9:bf:1d:d1:cf:c3:3d:e2:4e:86:8d: 2e:d4:73:45:83:7f:fd:f3:da:d1:57:10:ea:48:57:ec:5d:f9: b0:0c:64:9a:f9:01:ee:e0:e1:f0:9b:94:3d:85:08:8e:c4:c2: 4a:26:be:a6:f4:7a:9e:7d:69:ad:a9:3f:a9:d0:e2:a1:81:5c: 83:50:b8:8b:cb:bd:ae:f3:3c:0c:8e:bc:5a:3e:ab:88:69:04: 5b:61:38:34:0f:f9:b8:42:64:43:89:e3:2b:7a:63:5d:f5:7d: 43:47:b4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUxMDE5MDY1MTQ2WhcNMjUxMDI2MDY1MTQ2WjAYMRYwFAYD VQQDEw02OGY0OGE4Mi00NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OjqoccaiBclVwOnGv7uL7dx2Hc3bfwP7jLvFspZMq61unrOb7uOobY2ryD7 ARS+FvPpwM30gYZN7MUNST6ecmL6wEgTkftz9ndccaKonXQEmFC7vUSCifkm2yok VKqIrQtY2ARFk05Ex2H2wtbUz5/r40GfHS408C8EHl85jdDaID0kVIiMD7sANPut wAuqnBxV/I5dda9xYVx+dI9uLFGCA9qG6iiwBQ4Xxd+fXMCZVsOyc5ONYwPTz83E 0oW9QCJyvyeSb2jFd3quuX1oGyCZQuPuLY92WH5NiKlm2Mc+y/3cEBVH2M7783Pf YY8FABNT7Q2o6yl9bKy8MzbdAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjns/k1 v2zNV0+DoeufjjG2JfA1MB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGIUpNLTPGOqnO6qaeogNI2+rh9ZEStolH4O0V7sLjzo/6fCZ234YL AfJvS7cXUeIvl8R4fE8bJ+HOkkPyeHdPsVlbLURAXJ1qijkUmmHKjjHRZzI6IZmm LMtL/2D/NGq8i7ha2ZgQDy1k0KQ5iOFXdKPBMxg65SkkreBvMXCB3GQq98y3sPgc avFwOB0DD+yK8xqWqjkKyb8d0c/DPeJOho0u1HNFg3/989rRVxDqSFfsXfmwDGSa +QHu4OHwm5Q9hQiOxMJKJr6m9HqefWmtqT+p0OKhgVyDULiLy72u8zwMjrxaPquI aQRbYTg0D/m4QmRDieMremNd9X1DR7Rd -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:29 2025 by rpki-client