$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: ALFNHZJ5eANtDKhmjxQo8siqIWyOIrdtLN6hE6ulat4= Subject key identifier: 78:43:C5:47:A5:C5:48:F8:9F:5B:32:0F:23:C1:3D:C0:DB:67:8D:74 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 34D8 Signing time: Sat 18 Oct 2025 15:24:23 +0000 Manifest this update: Sat 18 Oct 2025 15:24:22 +0000 Manifest next update: Sat 25 Oct 2025 15:24:22 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: 2aD6aZ9oou32c5KvhG1IrZZOG2wE9KwuTnK8NR3z+iM=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Oct 18 15:24:22 2025 GMT Not After : Oct 25 15:24:22 2025 GMT Subject: CN=68f3b126-8f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:19:cb:5d:68:b0:3e:91:47:c7:6a:98:15: 92:79:9f:7f:20:da:b4:98:b7:e2:86:4b:da:e0:9c: 71:41:ce:07:26:29:88:e2:8b:23:0c:3c:2d:a4:50: 7a:24:cd:26:ac:03:31:c9:f8:7f:2b:53:36:42:1f: 8a:8b:2f:f3:5b:09:cb:0b:10:27:21:f0:cf:73:5d: e3:d6:b5:e3:51:12:02:1e:7a:a0:36:d1:76:00:a1: b4:d3:8a:a9:09:6b:3e:57:bc:1e:15:04:80:5d:aa: 54:e7:f8:26:7d:c9:77:1b:8a:35:98:04:56:b2:6a: 37:4e:e6:74:8d:1d:2e:d6:ea:ca:e7:45:47:74:cc: 03:32:18:ae:d7:a1:ce:b2:b9:d1:34:1d:66:9e:a5: 17:9d:9a:ec:8c:68:4e:88:f6:71:c9:02:d3:92:e5: 88:67:ac:b6:1d:5b:33:4c:27:0a:a8:d7:9d:cf:a5: e6:3a:f4:75:95:ca:b1:5e:a4:ac:61:31:d8:af:1b: ff:0d:ed:70:bf:36:15:c5:f8:00:84:c7:00:20:3b: 77:47:30:d2:66:f6:68:9b:6e:93:5d:de:4a:f2:ec: 10:ae:12:fa:75:76:93:3b:87:39:18:2e:b1:c4:7c: 00:9e:d8:aa:0e:4f:7d:e2:68:17:e2:29:37:d9:53: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:43:C5:47:A5:C5:48:F8:9F:5B:32:0F:23:C1:3D:C0:DB:67:8D:74 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:85:ae:4c:d9:49:61:d6:44:c3:d8:82:b8:95:ec:56:f5:0d: 91:31:47:9e:c0:b6:d8:2b:a0:52:30:b2:f0:23:77:51:21:0d: f4:c6:f0:e8:84:fa:f1:19:fe:de:05:28:84:9b:d8:02:95:98: b4:72:86:50:8d:0d:21:83:95:45:3d:fb:02:09:ed:f3:d0:6f: 42:6d:5b:79:b8:14:8e:16:dd:cf:d8:e5:b8:9b:c6:b8:e1:5d: 6e:ab:11:1c:cb:b2:fa:b3:89:67:c4:0a:2f:10:1a:02:64:96: 34:74:d0:c2:bb:7a:6d:cb:fc:72:62:6f:3d:31:92:3a:8e:dd: 71:53:b4:95:e8:ad:b5:44:9f:dd:92:50:1d:ee:43:28:d3:48: 1c:3f:42:75:e2:4d:db:b3:55:46:ab:1a:71:2e:53:65:17:84: 05:18:26:07:70:f1:ab:40:7c:d9:22:4d:d9:f6:47:13:32:cd: 3f:2f:91:1b:22:dd:ab:db:b2:f4:05:b2:41:3f:99:49:40:63: bf:9d:d6:68:50:3c:bd:f8:2b:2b:8f:7b:2c:f3:b1:34:9a:a1: 06:ef:bf:19:dc:2d:4b:e4:6c:0e:20:d7:0b:1f:99:48:ee:90: ec:57:c2:ce:3c:cf:35:a1:c5:87:e6:57:af:f7:af:47:97:9d: 33:6e:60:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjUxMDE4MTUyNDIyWhcNMjUxMDI1MTUyNDIyWjAYMRYwFAYD VQQDEw02OGYzYjEyNi04ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+UZy11osD6RR8dqmBWSeZ9/INq0mLfihkva4JxxQc4HJimI4osjDDwtpFB6 JM0mrAMxyfh/K1M2Qh+Kiy/zWwnLCxAnIfDPc13j1rXjURICHnqgNtF2AKG004qp CWs+V7weFQSAXapU5/gmfcl3G4o1mARWsmo3TuZ0jR0u1urK50VHdMwDMhiu16HO srnRNB1mnqUXnZrsjGhOiPZxyQLTkuWIZ6y2HVszTCcKqNedz6XmOvR1lcqxXqSs YTHYrxv/De1wvzYVxfgAhMcAIDt3RzDSZvZom26TXd5K8uwQrhL6dXaTO4c5GC6x xHwAntiqDk994mgX4ik32VN1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhDxUel xUj4n1syDyPBPcDbZ410MB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWha5M2Ulh1kTD2IK4lexW9Q2RMUeewLbYK6BSMLLwI3dRIQ30xvDo hPrxGf7eBSiEm9gClZi0coZQjQ0hg5VFPfsCCe3z0G9CbVt5uBSOFt3P2OW4m8a4 4V1uqxEcy7L6s4lnxAovEBoCZJY0dNDCu3pty/xyYm89MZI6jt1xU7SV6K21RJ/d klAd7kMo00gcP0J14k3bs1VGqxpxLlNlF4QFGCYHcPGrQHzZIk3Z9kcTMs0/L5Eb It2r27L0BbJBP5lJQGO/ndZoUDy9+Csrj3ss87E0mqEG778Z3C1L5GwOINcLH5lI 7pDsV8LOPM81ocWH5lev969Hl50zbmCr -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:43 2025 by rpki-client