$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: dJ/ulzKV75rOKdfrgovdqPif1YGxWAwCoSO+03fMzCo= Subject key identifier: 58:F7:68:18:9C:BE:E3:E3:E6:71:FD:6E:C9:1C:8C:71:C0:13:67:24 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 052D Signing time: Sun 19 Oct 2025 01:16:09 +0000 Manifest this update: Sun 19 Oct 2025 01:16:09 +0000 Manifest next update: Sun 26 Oct 2025 01:16:09 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: PDO4H4TZHOMInnHa64LInr9k+rgj3arppOJN5+8FJAw=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Oct 19 01:16:09 2025 GMT Not After : Oct 26 01:16:09 2025 GMT Subject: CN=68f43bd9-30f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:69:8f:8e:7c:40:ee:79:56:c0:89:ff:a4: a5:7a:76:d9:63:75:75:1b:a7:60:54:44:e4:6d:0f: 59:16:bf:d8:a2:ea:4b:92:d0:30:b3:37:96:1c:b3: 08:6a:d6:27:82:d3:64:58:eb:84:a0:54:42:85:6a: 14:db:43:ed:04:34:a1:a6:99:19:3b:02:c7:96:00: 4a:6b:44:e9:49:9e:23:82:f2:04:ff:2d:b3:24:3b: 95:0c:30:23:f1:99:ec:de:a8:66:a9:00:e6:a2:bf: 4d:e5:a1:58:ae:58:03:a8:ea:b0:ca:3d:b5:22:c9: 80:4c:2d:35:67:a2:af:11:29:5d:d0:eb:98:08:fc: b6:26:66:04:73:c0:53:47:55:3d:e8:5c:78:05:4c: ed:62:69:bc:a3:8e:78:87:19:e2:78:3f:ad:bd:6b: 75:7d:c1:63:04:d2:c5:f9:95:e2:bc:fa:fc:e4:80: 0d:70:b6:b8:b2:8f:52:1e:b4:73:9c:0f:76:ca:17: ee:71:11:5e:07:11:a6:97:b4:c8:e2:9a:07:7d:44: 7f:76:98:17:8d:3c:8f:e1:cf:19:23:c1:19:61:3c: 2b:39:51:62:10:dd:7d:68:8a:eb:2c:db:56:7c:42: 94:cf:70:37:eb:07:17:79:c8:d1:97:91:7f:5d:ec: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:68:18:9C:BE:E3:E3:E6:71:FD:6E:C9:1C:8C:71:C0:13:67:24 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0d:f8:6b:db:c1:37:0a:f9:91:99:ac:ce:85:b4:a6:df:94: a4:16:11:17:b4:3a:4b:46:ed:3f:5d:90:5e:9b:2e:73:c6:a5: 3b:a7:33:b8:06:d3:b9:fa:2a:d8:01:55:70:1b:d3:f8:d8:e2: b6:d1:9a:b6:99:49:2b:5e:bc:b3:8e:f9:6d:42:43:22:d2:fc: b4:24:64:d9:ba:3f:2c:19:f2:9d:3a:fd:6e:b4:33:d1:8c:f6: 14:d8:83:cf:6f:b4:99:7f:40:56:cb:eb:af:74:ca:9e:79:fe: dc:bc:eb:28:17:d8:ba:bd:c7:c9:fb:7c:77:a7:f2:2b:1a:42: f1:c5:2c:ea:53:09:5f:7e:cd:1d:ff:d9:d1:dd:53:30:97:c2: 90:02:0f:32:f3:72:2c:42:48:a5:e1:37:aa:ff:14:83:23:8e: 38:0b:b7:b7:67:c1:42:93:b9:67:c3:53:47:58:4e:ab:54:32: d1:0c:9a:90:b0:23:cd:f1:03:22:c2:a0:66:d9:c0:ec:11:b0: b3:b8:6c:43:c6:65:25:85:c3:e9:b9:51:4a:b2:93:71:da:7f: 7d:e1:08:6b:98:14:d6:e7:35:aa:b6:94:77:a1:c1:3d:c6:4c: 16:2e:fa:31:21:97:ad:bc:c3:65:02:9b:bc:75:43:fd:b9:76: 1d:c2:f2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUxMDE5MDExNjA5WhcNMjUxMDI2MDExNjA5WjAYMRYwFAYD VQQDEw02OGY0M2JkOS0zMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ktpj458QO55VsCJ/6SlenbZY3V1G6dgVETkbQ9ZFr/YoupLktAwszeWHLMI atYngtNkWOuEoFRChWoU20PtBDShppkZOwLHlgBKa0TpSZ4jgvIE/y2zJDuVDDAj 8Zns3qhmqQDmor9N5aFYrlgDqOqwyj21IsmATC01Z6KvESld0OuYCPy2JmYEc8BT R1U96Fx4BUztYmm8o454hxnieD+tvWt1fcFjBNLF+ZXivPr85IANcLa4so9SHrRz nA92yhfucRFeBxGml7TI4poHfUR/dpgXjTyP4c8ZI8EZYTwrOVFiEN19aIrrLNtW fEKUz3A36wcXecjRl5F/XeyP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj3aBic vuPj5nH9bskcjHHAE2ckMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKDfhr28E3CvmRmazOhbSm35SkFhEXtDpLRu0/XZBemy5zxqU7pzO4 BtO5+irYAVVwG9P42OK20Zq2mUkrXryzjvltQkMi0vy0JGTZuj8sGfKdOv1utDPR jPYU2IPPb7SZf0BWy+uvdMqeef7cvOsoF9i6vcfJ+3x3p/IrGkLxxSzqUwlffs0d /9nR3VMwl8KQAg8y83IsQkil4Teq/xSDI444C7e3Z8FCk7lnw1NHWE6rVDLRDJqQ sCPN8QMiwqBm2cDsEbCzuGxDxmUlhcPpuVFKspNx2n994QhrmBTW5zWqtpR3ocE9 xkwWLvoxIZetvMNlApu8dUP9uXYdwvJV -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:05 2025 by rpki-client