$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: z6KxYDbda1Pn2YiInk1zM5na39SVRQbP4K0fQMyw7LM= Subject key identifier: 34:97:B9:CA:25:45:92:CA:E1:57:B5:45:44:E1:34:93:63:92:A3:07 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0B5F Signing time: Sat 18 Oct 2025 20:25:16 +0000 Manifest this update: Sat 18 Oct 2025 20:25:16 +0000 Manifest next update: Sat 25 Oct 2025 20:25:16 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: qBz5RcWloUNsluUVuOevSE4MKvc1v8ThdOdKXliV26w=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: jW97EhwSMkh0Bo/mh1Pb9TT13jB118RG5hbBe2CtZqU=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Oct 18 20:25:16 2025 GMT Not After : Oct 25 20:25:16 2025 GMT Subject: CN=68f3f7ac-ae7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:f1:e9:65:7e:6f:bf:49:20:dc:e4:11:fc: e2:0c:32:dd:ce:d7:ff:3c:10:09:58:9e:fb:04:af: af:48:27:dc:93:58:05:78:e7:4f:b8:ff:81:c9:d4: 38:aa:fa:2a:b8:6e:1e:5a:9e:22:67:b6:e5:d7:97: cb:f3:9f:bd:d3:62:e8:3c:a3:65:22:63:df:3d:4a: aa:ff:5f:da:1c:89:26:ea:34:5a:92:0b:39:ee:2c: a9:d5:74:62:de:f6:26:11:93:cf:d7:8a:17:7d:8b: 93:46:c9:3d:79:42:e1:ac:7f:15:a1:bd:eb:6e:cb: 6f:a6:8b:35:b8:c4:5f:04:61:a7:0d:be:b1:ec:67: 78:15:8d:ce:0a:71:b8:f4:30:78:7b:1d:cf:a2:a5: 62:9f:ba:6e:48:67:e8:a0:23:f2:1b:bb:05:1e:46: 98:18:43:82:08:f2:93:21:45:24:a2:35:25:22:61: df:ed:25:50:f3:87:35:5e:35:56:24:a4:38:c6:34: 36:c1:f8:97:a4:e2:f0:7f:03:fd:9c:a0:ca:b7:02: c9:45:7c:04:86:a3:cf:d2:7e:9c:21:d7:e1:f1:7d: 02:3d:19:3c:c5:d9:91:ed:7a:8c:89:6f:c8:64:26: 74:31:da:65:67:84:4d:63:78:ee:79:a8:9c:13:36: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:B9:CA:25:45:92:CA:E1:57:B5:45:44:E1:34:93:63:92:A3:07 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9a:65:5b:32:b7:f7:e1:ca:6c:a3:3c:f6:73:73:58:5e:a9: f1:89:37:ca:b4:57:57:c2:2e:f2:37:90:ed:ca:05:8c:c8:9c: 21:06:b8:1b:50:67:43:1e:da:7b:bd:87:10:aa:58:bc:ac:02: 09:da:38:e6:a3:7a:a6:f1:d1:8d:dd:b5:fb:52:b9:47:bb:98: 7a:f4:03:b5:e0:fd:4b:e5:ea:41:73:b1:af:88:01:17:2e:f2: 4a:47:6b:7e:de:bd:ac:da:a5:86:61:f7:a0:f3:20:0a:2c:79: c7:96:da:12:a4:cb:62:b6:df:ee:7f:16:83:45:ac:43:86:05: a0:91:c0:2c:f8:a0:5c:d6:95:5b:08:70:a6:72:0d:49:85:4f: 4b:02:c9:56:60:60:13:88:5b:d6:2b:b8:9c:02:2b:90:f1:eb: 1c:01:32:32:40:95:46:8a:f1:ba:f7:3f:e8:45:01:c6:73:ee: 81:3b:c8:a3:b5:09:c7:ce:41:13:91:93:19:7f:65:12:54:42: a7:ac:b2:cc:7c:48:f6:56:1e:fd:b9:d3:f5:bc:d3:3b:79:bd: 2e:7d:4b:7a:29:47:00:3d:b9:a2:12:4b:fe:3d:f8:d8:9e:52: fd:00:22:d7:de:3d:f0:ab:a5:ab:3b:a0:37:e6:3e:d6:a6:54: 1d:4e:8b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUxMDE4MjAyNTE2WhcNMjUxMDI1MjAyNTE2WjAYMRYwFAYD VQQDEw02OGYzZjdhYy1hZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM/x6WV+b79JINzkEfziDDLdztf/PBAJWJ77BK+vSCfck1gFeOdPuP+BydQ4 qvoquG4eWp4iZ7bl15fL85+902LoPKNlImPfPUqq/1/aHIkm6jRakgs57iyp1XRi 3vYmEZPP14oXfYuTRsk9eULhrH8Vob3rbstvpos1uMRfBGGnDb6x7Gd4FY3OCnG4 9DB4ex3PoqVin7puSGfooCPyG7sFHkaYGEOCCPKTIUUkojUlImHf7SVQ84c1XjVW JKQ4xjQ2wfiXpOLwfwP9nKDKtwLJRXwEhqPP0n6cIdfh8X0CPRk8xdmR7XqMiW/I ZCZ0MdplZ4RNY3jueaicEzaT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSXucol RZLK4Ve1RUThNJNjkqMHMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymmVbMrf34cpsozz2c3NYXqnxiTfKtFdXwi7yN5DtygWMyJwhBrgb UGdDHtp7vYcQqli8rAIJ2jjmo3qm8dGN3bX7UrlHu5h69AO14P1L5epBc7GviAEX LvJKR2t+3r2s2qWGYfeg8yAKLHnHltoSpMtitt/ufxaDRaxDhgWgkcAs+KBc1pVb CHCmcg1JhU9LAslWYGATiFvWK7icAiuQ8escATIyQJVGivG69z/oRQHGc+6BO8ij tQnHzkETkZMZf2USVEKnrLLMfEj2Vh79udP1vNM7eb0ufUt6KUcAPbmiEkv+PfjY nlL9ACLX3j3wq6WrO6A35j7WplQdTouC -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:10 2025 by rpki-client