$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: dPTjKWspMaJGq46h1NgE4GpZaJva4+8d9Xy7J8TYRuc= Subject key identifier: F0:78:29:9C:46:C9:C0:47:49:16:89:F5:0B:51:AF:0C:09:48:BE:ED Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: BE Signing time: Sun 19 Oct 2025 07:19:47 +0000 Manifest this update: Sun 19 Oct 2025 07:19:46 +0000 Manifest next update: Sun 26 Oct 2025 07:19:46 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: ZRLjlJetfwnWtUtV5Rp8CWDJl+H+vsUn4B/CvZrDUYM=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Oct 19 07:19:46 2025 GMT Not After : Oct 26 07:19:46 2025 GMT Subject: CN=68f49113-87e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:f8:ad:31:dd:ba:bd:f7:a9:79:e7:36:b2: 3b:f7:e1:0f:71:0a:11:78:13:17:e5:70:19:06:48: 70:61:54:ab:64:7a:d7:b4:da:96:1b:7c:9e:38:20: 56:de:7c:8c:ae:bf:e8:92:fd:be:41:e6:0d:d1:19: e5:9c:ca:d7:b7:09:7d:7c:69:e5:2c:de:bc:7a:3c: 8e:eb:ca:c4:98:88:57:f0:8a:a6:64:c4:46:22:80: b7:7b:77:7d:39:41:2e:f2:8b:bc:8c:47:ed:d8:e0: 3c:71:97:58:17:9f:a4:61:af:00:36:c3:01:5a:d4: 6a:f6:fe:4d:fd:4c:14:b7:f7:63:de:44:76:cf:4c: 01:bf:ba:2e:6b:92:29:a6:55:e1:ca:bd:d0:52:0b: e7:fc:9b:7a:1c:0d:ae:e9:3d:41:34:d4:48:de:fc: 16:5b:c7:80:b5:b8:c1:ac:2d:bd:7d:2f:79:cf:f1: 6e:86:64:1d:3a:43:35:ec:8c:6c:df:0c:ed:31:df: d5:a2:f5:2e:44:a9:0a:c7:5a:12:7c:92:5c:b8:af: ac:37:f7:f5:59:e1:f3:a5:c8:6a:08:1a:6d:b9:a2: 56:f5:c0:67:08:f0:90:e1:a3:a6:ed:2c:67:65:c9: f9:95:30:6b:b3:7d:f9:60:df:ed:ef:89:cc:c3:7d: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:29:9C:46:C9:C0:47:49:16:89:F5:0B:51:AF:0C:09:48:BE:ED X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:be:14:97:d3:1b:cf:49:9f:1f:f0:5e:a0:04:21:1b:aa:ec: 51:66:b8:7e:ed:fe:df:53:d0:6e:62:e6:2c:b3:b6:4c:ea:09: 00:63:8d:d3:9c:41:f3:6f:17:a3:4d:e7:4d:8e:0a:7f:38:ba: b8:af:31:ef:2b:46:ca:78:e0:5b:be:6e:48:ee:8c:7e:0e:53: 3b:32:14:82:2d:cd:27:18:36:b9:fb:f8:d6:35:13:a9:17:f0: 09:30:a7:ef:f9:25:4f:8f:33:aa:d8:0a:1c:52:38:35:8a:61: cc:4b:ab:cc:c3:d2:25:d3:30:f7:f0:8a:eb:31:94:19:29:1b: 05:92:51:16:cc:b1:eb:be:88:4d:77:24:97:bf:5f:b8:4a:0e: 97:43:5f:3c:0f:91:d3:a3:9a:93:bc:63:7f:32:93:5d:49:f2: 5e:0a:e6:31:b4:67:0d:6d:d0:18:6c:45:f4:54:04:d1:6c:3d: 6b:8d:f1:4c:5e:9b:0b:a3:fa:bd:32:39:61:f0:6e:be:5d:e5: fd:fa:59:47:58:54:70:c4:12:52:b8:98:ab:63:5a:59:24:9e: 12:fe:35:f6:9c:e9:bc:80:19:bb:ff:5d:3c:dd:91:ec:d0:17: c3:cd:8a:a4:e8:56:70:7b:4e:6c:58:41:8f:c0:55:10:ef:46: 63:74:53:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5 Q0IyQUIxM0YwHhcNMjUxMDE5MDcxOTQ2WhcNMjUxMDI2MDcxOTQ2WjAYMRYwFAYD VQQDEw02OGY0OTExMy04N2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Or4rTHdur33qXnnNrI79+EPcQoReBMX5XAZBkhwYVSrZHrXtNqWG3yeOCBW 3nyMrr/okv2+QeYN0RnlnMrXtwl9fGnlLN68ejyO68rEmIhX8IqmZMRGIoC3e3d9 OUEu8ou8jEft2OA8cZdYF5+kYa8ANsMBWtRq9v5N/UwUt/dj3kR2z0wBv7oua5Ip plXhyr3QUgvn/Jt6HA2u6T1BNNRI3vwWW8eAtbjBrC29fS95z/FuhmQdOkM17Ixs 3wztMd/VovUuRKkKx1oSfJJcuK+sN/f1WeHzpchqCBptuaJW9cBnCPCQ4aOm7Sxn Zcn5lTBrs335YN/t74nMw32R3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB4KZxG ycBHSRaJ9QtRrwwJSL7tMB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93 bWt3V0dyX3QtSGVjc3FzVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavhSX0xvPSZ8f8F6gBCEbquxRZrh+7f7fU9BuYuYss7ZM6gkAY43T nEHzbxejTedNjgp/OLq4rzHvK0bKeOBbvm5I7ox+DlM7MhSCLc0nGDa5+/jWNROp F/AJMKfv+SVPjzOq2AocUjg1imHMS6vMw9Il0zD38IrrMZQZKRsFklEWzLHrvohN dySXv1+4Sg6XQ188D5HTo5qTvGN/MpNdSfJeCuYxtGcNbdAYbEX0VATRbD1rjfFM XpsLo/q9Mjlh8G6+XeX9+llHWFRwxBJSuJirY1pZJJ4S/jX2nOm8gBm7/1083ZHs 0BfDzYqk6FZwe05sWEGPwFUQ70ZjdFP8 -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:31 2025 by rpki-client