$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: MNQwuSwOQJLzpZFmbOJF438QN2amWP9Iv9aI+7CWDb8= Subject key identifier: F4:7D:B7:88:F5:B9:24:77:19:6C:07:C7:B8:9F:E2:08:60:79:92:38 Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0A3F Signing time: Mon 20 Oct 2025 20:30:34 +0000 Manifest this update: Mon 20 Oct 2025 20:30:34 +0000 Manifest next update: Mon 27 Oct 2025 20:30:34 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: Zt8Tpg8M9JT9kYKso31gy9DLhxwwnvDuHRN6mXrNzMw=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: tQlFLU0/QDy1JWm1WrQnSqEMBi5FKL1OgfRiRvzeWq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Oct 20 20:30:34 2025 GMT Not After : Oct 27 20:30:34 2025 GMT Subject: CN=68f69bea-a9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:c8:1d:f1:af:45:df:b6:39:91:aa:15:9d: 9f:d5:58:da:40:5f:10:9a:c0:31:aa:f3:78:9f:83: 8f:9c:76:80:26:80:d6:d5:c9:d2:a6:9b:77:0b:d4: de:cb:78:88:d9:4a:53:96:80:c5:89:7c:0a:68:fb: 25:21:77:cf:ee:05:a6:5f:72:fa:fd:d1:89:c7:11: 2b:f7:fb:e5:fe:bb:17:33:9e:2a:da:2d:ad:4c:8f: 3b:47:c8:69:be:36:71:46:ad:6d:6c:2d:0a:43:aa: e3:3a:af:62:47:f5:0c:bf:7f:86:51:14:84:2b:24: e6:44:0b:49:77:4c:10:a3:1b:c8:05:31:d7:0f:1e: 35:a4:d7:c9:68:34:6a:be:82:04:10:cd:ea:88:6a: b7:7c:66:c8:a6:01:f5:66:6f:39:ae:1c:93:84:fd: 4b:42:7e:49:43:cd:a5:9f:c4:7c:d0:c9:08:50:e5: ca:97:85:0a:3e:c0:f9:ae:59:60:83:b2:4c:f4:ec: 75:8b:94:fe:c2:d8:4c:80:02:40:e9:7f:b1:fb:f2: ef:b6:e2:1f:ce:2d:34:d2:3f:0d:1f:d4:ea:c1:c2: d9:a5:be:78:29:c4:5c:e6:29:73:f4:ee:d5:f8:d1: d8:da:3d:74:b2:2f:d2:23:93:df:06:9d:d0:0c:70: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7D:B7:88:F5:B9:24:77:19:6C:07:C7:B8:9F:E2:08:60:79:92:38 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b7:85:4d:82:d5:df:75:a7:db:4e:83:15:a3:8c:8f:d8:ed: 10:22:b5:cf:12:13:d2:2f:13:7f:ed:26:80:10:9d:93:d9:84: 59:73:17:46:5c:5b:22:c8:26:79:97:de:6e:c1:40:9c:13:79: 6c:f0:3e:1c:77:44:78:20:a9:47:6f:e4:c4:b2:f3:ec:ab:0e: 83:3f:62:1a:09:46:e2:a6:5a:72:1b:74:e1:31:78:ba:f5:12: a5:08:7d:d7:b1:83:fa:d4:79:86:81:4c:4b:cb:e6:69:6d:0d: be:c8:2e:2f:1b:df:f9:17:06:1a:0d:ea:a4:73:68:40:59:70: 76:70:ef:c5:f5:61:06:cd:40:68:0d:57:79:91:2c:0c:3c:b5: 30:db:ce:5b:ef:5a:a0:07:3e:43:1c:1d:6c:7c:94:6e:76:17: b2:a0:45:8e:2e:ef:94:0e:28:62:8a:cf:cb:94:3c:51:31:d6: 08:8e:ae:22:eb:aa:a8:a7:06:4a:cf:09:72:51:0c:27:52:6e: f4:00:f0:d0:67:ab:cf:75:d1:8e:5a:d6:af:64:74:22:9d:24: 95:fe:80:37:90:91:33:fa:20:e4:ec:2c:d7:26:67:b0:72:f2: 66:21:1b:34:05:95:fe:ac:82:cf:45:ff:38:ca:f6:bf:ef:fb: 96:24:cb:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjUxMDIwMjAzMDM0WhcNMjUxMDI3MjAzMDM0WjAYMRYwFAYD VQQDEw02OGY2OWJlYS1hOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspbIHfGvRd+2OZGqFZ2f1VjaQF8QmsAxqvN4n4OPnHaAJoDW1cnSppt3C9Te y3iI2UpTloDFiXwKaPslIXfP7gWmX3L6/dGJxxEr9/vl/rsXM54q2i2tTI87R8hp vjZxRq1tbC0KQ6rjOq9iR/UMv3+GURSEKyTmRAtJd0wQoxvIBTHXDx41pNfJaDRq voIEEM3qiGq3fGbIpgH1Zm85rhyThP1LQn5JQ82ln8R80MkIUOXKl4UKPsD5rllg g7JM9Ox1i5T+wthMgAJA6X+x+/LvtuIfzi000j8NH9TqwcLZpb54KcRc5ilz9O7V +NHY2j10si/SI5PfBp3QDHB5nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR9t4j1 uSR3GWwHx7if4ghgeZI4MB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUt4VNgtXfdafbToMVo4yP2O0QIrXPEhPSLxN/7SaAEJ2T2YRZcxdG XFsiyCZ5l95uwUCcE3ls8D4cd0R4IKlHb+TEsvPsqw6DP2IaCUbiplpyG3ThMXi6 9RKlCH3XsYP61HmGgUxLy+ZpbQ2+yC4vG9/5FwYaDeqkc2hAWXB2cO/F9WEGzUBo DVd5kSwMPLUw285b71qgBz5DHB1sfJRudheyoEWOLu+UDihiis/LlDxRMdYIjq4i 66qopwZKzwlyUQwnUm70APDQZ6vPddGOWtavZHQinSSV/oA3kJEz+iDk7CzXJmew cvJmIRs0BZX+rILPRf84yva/7/uWJMtS -----END CERTIFICATE-----Generated at Tue Oct 21 05:17:37 2025 by rpki-client