$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: KjzCggORGDy4iCCC8NziEpHvPM4mk7LnmX/XLCDiIu4= Subject key identifier: 6E:DE:16:FB:80:1A:10:4A:49:73:1F:24:45:DA:36:83:4D:B9:74:A6 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 041C Signing time: Sun 19 Oct 2025 02:17:13 +0000 Manifest this update: Sun 19 Oct 2025 02:17:12 +0000 Manifest next update: Sun 26 Oct 2025 02:17:12 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: pDrqjo4ZtTPnPbOwyocpazJW5YJdTYUElJulpLaCg5Q=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Oct 19 02:17:12 2025 GMT Not After : Oct 26 02:17:12 2025 GMT Subject: CN=68f44a29-550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:88:84:7a:ce:a7:6b:e2:3c:e9:f9:6f:e6: fe:21:c0:b4:b1:07:b4:67:58:53:bc:eb:94:94:3c: 0a:e2:06:0a:b9:a4:55:2a:c4:d6:1f:4b:c3:50:36: a5:a3:cb:74:84:65:1c:07:46:cf:9d:5d:a6:5e:2e: 04:2d:28:cb:ff:c1:8c:ac:41:24:7f:b0:7d:68:6c: 1c:e7:f8:e5:46:5c:f9:be:ec:1d:21:81:ce:49:de: 34:1c:8d:c7:c2:63:3a:bf:94:45:e5:27:48:95:c8: ae:55:5c:03:0e:28:04:a6:80:09:2c:56:d8:db:19: 36:bc:be:84:f4:7a:ba:f0:35:f5:b1:6f:fc:8c:68: 8d:be:d6:a2:ef:28:03:e8:70:ba:7f:ed:0e:98:a1: 97:c4:dd:91:f7:46:51:e3:41:3a:26:cd:5b:54:13: 55:9f:44:ae:69:73:a2:7b:93:56:46:90:6a:28:78: 47:da:b5:0d:d4:20:58:7c:1d:d3:59:1c:70:6b:76: 7a:76:07:1c:79:5e:44:cf:a2:e0:a4:f7:83:7b:0f: b1:3c:ee:02:2d:9f:4d:86:be:14:f4:e3:fb:cd:85: 6b:2e:8d:27:a3:df:3d:4d:0f:3f:ce:4f:0e:0e:1e: 76:62:a1:40:a8:ec:ed:8a:05:c6:29:bd:60:f3:8b: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:16:FB:80:1A:10:4A:49:73:1F:24:45:DA:36:83:4D:B9:74:A6 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:17:53:20:4d:76:38:b3:c2:55:87:b6:cf:c2:37:5a:60: d6:8a:d8:62:66:ec:3e:4d:0f:52:f3:25:56:af:87:7e:18:7e: 93:54:c5:76:78:3c:9c:10:3f:7b:e8:49:53:0f:b5:e3:c8:2b: 6c:97:bb:90:5f:49:b5:31:12:c5:c8:c5:70:f6:5d:ac:fe:94: 45:93:aa:f8:9e:ab:af:5a:4e:02:a5:78:18:71:a0:de:45:2e: db:58:24:07:45:b8:7b:a7:49:6b:5b:43:80:69:8d:8e:c1:58: 04:97:81:8c:19:13:25:f6:8c:d2:54:06:8c:49:d9:43:6b:54: 17:dc:d7:1d:79:b5:7c:2f:e3:0b:fb:bb:9d:79:2c:6a:8a:f0: 58:44:79:95:da:18:62:f0:66:e3:d7:bc:46:aa:6d:ec:2b:71: d9:49:30:38:78:a4:7b:25:6f:7f:07:82:c0:e5:54:26:c9:dd: 49:be:a1:c0:b2:ff:60:3a:e4:87:4b:76:9b:36:43:d8:5e:d7: 90:9a:43:43:3c:01:07:35:ed:5e:e3:9d:a4:18:0d:98:89:3c: ff:a1:b0:6f:cf:c4:c5:9f:6a:f4:23:a3:df:a1:ac:76:0d:e0: 38:c5:86:ec:98:91:d8:23:bd:86:b5:82:8e:64:93:27:2f:80: e7:52:33:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUxMDE5MDIxNzEyWhcNMjUxMDI2MDIxNzEyWjAYMRYwFAYD VQQDEw02OGY0NGEyOS01NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh+IhHrOp2viPOn5b+b+IcC0sQe0Z1hTvOuUlDwK4gYKuaRVKsTWH0vDUDal o8t0hGUcB0bPnV2mXi4ELSjL/8GMrEEkf7B9aGwc5/jlRlz5vuwdIYHOSd40HI3H wmM6v5RF5SdIlciuVVwDDigEpoAJLFbY2xk2vL6E9Hq68DX1sW/8jGiNvtai7ygD 6HC6f+0OmKGXxN2R90ZR40E6Js1bVBNVn0SuaXOie5NWRpBqKHhH2rUN1CBYfB3T WRxwa3Z6dgcceV5Ez6LgpPeDew+xPO4CLZ9Nhr4U9OP7zYVrLo0no989TQ8/zk8O Dh52YqFAqOztigXGKb1g84uQowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7eFvuA GhBKSXMfJEXaNoNNuXSmMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/jxdTIE12OLPCVYe2z8I3WmDWithiZuw+TQ9S8yVWr4d+GH6TVMV2 eDycED976ElTD7XjyCtsl7uQX0m1MRLFyMVw9l2s/pRFk6r4nquvWk4CpXgYcaDe RS7bWCQHRbh7p0lrW0OAaY2OwVgEl4GMGRMl9ozSVAaMSdlDa1QX3NcdebV8L+ML +7udeSxqivBYRHmV2hhi8Gbj17xGqm3sK3HZSTA4eKR7JW9/B4LA5VQmyd1JvqHA sv9gOuSHS3abNkPYXteQmkNDPAEHNe1e452kGA2YiTz/obBvz8TFn2r0I6Pfoax2 DeA4xYbsmJHYI72GtYKOZJMnL4DnUjPb -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:49 2025 by rpki-client