$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: t1+bv6cse+x5sgI/ESurqsFshSv3+pG+/+S6Sls2d9U= Subject key identifier: 17:A2:52:C1:00:29:8A:C8:5E:AA:66:84:E5:08:66:6B:48:C4:74:23 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D5B Signing time: Sat 18 Oct 2025 18:40:25 +0000 Manifest this update: Sat 18 Oct 2025 18:40:24 +0000 Manifest next update: Sat 25 Oct 2025 18:40:24 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: qqfKLFBf4W5/d0wQyosG//zFcJMmP9mI7dowUiwVwEk=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3435 (0xd6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Oct 18 18:40:24 2025 GMT Not After : Oct 25 18:40:24 2025 GMT Subject: CN=68f3df18-cc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:c0:ad:8c:b7:32:0a:a9:9a:56:51:30:c4: cf:b3:21:13:7e:20:75:cd:c2:20:a1:14:02:6e:e6: 7f:7d:fc:ab:ed:ac:6e:25:d7:72:a1:39:5d:fd:71: 38:cb:11:80:0e:3e:7c:97:47:65:3c:c4:d9:e6:3d: 45:31:60:3a:fc:f2:1f:57:5b:66:9a:27:10:92:50: d3:fe:cd:36:25:88:d3:49:15:e9:5c:e0:18:e9:49: bb:58:50:d2:87:b5:c5:87:50:25:96:d8:a5:6d:7b: 17:cd:76:37:ad:3e:6c:24:69:3c:4c:52:90:dc:ef: 7c:d2:4e:01:2f:4d:a1:f3:85:37:14:31:d4:32:b8: d0:bf:53:4d:e9:4d:87:1c:a7:86:a8:97:42:bf:76: 01:42:46:82:e7:0c:72:67:ad:33:3b:f4:e5:27:f8: 6b:d4:20:6b:5c:67:15:48:fa:2e:24:16:57:2a:27: 57:8b:b0:34:06:65:45:a4:f8:54:c0:98:b3:2c:5e: ac:0e:98:4a:1a:d0:c6:1f:a5:33:7d:6a:d7:ad:11: d9:57:30:35:9a:b4:90:a1:69:3e:d1:1c:c9:9b:8f: a4:ab:b2:a2:5d:7b:5a:48:9e:9d:1d:da:87:c4:e6: be:85:b9:d0:40:e0:2b:da:f1:1b:ea:b8:7f:50:e3: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:52:C1:00:29:8A:C8:5E:AA:66:84:E5:08:66:6B:48:C4:74:23 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:14:4b:9c:6e:b5:1b:37:fd:41:47:c2:09:d5:f6:80:6b:5e: a0:7d:0e:6a:a4:e3:d5:27:9a:a8:71:e2:6f:0b:97:42:7a:0e: 63:af:36:6d:5d:14:be:71:69:c1:cd:bd:84:97:f0:29:e3:1d: 4c:6a:d6:fd:b4:b6:00:2a:df:a4:26:03:67:e4:d9:35:70:ec: 02:d7:ec:32:0d:d1:67:3a:bf:57:b3:cb:fe:9d:b6:a0:f9:8d: 0e:5d:11:12:25:16:39:3d:e8:a6:aa:49:94:67:71:02:e3:72: 88:03:59:6a:64:9d:79:c1:d1:db:c4:3d:dd:1b:22:9b:4e:6e: 9a:60:4f:fa:83:48:20:54:d1:4f:49:e1:75:a7:41:b8:9d:6e: 05:be:2e:d5:c6:ab:2b:74:59:91:c8:a9:e9:81:e8:6b:30:6e: 53:cc:e5:99:e1:56:a8:30:bc:64:6e:51:58:8c:40:97:2c:7c: dd:ea:31:c8:4e:63:05:05:2b:4e:ff:9d:9e:e4:f2:e8:38:95: ea:ad:7f:45:f3:0e:0c:a3:be:84:2d:76:f5:26:ae:8f:ce:e0: 71:90:a7:b1:21:24:ad:e1:6a:69:29:25:ba:bc:f9:d0:42:28: 24:ef:60:98:02:f8:a9:c8:ca:cb:6f:58:12:d2:a4:d0:00:15: 89:a6:ba:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUxMDE4MTg0MDI0WhcNMjUxMDI1MTg0MDI0WjAYMRYwFAYD VQQDEw02OGYzZGYxOC1jYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaXArYy3MgqpmlZRMMTPsyETfiB1zcIgoRQCbuZ/ffyr7axuJddyoTld/XE4 yxGADj58l0dlPMTZ5j1FMWA6/PIfV1tmmicQklDT/s02JYjTSRXpXOAY6Um7WFDS h7XFh1AlltilbXsXzXY3rT5sJGk8TFKQ3O980k4BL02h84U3FDHUMrjQv1NN6U2H HKeGqJdCv3YBQkaC5wxyZ60zO/TlJ/hr1CBrXGcVSPouJBZXKidXi7A0BmVFpPhU wJizLF6sDphKGtDGH6UzfWrXrRHZVzA1mrSQoWk+0RzJm4+kq7KiXXtaSJ6dHdqH xOa+hbnQQOAr2vEb6rh/UOP8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeiUsEA KYrIXqpmhOUIZmtIxHQjMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIFEucbrUbN/1BR8IJ1faAa16gfQ5qpOPVJ5qoceJvC5dCeg5jrzZt XRS+cWnBzb2El/Ap4x1Matb9tLYAKt+kJgNn5Nk1cOwC1+wyDdFnOr9Xs8v+nbag +Y0OXRESJRY5PeimqkmUZ3EC43KIA1lqZJ15wdHbxD3dGyKbTm6aYE/6g0ggVNFP SeF1p0G4nW4Fvi7VxqsrdFmRyKnpgehrMG5TzOWZ4VaoMLxkblFYjECXLHzd6jHI TmMFBStO/52e5PLoOJXqrX9F8w4Mo76ELXb1Jq6PzuBxkKexISSt4WppKSW6vPnQ Qigk72CYAvipyMrLb1gS0qTQABWJprr0 -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:34 2025 by rpki-client