$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: FGhuQlLvb26nZN8vEDtPU/5lgFZ7FD+kG0gD/gFq36Q= Subject key identifier: 3E:31:45:EE:7F:B2:3B:80:72:3F:E4:29:58:C3:B6:59:3B:83:1E:B8 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:32:21 +0000 Manifest this update: Sun 19 Oct 2025 11:32:20 +0000 Manifest next update: Sun 26 Oct 2025 11:32:20 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: UVGCrLbEhyXnldgTwU4zBhVuRNmcScddwENKCAXXtHg=) 2: 0919A7B69C4111F0A9483031C4F9AE02.roa (hash: WAKRMBYdCNNPwO0lju5L+3xdfnFpvUpYnLtfFW5BMDI=) 3: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: eJQ8VpLRh2oneqc+pD9iVMlkPhwELFW4GgUQs63qAQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Oct 19 11:32:20 2025 GMT Not After : Oct 26 11:32:20 2025 GMT Subject: CN=68f4cc45-8d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:15:41:07:76:9b:d0:f3:2a:97:f9:11:f4: 18:03:13:5d:2d:b7:3d:f0:49:cb:4f:20:8e:1c:2d: b0:6c:8d:fc:fc:3b:d3:84:ea:be:1f:4e:e6:ae:7a: 25:84:6c:dd:2e:2f:e2:00:b4:f8:87:16:8c:24:b5: 1f:45:40:e9:76:9d:76:2b:4b:45:7e:ff:19:76:ba: ef:9c:af:d0:3e:b7:e2:8f:db:9c:a4:bd:c7:bb:0c: 50:4f:c6:52:bd:9c:a0:30:41:ce:b6:5f:ea:63:dd: 02:df:91:a0:0d:49:38:f9:6a:c6:d0:af:f0:ea:5f: 9d:2f:59:0a:f0:c9:f3:76:de:71:59:cf:e8:68:51: 38:4f:98:aa:da:dd:ca:28:d0:22:ce:66:28:a5:a2: ef:d3:a3:af:d7:c7:f1:9e:b9:37:69:87:3c:8a:bd: f3:fd:94:6e:17:0c:2e:71:94:1b:55:95:d4:f7:58: 06:e7:28:fe:88:ca:8f:94:77:93:28:ac:96:4a:c3: 51:73:58:d9:4a:34:8a:86:35:ea:37:d1:c2:65:60: fd:bc:c9:07:4f:ef:ef:22:ed:da:d9:a7:1e:2a:03: 63:af:3d:f1:6e:72:07:8a:da:d7:ba:fa:2f:1d:8a: 69:48:06:52:ac:51:4b:ec:5c:ad:aa:9e:96:76:89: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:45:EE:7F:B2:3B:80:72:3F:E4:29:58:C3:B6:59:3B:83:1E:B8 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:f4:10:ec:63:83:ed:18:4f:bb:a0:de:45:b2:7e:a3:c1: 24:b3:74:c2:ed:ba:53:7c:f9:c4:62:93:57:80:62:f7:37:8e: d2:e4:da:07:fc:eb:b0:b6:1a:b7:07:b8:36:b6:00:61:4a:19: 88:48:89:a1:67:81:d9:85:1b:f9:35:10:c5:fc:a9:97:a7:cd: c0:6a:ce:c7:1b:a7:64:15:17:25:c1:a4:58:f6:76:47:ea:7e: 76:5c:e9:14:6c:94:b4:b0:75:00:cd:64:b0:e7:15:e5:ac:a3: 29:80:96:ae:22:ff:b1:68:4b:b3:e7:8d:c0:d6:3e:d0:bb:4c: f9:2c:7b:82:8a:24:6a:2a:fd:1c:0a:a3:08:0b:a5:1e:27:5f: 62:7c:a5:4d:b5:9b:90:07:ed:6e:e4:02:e0:85:15:da:b5:21: c0:f8:77:b4:a8:d6:33:b8:de:fd:fe:04:25:66:29:0f:24:4e: cb:5a:e5:fe:03:8e:66:c3:7a:c6:bc:d6:42:4a:8d:f5:e1:07: a1:22:88:27:bd:94:8d:22:00:18:a0:ea:de:5c:c0:5c:fc:91: 99:d1:71:55:81:a3:60:6d:29:cb:b9:1a:bf:7c:64:c9:1e:54: 5c:f3:cd:9d:62:f4:84:39:d4:c4:8a:4c:10:6a:ef:6c:36:cf: ad:20:70:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2 MkZEMDFBRjAeFw0yNTEwMTkxMTMyMjBaFw0yNTEwMjYxMTMyMjBaMBgxFjAUBgNV BAMTDTY4ZjRjYzQ1LThkMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXbxVBB3ab0PMql/kR9BgDE10ttz3wSctPII4cLbBsjfz8O9OE6r4fTuaueiWE bN0uL+IAtPiHFowktR9FQOl2nXYrS0V+/xl2uu+cr9A+t+KP25ykvce7DFBPxlK9 nKAwQc62X+pj3QLfkaANSTj5asbQr/DqX50vWQrwyfN23nFZz+hoUThPmKra3coo 0CLOZiilou/To6/Xx/GeuTdphzyKvfP9lG4XDC5xlBtVldT3WAbnKP6Iyo+Ud5Mo rJZKw1FzWNlKNIqGNeo30cJlYP28yQdP7+8i7drZpx4qA2OvPfFucgeK2te6+i8d imlIBlKsUUvsXK2qnpZ2iRwjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPjFF7n+y O4ByP+QpWMO2WTuDHrgwHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3 NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RDFGL0FEMjAyMUE0OTc3NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tP STZQeHBkWThFV1dMOUFhOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4y9BDsY4PtGE+7oN5Fsn6jwSSzdMLtulN8+cRik1eAYvc3jtLk2gf8 67C2GrcHuDa2AGFKGYhIiaFngdmFG/k1EMX8qZenzcBqzscbp2QVFyXBpFj2dkfq fnZc6RRslLSwdQDNZLDnFeWsoymAlq4i/7FoS7PnjcDWPtC7TPkse4KKJGoq/RwK owgLpR4nX2J8pU21m5AH7W7kAuCFFdq1IcD4d7So1jO43v3+BCVmKQ8kTsta5f4D jmbDesa81kJKjfXhB6EiiCe9lI0iABig6t5cwFz8kZnRcVWBo2BtKcu5Gr98ZMke VFzzzZ1i9IQ51MSKTBBq72w2z60gcOk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:37 2025 by rpki-client