$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: 0LQDREPx2WWq3CaVHIJ2aVyUNw4RhZjC7YtNAu130rg= Subject key identifier: A6:62:EF:41:B5:BB:9E:9B:EC:31:38:8E:24:4F:0D:C8:82:7C:E6:E8 Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 43 Signing time: Sun 19 Oct 2025 11:00:38 +0000 Manifest this update: Sun 19 Oct 2025 11:00:38 +0000 Manifest next update: Sun 26 Oct 2025 11:00:38 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: QgqoIFJdCcQYFTWGcr3MIcrM8obZEA0OZfQNn1XvwXQ=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: PluL4u9/W0M7wPOfAaOa3JDqqwKeth4r4yq9LLQTP5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Oct 19 11:00:38 2025 GMT Not After : Oct 26 11:00:38 2025 GMT Subject: CN=68f4c4d6-9136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:47:1b:c1:b7:75:64:76:ac:ff:a4:ac:8d: d8:80:90:00:b6:5f:e8:c0:55:5a:da:c7:c2:9b:c0: 98:71:fd:07:90:85:6c:31:cb:bb:d5:56:ac:91:ad: c8:c5:2e:76:8b:dc:bf:3f:1d:54:66:6c:d5:ae:e6: e4:38:b4:62:fa:82:fb:ce:5a:1e:95:b3:d6:d5:c5: 56:de:50:c2:ee:73:1b:3b:f8:1f:3f:03:a3:c1:52: da:de:cc:17:13:c9:dc:5f:7d:99:f8:1f:61:72:92: 73:d2:7d:5f:cd:9f:a3:b6:0e:b3:5c:96:e8:2d:a2: 5e:f8:cc:2d:fb:78:23:7b:a5:85:38:5e:47:be:fa: 7e:2d:4a:b7:e2:09:1a:b3:58:75:45:05:36:fd:d1: 7c:31:7a:b4:e9:40:69:fb:0c:49:e5:9b:af:43:f1: 49:e0:fb:7c:e5:89:35:09:6d:84:b4:d0:28:42:b3: 31:02:f7:7f:15:d3:78:b4:e6:88:ab:22:0d:02:ca: 20:18:8a:89:c1:75:9e:db:c9:3b:6f:b2:d2:3b:12: 35:b4:0b:b2:5d:67:94:f7:d6:dc:2b:04:50:a0:4b: 42:32:3d:c1:af:c7:db:2d:3d:c6:aa:c9:80:1a:28: f6:89:05:91:fe:37:19:99:da:71:92:5b:1b:db:ed: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:EF:41:B5:BB:9E:9B:EC:31:38:8E:24:4F:0D:C8:82:7C:E6:E8 X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:8d:2e:81:e3:98:92:90:d4:61:de:45:22:07:71:c3:3d: ab:85:3e:41:98:98:c2:c1:e5:04:98:5a:ad:10:59:da:80:5f: ac:60:f3:06:d1:cb:28:e4:bd:90:8e:13:7d:33:0d:2c:24:58: 71:e4:95:b8:3f:1b:23:62:ee:64:5b:34:81:f9:2f:49:ea:a6: 3d:e5:3c:0a:f0:c8:29:f8:61:48:c9:94:89:f2:82:33:41:44: 36:26:70:24:20:17:87:7c:ec:26:dc:3b:47:85:b6:40:40:d1: ca:75:77:a1:e5:c5:61:cf:ed:2d:cc:2b:19:d3:2c:50:98:f8: 1e:ff:44:ed:cb:95:ff:cb:3b:7f:7d:07:32:35:46:27:d6:6f: a5:d6:40:94:cf:73:1c:0c:66:f2:d1:84:e9:44:be:3e:c9:12: 83:62:76:d9:4c:07:9c:ec:a6:fd:55:59:8c:8d:17:a5:b5:30: 48:08:9f:ee:c8:9c:13:82:b1:fc:47:83:9e:9a:03:47:51:0f: 93:5c:e2:6b:41:55:ce:86:ef:96:ac:13:71:ca:b5:ad:75:74: ea:e5:b1:a3:04:29:86:7f:ae:66:95:a5:af:87:c0:bb:83:96: 6f:e6:32:c9:3f:37:4a:ac:4b:d3:ee:34:d9:0a:2a:ab:ce:dd: de:0b:27:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoMEY5MTRBMURDOTRGNUJFNDJFODgzQzJBREQ1NDMwQkNE RjZERjMzNDAeFw0yNTEwMTkxMTAwMzhaFw0yNTEwMjYxMTAwMzhaMBgxFjAUBgNV BAMTDTY4ZjRjNGQ2LTkxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt40cbwbd1ZHas/6SsjdiAkAC2X+jAVVrax8KbwJhx/QeQhWwxy7vVVqyRrcjF LnaL3L8/HVRmbNWu5uQ4tGL6gvvOWh6Vs9bVxVbeUMLucxs7+B8/A6PBUtrezBcT ydxffZn4H2FyknPSfV/Nn6O2DrNclugtol74zC37eCN7pYU4Xke++n4tSrfiCRqz WHVFBTb90XwxerTpQGn7DEnlm69D8Ung+3zliTUJbYS00ChCszEC938V03i05oir Ig0CyiAYionBdZ7byTtvstI7EjW0C7JdZ5T31twrBFCgS0IyPcGvx9stPcaqyYAa KPaJBZH+NxmZ2nGSWxvb7YvJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpmLvQbW7 npvsMTiOJE8NyIJ85ugwHwYDVR0jBBgwFoAUD5FKHclPW+QuiDwq3VQwvN9t8zQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzBGNDNFQzNDNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDVGS0hjbFBXLVF1aUR3cTNWUXd2Tjl0OHpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzBGNDNFQzNDNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1R dWlEd3EzVlF3dk45dDh6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHf6jS6B45iSkNRh3kUiB3HDPauFPkGYmMLB5QSYWq0QWdqAX6xg8wbR yyjkvZCOE30zDSwkWHHklbg/GyNi7mRbNIH5L0nqpj3lPArwyCn4YUjJlInygjNB RDYmcCQgF4d87CbcO0eFtkBA0cp1d6HlxWHP7S3MKxnTLFCY+B7/RO3Llf/LO399 BzI1RifWb6XWQJTPcxwMZvLRhOlEvj7JEoNidtlMB5zspv1VWYyNF6W1MEgIn+7I nBOCsfxHg56aA0dRD5Nc4mtBVc6G75asE3HKta11dOrlsaMEKYZ/rmaVpa+HwLuD lm/mMsk/N0qsS9PuNNkKKqvO3d4LJ98= -----END CERTIFICATE-----Generated at Tue Oct 21 08:09:46 2025 by rpki-client