$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json) Hash identifier: p6ioskKyPZhN+iF4XysFMbg046bFqcmfp3DNvZdA2b8= Subject key identifier: 40:78:9D:6C:2B:54:87:39:99:BC:65:4A:95:35:43:88:BD:84:44:4D Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft Manifest number: 0237 Signing time: Sun 19 Oct 2025 04:04:51 +0000 Manifest this update: Sun 19 Oct 2025 04:04:50 +0000 Manifest next update: Sun 26 Oct 2025 04:04:50 +0000 Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: Nlm82a4qlKdxboamaCsg4kOFPTuyzNJB9DIhhs+QVe0=) 2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: 3aaeEi1YrA3uSceTUOZGuJZHBHy8WbpEjF+B/7Isrys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E Validity Not Before: Oct 19 04:04:50 2025 GMT Not After : Oct 26 04:04:50 2025 GMT Subject: CN=68f46363-a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b5:0c:cf:e8:83:46:63:fb:b6:41:ed:81:28: 06:0b:e9:cd:6d:c1:17:fc:bd:f1:62:cf:86:c9:73: ce:77:52:71:36:79:22:a6:ae:7c:bf:e9:ec:1d:42: 13:fd:c5:bc:99:e0:e5:e6:19:7b:b3:b5:92:09:5c: 81:7e:d9:7f:51:dd:3f:aa:4f:c4:a6:c8:b5:49:e6: 29:5d:d8:99:a7:0b:7f:65:10:42:12:62:96:f4:ad: 30:08:3f:e7:2e:6c:6f:af:5f:a9:be:31:66:a1:34: 3c:7e:41:c0:82:15:73:b6:c7:1a:53:38:7d:0f:bf: ab:ee:3a:f4:03:f5:0c:8a:2a:27:2b:75:14:99:17: 17:0b:48:66:08:a4:e6:f8:41:ca:cf:ab:8a:89:3a: 42:bb:e3:e6:b3:f9:1f:f7:91:fb:4d:08:96:f7:14: 80:09:de:df:d4:75:aa:1b:53:8f:08:6f:6b:fe:8b: f8:0c:23:9b:5e:36:4a:77:dc:cd:c2:44:1a:7b:5d: 14:52:6e:f0:ac:d7:be:0c:bd:4a:f3:58:41:83:34: cd:53:2e:2b:22:36:54:7d:c0:8f:c1:bc:a5:ff:f8: 0e:36:8e:ef:9e:91:6b:23:08:c0:fb:79:30:f2:dd: 48:d6:52:e3:8f:b5:58:3d:64:91:0f:da:d7:bd:5e: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:9D:6C:2B:54:87:39:99:BC:65:4A:95:35:43:88:BD:84:44:4D X509v3 Authority Key Identifier: keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c8:a5:4c:a9:21:12:e4:f5:82:b5:67:33:06:aa:50:14:a6: d6:fd:81:b3:95:86:6c:f7:74:0c:9b:87:a3:68:9d:b2:9a:29: 26:67:74:1b:3d:11:55:07:1e:35:50:90:a3:b5:a3:78:8a:53: 06:ff:51:23:50:ff:01:79:e9:d4:fd:f1:0b:3a:bf:db:16:73: eb:af:d8:f0:e7:a4:dd:6c:75:cc:cc:2d:1f:8f:d3:90:db:d8: 48:97:15:55:e3:21:21:87:9f:98:9f:82:20:27:7f:3c:9f:c9: fe:cf:70:b1:13:00:7b:1d:02:16:23:0d:10:a0:cc:d2:60:f3: d7:4f:19:c2:5a:1b:ad:8a:0e:61:2a:9e:06:a1:3f:5a:eb:b4: 44:20:4b:8b:ee:61:28:5d:13:01:47:ea:a8:3e:4c:f3:ee:cb: eb:fd:e0:dc:64:ad:53:55:33:83:0c:80:ce:bc:79:52:be:45: a0:2d:e0:be:45:a6:19:79:dc:ff:38:db:bd:bf:f6:f1:86:44: 16:49:7f:6d:04:b4:34:d3:56:9d:2b:c0:d6:ae:7c:24:25:d0: 98:9b:01:b2:20:5e:03:36:09:f2:4c:0f:86:d8:c4:da:e6:5f: be:64:6a:72:57:f7:a1:c2:c4:89:7d:53:44:6f:a4:65:ff:c0: 1a:e3:bc:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMjQxMTAvBgNVBAUTKDcwMzZBMjAwNzdGRjg3RkVGQTM0MDBEN0Y5MDc2QjdF MTk4MzhCMkUwHhcNMjUxMDE5MDQwNDUwWhcNMjUxMDI2MDQwNDUwWjAYMRYwFAYD VQQDEw02OGY0NjM2My1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+bUMz+iDRmP7tkHtgSgGC+nNbcEX/L3xYs+GyXPOd1JxNnkipq58v+nsHUIT /cW8meDl5hl7s7WSCVyBftl/Ud0/qk/Epsi1SeYpXdiZpwt/ZRBCEmKW9K0wCD/n Lmxvr1+pvjFmoTQ8fkHAghVztscaUzh9D7+r7jr0A/UMiionK3UUmRcXC0hmCKTm +EHKz6uKiTpCu+Pms/kf95H7TQiW9xSACd7f1HWqG1OPCG9r/ov4DCObXjZKd9zN wkQae10UUm7wrNe+DL1K81hBgzTNUy4rIjZUfcCPwbyl//gONo7vnpFrIwjA+3kw 8t1I1lLjj7VYPWSRD9rXvV7m3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB4nWwr VIc5mbxlSpU1Q4i9hERNMB8GA1UdIwQYMBaAFHA2ogB3/4f++jQA1/kHa34Zg4su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEyNC81NjU1REE3NjQ5 RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hfNzZOQURYLVFkcmZobURp eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEYWlBSGZfaF83Nk5BRFgtUWRyZmhtRGl5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEyNC81NjU1REE3NjQ5RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hf NzZOQURYLVFkcmZobURpeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcyKVMqSES5PWCtWczBqpQFKbW/YGzlYZs93QMm4ejaJ2ymikmZ3Qb PRFVBx41UJCjtaN4ilMG/1EjUP8BeenU/fELOr/bFnPrr9jw56TdbHXMzC0fj9OQ 29hIlxVV4yEhh5+Yn4IgJ388n8n+z3CxEwB7HQIWIw0QoMzSYPPXTxnCWhutig5h Kp4GoT9a67REIEuL7mEoXRMBR+qoPkzz7svr/eDcZK1TVTODDIDOvHlSvkWgLeC+ RaYZedz/ONu9v/bxhkQWSX9tBLQ001adK8DWrnwkJdCYmwGyIF4DNgnyTA+G2MTa 5l++ZGpyV/ehwsSJfVNEb6Rl/8Aa47z8 -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:20 2025 by rpki-client