$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: VA4sOI1iw+IOW16dBlsPIrb9RWRwRHnK1GQMQXumnKU= Subject key identifier: 1E:4F:88:F5:BB:B0:0F:16:F7:B6:30:BF:0F:E6:8A:E1:27:8B:BA:0B Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1467 Signing time: Sat 18 Oct 2025 17:22:56 +0000 Manifest this update: Sat 18 Oct 2025 17:22:55 +0000 Manifest next update: Sat 25 Oct 2025 17:22:55 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: buwYbwXH/SgUJgvklQM3XBBXg9nsusaY0+/Q5uhqFN0=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5254 (0x1486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Oct 18 17:22:55 2025 GMT Not After : Oct 25 17:22:55 2025 GMT Subject: CN=68f3ccef-38a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:a4:9a:a7:e6:58:63:f6:fa:80:ef:c9:3e: 08:fc:91:6c:3c:a7:b5:5b:56:26:ed:55:b1:98:b3: 41:3c:06:d9:c3:c5:df:98:4c:e3:0d:75:7f:f7:f1: d2:4c:8c:c8:ab:79:a6:19:49:ec:77:79:05:e4:7f: cb:23:25:3e:e7:a3:fd:38:65:27:68:95:ce:c5:dc: 61:86:ca:a8:46:fe:cb:77:97:eb:27:0e:61:bc:2b: b2:65:ae:11:d1:d3:33:2e:ef:a6:80:31:f0:06:d9: 3f:07:29:0e:73:7a:31:0b:06:dc:7f:45:77:70:d1: bc:dd:b3:d8:e5:15:3a:0b:0b:d3:6d:6b:52:40:46: ac:80:8a:1f:5a:54:80:2c:5a:78:48:3c:7b:26:f6: 2b:93:8b:c3:0a:02:b7:5f:40:6e:ce:85:4b:79:14: 2b:6b:e6:3e:14:88:a1:50:2f:2a:e5:80:d7:47:c5: 00:b7:33:50:e8:bd:59:b7:f1:46:75:06:19:0f:21: ad:ce:48:95:2d:53:a7:ed:53:80:cc:2a:4b:ce:46: 77:cc:27:ac:c3:de:40:8c:2b:fa:1f:7a:71:4d:21: 32:b8:7e:16:20:93:4d:df:51:83:63:d4:11:b9:e9: 2f:80:8b:ff:5c:47:69:60:62:ed:2e:fe:e5:7f:8c: ed:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4F:88:F5:BB:B0:0F:16:F7:B6:30:BF:0F:E6:8A:E1:27:8B:BA:0B X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6b:23:e4:9e:9b:b7:85:a0:9f:f8:b7:88:98:ff:e4:5b:4c: 49:e8:a1:c8:ae:dd:6f:c1:24:d5:56:71:81:78:6e:59:83:1c: 57:dd:f6:30:06:54:e1:10:0e:fa:94:69:f1:aa:6e:b7:a7:ad: 57:9a:64:c9:fe:ea:ed:24:4e:f6:8e:88:85:0c:90:ad:06:44: 33:6a:07:1b:ce:9f:17:4a:f1:15:5e:23:54:be:31:d6:13:63: 08:52:de:c5:52:b3:a2:cd:4a:f8:10:fb:38:b0:70:38:dd:ee: 3e:6f:d7:8b:50:33:fd:39:be:09:3e:c7:52:29:0c:2d:fe:37: a2:82:56:50:28:1c:98:e1:30:be:0e:ad:1d:c8:3c:80:28:12: 3e:53:34:82:8e:a1:eb:03:1d:70:20:30:28:5b:fd:60:19:24: fe:6a:69:26:70:43:50:2e:6f:4c:d5:68:5c:2d:11:71:87:f4: 59:a3:96:c5:9b:59:28:4c:7e:0e:98:7e:61:b3:85:2a:b6:c4: 04:75:17:df:a1:1d:f8:e8:83:6b:0c:4f:83:df:37:3a:b4:35: f6:35:98:e2:0f:2a:f2:59:38:e7:12:47:cc:4f:29:0e:4d:29: de:82:05:80:90:91:a0:10:b9:32:99:09:ca:a6:f0:16:8c:40: b0:81:5b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUxMDE4MTcyMjU1WhcNMjUxMDI1MTcyMjU1WjAYMRYwFAYD VQQDEw02OGYzY2NlZi0zOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYukmqfmWGP2+oDvyT4I/JFsPKe1W1Ym7VWxmLNBPAbZw8XfmEzjDXV/9/HS TIzIq3mmGUnsd3kF5H/LIyU+56P9OGUnaJXOxdxhhsqoRv7Ld5frJw5hvCuyZa4R 0dMzLu+mgDHwBtk/BykOc3oxCwbcf0V3cNG83bPY5RU6CwvTbWtSQEasgIofWlSA LFp4SDx7JvYrk4vDCgK3X0BuzoVLeRQra+Y+FIihUC8q5YDXR8UAtzNQ6L1Zt/FG dQYZDyGtzkiVLVOn7VOAzCpLzkZ3zCesw95AjCv6H3pxTSEyuH4WIJNN31GDY9QR uekvgIv/XEdpYGLtLv7lf4ztMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5PiPW7 sA8W97Ywvw/miuEni7oLMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoayPknpu3haCf+LeImP/kW0xJ6KHIrt1vwSTVVnGBeG5ZgxxX3fYw BlThEA76lGnxqm63p61XmmTJ/urtJE72joiFDJCtBkQzagcbzp8XSvEVXiNUvjHW E2MIUt7FUrOizUr4EPs4sHA43e4+b9eLUDP9Ob4JPsdSKQwt/jeiglZQKByY4TC+ Dq0dyDyAKBI+UzSCjqHrAx1wIDAoW/1gGST+amkmcENQLm9M1WhcLRFxh/RZo5bF m1koTH4OmH5hs4UqtsQEdRffoR346INrDE+D3zc6tDX2NZjiDyryWTjnEkfMTykO TSneggWAkJGgELkymQnKpvAWjECwgVtM -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:44 2025 by rpki-client