$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json) Hash identifier: ZBp31B8opobCi2mk5b3Zuov9kzn3B2FPEyafmNa4zIE= Subject key identifier: 35:53:A7:B8:97:E0:D9:28:67:45:D2:94:0F:C7:8A:55:8A:96:81:7C Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft Manifest number: 141E Signing time: Sat 18 Oct 2025 20:27:19 +0000 Manifest this update: Sat 18 Oct 2025 20:27:18 +0000 Manifest next update: Sat 25 Oct 2025 20:27:18 +0000 Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: 8Smozbzfygy1rEneQy2AvLv16LbbhvtvZJEN8lXMJiA=) 2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: /dfKSmCCPzovaQnLyJDXl3OjPhb/TsvQWem8YYEiMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Oct 18 20:27:18 2025 GMT Not After : Oct 25 20:27:18 2025 GMT Subject: CN=68f3f827-ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:e0:85:60:21:f0:11:1e:76:20:4b:22:43: e3:8c:c4:38:96:64:80:9a:8e:d0:6a:3f:76:de:dc: 28:bb:53:53:53:d9:2a:aa:53:cf:d7:31:40:bf:74: b5:6e:14:95:b6:f9:c1:6f:b9:ed:17:10:9c:b4:51: c0:a9:c2:24:7a:d3:c1:e5:ab:a8:70:6f:84:c8:20: 36:e6:01:0d:be:27:1d:a6:a7:de:c8:87:18:0b:54: 32:ec:aa:4a:db:fb:45:3f:fa:c7:0b:fd:a8:59:55: 52:08:45:27:db:1e:cd:b1:11:5c:31:4b:49:a5:b0: 01:c5:fe:92:44:b2:37:72:fa:2c:4d:bc:9f:ab:42: a0:63:c2:53:c6:08:33:49:ce:a4:d3:3e:6c:d8:e8: 0e:96:e6:15:8c:51:27:7d:3a:1d:68:e6:27:90:2d: cc:86:05:18:f5:df:3b:32:e5:ec:81:c6:31:0a:a0: 12:0d:19:0f:c9:a2:ac:5d:70:6b:86:a7:dc:e4:ca: d4:f2:03:42:2e:eb:8d:68:fe:8c:2e:59:a1:fd:d4: 2b:cc:7a:e9:90:a2:31:ba:9b:ca:a1:ba:82:e6:8d: aa:30:db:ba:66:87:c1:c5:e6:39:7b:b9:ed:10:ec: 33:c2:fc:8f:2f:06:7f:b7:06:e9:78:b7:bb:98:ea: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:A7:B8:97:E0:D9:28:67:45:D2:94:0F:C7:8A:55:8A:96:81:7C X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c4:83:90:c1:80:ae:00:71:de:a6:ad:b6:7c:96:43:5c:5f: 8d:00:c0:93:7e:dd:12:b9:f6:92:26:90:59:48:aa:5f:48:18: 0e:b1:0e:3c:98:06:74:14:d9:d4:4f:9a:91:c9:01:52:4e:e6: ba:14:ce:6c:78:5c:80:8a:bd:a9:6a:77:72:3e:f3:36:2e:2d: 07:b5:85:9a:48:04:12:68:54:e0:dc:39:8c:30:c2:2a:06:c3: eb:1c:cc:c4:a5:4f:56:e2:47:73:15:c3:ca:55:10:d6:50:28: 0a:74:0c:a4:f3:b0:3b:18:42:7d:4c:ae:5b:99:f4:47:6e:f4: 36:6a:b5:f2:66:d6:ba:e5:53:23:32:4d:79:f1:cf:0a:6b:73: 98:15:28:fb:cb:59:7f:98:14:f8:aa:07:dc:6c:ae:aa:c8:46: 66:88:f1:ef:fc:dd:cd:5d:7e:a6:e1:27:b3:fa:66:be:4f:94: fe:e8:90:cd:6f:f5:c2:3e:5d:f2:4f:8e:8a:aa:0a:27:a7:00: 86:31:47:dc:2e:12:9f:03:64:8c:ed:4f:f2:e6:3c:e4:9a:08: 4c:e8:88:d7:73:0e:dc:6b:dc:07:21:87:ef:fe:34:d1:1e:a4: 46:51:4a:ca:68:6f:92:6e:52:ed:44:6a:55:f8:11:89:82:26: 0d:2c:d2:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjUxMDE4MjAyNzE4WhcNMjUxMDI1MjAyNzE4WjAYMRYwFAYD VQQDEw02OGYzZjgyNy1hZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bPghWAh8BEediBLIkPjjMQ4lmSAmo7Qaj923twou1NTU9kqqlPP1zFAv3S1 bhSVtvnBb7ntFxCctFHAqcIketPB5auocG+EyCA25gENvicdpqfeyIcYC1Qy7KpK 2/tFP/rHC/2oWVVSCEUn2x7NsRFcMUtJpbABxf6SRLI3cvosTbyfq0KgY8JTxggz Sc6k0z5s2OgOluYVjFEnfTodaOYnkC3MhgUY9d87MuXsgcYxCqASDRkPyaKsXXBr hqfc5MrU8gNCLuuNaP6MLlmh/dQrzHrpkKIxupvKobqC5o2qMNu6ZofBxeY5e7nt EOwzwvyPLwZ/twbpeLe7mOrxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVTp7iX 4NkoZ0XSlA/HilWKloF8MB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZt dklUZkViVEZjWk5kSmRyTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGxIOQwYCuAHHepq22fJZDXF+NAMCTft0SufaSJpBZSKpfSBgOsQ48 mAZ0FNnUT5qRyQFSTua6FM5seFyAir2pandyPvM2Li0HtYWaSAQSaFTg3DmMMMIq BsPrHMzEpU9W4kdzFcPKVRDWUCgKdAyk87A7GEJ9TK5bmfRHbvQ2arXyZta65VMj Mk158c8Ka3OYFSj7y1l/mBT4qgfcbK6qyEZmiPHv/N3NXX6m4Sez+ma+T5T+6JDN b/XCPl3yT46KqgonpwCGMUfcLhKfA2SM7U/y5jzkmghM6IjXcw7ca9wHIYfv/jTR HqRGUUrKaG+SblLtRGpV+BGJgiYNLNIs -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:23 2025 by rpki-client