$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: o2lmzV84Fh+gBoYRkmVJge3dtajjTqthYvIURQcLwh4= Subject key identifier: 83:66:62:F4:9B:13:5B:CE:53:11:49:D8:91:0F:22:66:A5:1D:83:FE Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 08AA Signing time: Sat 18 Oct 2025 21:37:48 +0000 Manifest this update: Sat 18 Oct 2025 21:37:47 +0000 Manifest next update: Sat 25 Oct 2025 21:37:47 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: 5taQVABMb/bmrKajygYE5FXFM0Xmij+D9eqd5dpwJHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Oct 18 21:37:47 2025 GMT Not After : Oct 25 21:37:47 2025 GMT Subject: CN=68f408ac-f74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:1a:52:6f:40:cf:08:13:0f:4a:5c:d3:ba: 41:8f:85:d8:8b:b8:2a:24:2b:47:9f:87:09:10:b3: 2b:f4:2d:b1:35:d5:95:16:3d:d9:f7:a8:f3:a7:db: 39:4f:f2:5f:a3:6d:c0:bf:d6:cb:25:aa:7e:cd:66: 22:c2:24:1d:86:82:9e:8e:3c:d2:a2:2e:1e:d9:f1: ea:a8:5e:e5:2d:b5:49:42:d1:9b:be:ee:8a:80:19: de:bc:29:b2:35:e9:3e:0a:cc:f5:47:8b:ea:b0:7b: 6c:ae:4d:19:2e:93:01:e9:da:cd:95:1f:41:48:bf: d8:70:b6:bb:8f:43:01:f2:1e:7b:7b:44:39:e0:7d: 50:dd:6f:f8:20:22:39:50:bd:72:7a:00:7c:67:e4: 8d:23:39:c0:fb:c1:ba:f0:15:c1:88:8b:99:f3:7a: 4e:64:fa:0d:61:3b:e0:ec:15:b9:e9:8c:81:02:ab: 8e:3e:9b:30:bb:24:72:44:7f:bc:32:e4:dd:fc:da: 2e:ec:a9:b0:c4:08:f6:69:d3:51:1d:63:9a:f5:ae: a8:bc:c6:f6:73:81:1c:87:d6:09:ec:cb:10:df:75: 27:49:1c:12:9e:c7:cc:dd:23:9e:15:50:c5:83:9f: 3f:7c:e0:3a:f8:fc:fb:f9:15:7e:fd:22:f2:8e:2d: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:62:F4:9B:13:5B:CE:53:11:49:D8:91:0F:22:66:A5:1D:83:FE X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1a:32:37:9c:e5:53:a4:b0:90:02:f3:89:55:4e:24:c0:fa: 6c:6a:84:d5:57:1f:0d:60:9d:64:1a:4f:d5:97:8b:43:51:16: 92:3a:f6:18:38:9a:02:67:a8:ff:e8:c2:01:69:bd:86:49:e4: 4d:24:85:fb:74:7d:74:ad:84:0b:fd:a8:0a:9c:b2:f1:e7:54: 73:b7:2a:9c:56:5f:f9:ca:91:bf:4b:4c:e9:3b:ae:9d:f8:28: 5e:64:df:28:6f:8c:af:8f:31:b2:45:24:0a:f0:d5:e6:3d:fe: 84:a9:93:32:f0:e0:2e:b7:08:9c:4f:2a:65:08:14:66:19:85: a4:ed:d2:d5:92:83:6d:d0:85:18:ef:09:5c:47:d1:06:66:cc: 65:e4:f3:6d:f8:bb:9c:b2:75:f2:fc:1c:04:b2:c3:63:97:ae: c2:a1:3a:7b:e5:4b:1e:d5:fc:e0:1d:c0:85:f5:ba:04:31:1f: f6:7f:3e:3a:f9:c0:1d:78:7a:91:c9:a4:9c:7a:8c:9d:b8:92: 3a:b3:be:5e:2d:41:62:be:f6:3a:e5:3f:70:55:e5:c2:4c:4e: 2a:7d:47:29:a8:03:e2:d4:08:50:8c:f1:6f:37:f4:cd:1e:28: 54:97:c8:10:50:a5:85:75:2d:89:9b:41:7f:58:c6:6f:3b:dc: 26:89:f0:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUxMDE4MjEzNzQ3WhcNMjUxMDI1MjEzNzQ3WjAYMRYwFAYD VQQDEw02OGY0MDhhYy1mNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OwaUm9AzwgTD0pc07pBj4XYi7gqJCtHn4cJELMr9C2xNdWVFj3Z96jzp9s5 T/Jfo23Av9bLJap+zWYiwiQdhoKejjzSoi4e2fHqqF7lLbVJQtGbvu6KgBnevCmy Nek+Csz1R4vqsHtsrk0ZLpMB6drNlR9BSL/YcLa7j0MB8h57e0Q54H1Q3W/4ICI5 UL1yegB8Z+SNIznA+8G68BXBiIuZ83pOZPoNYTvg7BW56YyBAquOPpswuyRyRH+8 MuTd/Nou7KmwxAj2adNRHWOa9a6ovMb2c4Ech9YJ7MsQ33UnSRwSnsfM3SOeFVDF g58/fOA6+Pz7+RV+/SLyji05AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINmYvSb E1vOUxFJ2JEPImalHYP+MB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6GjI3nOVTpLCQAvOJVU4kwPpsaoTVVx8NYJ1kGk/Vl4tDURaSOvYY OJoCZ6j/6MIBab2GSeRNJIX7dH10rYQL/agKnLLx51RztyqcVl/5ypG/S0zpO66d +CheZN8ob4yvjzGyRSQK8NXmPf6EqZMy8OAutwicTyplCBRmGYWk7dLVkoNt0IUY 7wlcR9EGZsxl5PNt+LucsnXy/BwEssNjl67CoTp75Use1fzgHcCF9boEMR/2fz46 +cAdeHqRyaSceoyduJI6s75eLUFivvY65T9wVeXCTE4qfUcpqAPi1AhQjPFvN/TN HihUl8gQUKWFdS2Jm0F/WMZvO9wmifBE -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:38 2025 by rpki-client