$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: 942wXXC6rrKu2ytpRRGAuGBiQ7vWSAoGGv3Mx3jNeqE= Subject key identifier: E6:BC:DC:4C:28:48:83:A9:EF:8B:5F:77:DC:D1:D0:7F:8C:2C:81:7A Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: 013C Signing time: Sun 19 Oct 2025 07:16:44 +0000 Manifest this update: Sun 19 Oct 2025 07:16:44 +0000 Manifest next update: Sun 26 Oct 2025 07:16:44 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: eo1uyDdsPsoHCPiGn4+nriDqek9b4Z0CySpv4AJcElo=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: /tXzmPJpbFpT9Ng+OXe5R9OW1iH2k8GOdLq7rPEZELc=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: C5+FDRdQyQalYR2P8dEPuBXkPFwg+NEWC9TQl/hqp1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: Oct 19 07:16:44 2025 GMT Not After : Oct 26 07:16:44 2025 GMT Subject: CN=68f4905c-5177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:04:09:c7:d5:ba:ab:d4:28:77:e5:cd:16: e0:65:de:e4:1c:d4:4b:b5:ba:d0:e6:63:59:ba:08: ac:f1:9c:b8:07:1f:6b:4c:c3:99:6f:28:ed:8c:e7: c4:92:de:eb:f4:2e:ea:81:84:db:2a:c8:f4:81:90: eb:75:81:72:50:6a:2b:8e:82:d7:9a:b7:de:f5:90: 0c:76:6b:a1:ad:cd:09:91:dc:5d:fb:28:02:87:ca: 34:d9:87:5b:0a:e8:fc:a9:1b:b0:ef:9a:6a:1c:37: b4:52:91:bf:91:b6:ad:42:75:ac:f7:1e:b2:0a:47: 88:81:f6:06:31:e6:e0:b5:21:cf:bd:39:c6:b7:2a: d2:3a:90:b3:e1:c8:ca:56:eb:30:1d:52:65:4a:b9: a2:74:63:bb:ff:22:04:6d:55:7a:82:64:f6:ff:db: 18:7e:e7:c8:6d:d0:ac:9d:8b:fc:fb:71:a6:f8:d2: c7:30:b2:45:97:61:f9:66:77:6c:e4:04:9e:e3:54: c1:7a:af:8e:ed:02:35:6c:bd:1a:89:9d:d9:a1:45: 22:a3:19:d3:f7:d7:87:6d:9b:94:9b:ff:c2:af:20: 37:92:de:e7:05:f2:ed:dc:de:6d:44:da:9c:48:e1: b7:97:1a:91:55:1a:82:a0:0e:be:db:a2:51:dc:82: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BC:DC:4C:28:48:83:A9:EF:8B:5F:77:DC:D1:D0:7F:8C:2C:81:7A X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b7:7e:bd:4f:61:f9:01:d3:f9:a3:09:82:c4:ca:c1:d0:23: 7a:33:93:14:b7:b8:cd:22:bc:5d:58:f5:77:5c:18:f3:72:55: 39:d5:5d:f5:55:7a:76:69:4e:34:76:ac:08:35:7e:7e:73:91: af:a3:e5:da:3e:8d:59:34:f3:ed:12:54:e4:cd:6d:73:82:f5: ae:af:bb:53:12:e0:60:98:e7:7d:1e:bb:dd:63:38:ea:45:23: bc:08:2e:3c:80:b3:75:22:1f:72:14:35:9b:7f:4a:36:1f:7d: b9:a1:0e:02:73:c7:aa:82:7f:b8:41:fc:e1:e1:39:45:f4:2b: 01:28:f8:a3:08:5f:24:50:4f:f8:82:77:5d:ca:e8:bd:a6:b4: 76:ec:f0:bc:e0:23:b0:41:8e:f1:a9:12:5c:2c:12:9c:7a:73: 75:69:60:1e:f1:87:d6:33:ad:d5:ac:26:75:51:95:73:02:6a: 6d:c8:33:82:36:ca:dc:0a:50:ad:4b:fd:dc:bb:cc:2a:50:a0: ff:49:d2:14:15:e3:68:ce:02:ce:f5:bb:91:91:c0:15:af:91: 13:6e:99:6e:97:5c:1f:2b:93:c3:72:0a:44:fe:32:6f:00:c0: 51:53:ec:a4:30:38:6b:cc:96:b9:df:88:99:ed:b8:f3:62:9d: 6e:dc:28:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUxMDE5MDcxNjQ0WhcNMjUxMDI2MDcxNjQ0WjAYMRYwFAYD VQQDEw02OGY0OTA1Yy01MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4QECcfVuqvUKHflzRbgZd7kHNRLtbrQ5mNZugis8Zy4Bx9rTMOZbyjtjOfE kt7r9C7qgYTbKsj0gZDrdYFyUGorjoLXmrfe9ZAMdmuhrc0Jkdxd+ygCh8o02Ydb Cuj8qRuw75pqHDe0UpG/kbatQnWs9x6yCkeIgfYGMebgtSHPvTnGtyrSOpCz4cjK VuswHVJlSrmidGO7/yIEbVV6gmT2/9sYfufIbdCsnYv8+3Gm+NLHMLJFl2H5Znds 5ASe41TBeq+O7QI1bL0aiZ3ZoUUioxnT99eHbZuUm//CryA3kt7nBfLt3N5tRNqc SOG3lxqRVRqCoA6+26JR3ILs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOa83Ewo SIOp74tfd9zR0H+MLIF6MB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgt369T2H5AdP5owmCxMrB0CN6M5MUt7jNIrxdWPV3XBjzclU51V31 VXp2aU40dqwINX5+c5Gvo+XaPo1ZNPPtElTkzW1zgvWur7tTEuBgmOd9HrvdYzjq RSO8CC48gLN1Ih9yFDWbf0o2H325oQ4Cc8eqgn+4Qfzh4TlF9CsBKPijCF8kUE/4 gnddyui9prR27PC84COwQY7xqRJcLBKcenN1aWAe8YfWM63VrCZ1UZVzAmptyDOC NsrcClCtS/3cu8wqUKD/SdIUFeNozgLO9buRkcAVr5ETbplul1wfK5PDcgpE/jJv AMBRU+ykMDhrzJa534iZ7bjzYp1u3CgO -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:57 2025 by rpki-client