$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: a8vwbfm4mkaBY+hLXTEXq7CNCDlsXixMBZTIS+HhNUE= Subject key identifier: D4:64:B5:5A:1E:A1:00:59:20:21:45:00:DF:91:A8:F9:15:9D:20:FF Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0346 Signing time: Sun 19 Oct 2025 03:04:51 +0000 Manifest this update: Sun 19 Oct 2025 03:04:51 +0000 Manifest next update: Sun 26 Oct 2025 03:04:51 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: i3a9t6JxDE4EfJBw7Xk5AdN1DaO2FCDOaZtRzIgG3G4=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dymLbJxwcC+zoVbs1raLnxC102YzGfBqYVissSmUr50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Oct 19 03:04:51 2025 GMT Not After : Oct 26 03:04:51 2025 GMT Subject: CN=68f45553-d160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:c9:b9:75:8c:34:60:4a:ab:24:a8:87:f9: f7:4b:1b:3c:ef:62:7c:65:69:f7:90:1a:e7:59:98: 62:7c:2e:67:40:9e:86:0b:8f:50:97:4e:a3:f6:ae: 1f:30:c6:db:2a:fd:e3:81:fe:7b:93:ee:1e:38:c4: 17:64:69:6f:7b:45:a9:7c:6e:38:1c:a9:80:35:f1: 5a:f4:1b:5a:65:5c:04:6a:b1:b3:64:aa:b1:ab:f1: 48:8d:0a:31:be:e6:00:21:22:d7:5d:68:33:33:5a: 75:d0:0f:2b:4e:66:70:2d:eb:39:d2:ec:ce:a2:86: be:11:f5:56:00:0f:64:a0:f1:16:be:3e:5d:45:af: 5c:72:5d:6c:63:93:b4:f3:63:fa:58:72:10:9b:7c: f6:20:12:d4:00:4a:8d:e6:16:ae:f8:60:f6:26:c4: 3c:73:4b:44:8f:34:e7:08:a5:78:83:8c:f8:aa:bf: 7e:0f:f4:10:bb:56:40:d3:9f:e1:61:55:66:b8:25: fe:56:af:2e:24:8e:17:83:40:30:ef:14:59:00:fe: 1e:77:21:bb:6e:8b:64:05:dc:55:01:35:e9:1b:4f: 11:6e:5e:72:cd:f0:88:56:65:2c:80:ff:68:70:42: c3:49:17:e5:82:c4:6e:f5:26:73:cc:55:3e:49:35: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:B5:5A:1E:A1:00:59:20:21:45:00:DF:91:A8:F9:15:9D:20:FF X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f4:2f:46:af:27:bd:17:21:c9:fc:26:67:f8:2b:9c:7e:10: 01:27:ae:7f:e3:fe:05:c3:18:a4:20:d1:99:d3:00:76:5f:fa: b2:5a:11:eb:15:e5:47:aa:41:ef:6a:11:8f:fb:77:b0:be:ce: 6e:2a:18:f3:d0:03:37:79:fa:8d:94:15:4a:63:72:7d:6f:5e: 91:44:1b:30:26:e3:25:16:66:6a:63:cf:5a:99:a2:1c:14:9f: 75:74:cd:a8:64:90:0d:98:54:91:b3:4a:c2:36:8b:08:02:03: 8c:4e:f1:fd:dd:1c:db:c7:82:de:86:9c:dd:4e:cf:9f:b8:0c: e5:bf:1c:bf:69:f0:8f:45:f8:2a:1b:5f:67:59:1a:11:88:34: ee:35:f3:0a:c2:58:ae:6d:cc:5f:de:0e:5c:be:fe:e6:9f:2b: e7:60:36:98:d8:13:f1:c1:63:08:3a:88:8f:57:a2:f4:fd:51: 68:7c:11:4e:49:43:68:93:78:c3:9a:10:fd:d3:0c:8b:e2:00: e4:96:d1:0f:17:5c:cb:39:8d:cf:a4:01:75:31:93:5a:66:7a: 5e:00:dc:5a:6b:96:a0:76:f2:25:81:a2:9f:e4:1a:ea:30:6c: 3c:0d:fe:86:56:18:4e:48:ee:22:d7:8b:79:64:0a:c0:b5:02: f9:58:52:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjUxMDE5MDMwNDUxWhcNMjUxMDI2MDMwNDUxWjAYMRYwFAYD VQQDEw02OGY0NTU1My1kMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB/JuXWMNGBKqySoh/n3Sxs872J8ZWn3kBrnWZhifC5nQJ6GC49Ql06j9q4f MMbbKv3jgf57k+4eOMQXZGlve0WpfG44HKmANfFa9BtaZVwEarGzZKqxq/FIjQox vuYAISLXXWgzM1p10A8rTmZwLes50uzOooa+EfVWAA9koPEWvj5dRa9ccl1sY5O0 82P6WHIQm3z2IBLUAEqN5hau+GD2JsQ8c0tEjzTnCKV4g4z4qr9+D/QQu1ZA05/h YVVmuCX+Vq8uJI4Xg0Aw7xRZAP4edyG7botkBdxVATXpG08Rbl5yzfCIVmUsgP9o cELDSRflgsRu9SZzzFU+STXr1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRktVoe oQBZICFFAN+RqPkVnSD/MB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt9C9Grye9FyHJ/CZn+CucfhABJ65/4/4FwxikINGZ0wB2X/qyWhHr FeVHqkHvahGP+3ewvs5uKhjz0AM3efqNlBVKY3J9b16RRBswJuMlFmZqY89amaIc FJ91dM2oZJANmFSRs0rCNosIAgOMTvH93Rzbx4LehpzdTs+fuAzlvxy/afCPRfgq G19nWRoRiDTuNfMKwliubcxf3g5cvv7mnyvnYDaY2BPxwWMIOoiPV6L0/VFofBFO SUNok3jDmhD90wyL4gDkltEPF1zLOY3PpAF1MZNaZnpeANxaa5agdvIlgaKf5Brq MGw8Df6GVhhOSO4i14t5ZArAtQL5WFKb -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:10 2025 by rpki-client