$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json) Hash identifier: 2C+w6WQReWQVOgLIs4MY1HpPQ4Ayn5cZ7mHxMhAQLqs= Subject key identifier: 12:93:5C:FB:B1:68:78:D8:FB:5A:E7:AE:8B:77:CC:1A:17:0F:5D:3F Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Certificate serial: 0BA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft Manifest number: 0B9D Signing time: Sat 18 Oct 2025 19:49:58 +0000 Manifest this update: Sat 18 Oct 2025 19:49:57 +0000 Manifest next update: Sat 25 Oct 2025 19:49:57 +0000 Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: 8J8zLw8KSZsBDl8w23jzZzVp2exDWG7//Yf+rEkZWIU=) 2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Validity Not Before: Oct 18 19:49:57 2025 GMT Not After : Oct 25 19:49:57 2025 GMT Subject: CN=68f3ef65-ed92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:66:a6:80:0c:a6:f4:59:46:fc:71:2c:5c: 25:41:2b:46:d4:83:df:f4:9f:3a:2c:91:a7:ea:df: 6d:ff:08:f0:17:bf:86:4d:11:4d:89:f9:60:34:8a: 45:7b:d9:64:0f:6d:22:f9:3f:35:ac:9d:8c:0f:31: 4a:86:4b:ec:aa:b1:f3:3d:39:3d:2d:28:5b:1e:6c: ce:1d:2a:d9:d0:cb:95:45:d4:5c:8a:de:ac:4e:70: 8c:37:e3:dc:54:7b:a1:c5:0c:8c:cd:83:ab:f2:c6: 23:7e:68:8d:e2:c9:32:82:ee:e0:94:fa:2d:e1:db: 2b:42:52:7c:aa:37:a5:29:1c:ff:91:8f:ac:4b:a4: d2:70:52:8c:3f:28:d0:41:67:b5:a6:70:a4:a3:e8: c8:6f:fa:e6:19:e2:13:8a:ee:7d:fc:1c:27:92:5e: 5b:c0:be:49:85:ed:5f:07:c4:13:69:cd:a2:ef:10: 20:62:58:21:45:e7:46:b0:2a:a1:5c:32:27:95:c6: 1e:94:0e:0b:d1:de:03:d2:15:32:ae:03:e0:56:c0: d2:63:a4:b1:eb:e4:82:cb:2d:76:89:47:33:da:b5: 58:1e:7e:6b:3b:0d:2d:00:6b:b6:e7:bc:2d:06:b3: ac:ac:a0:40:b3:f0:bb:f7:aa:b0:46:e1:6c:af:f0: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:93:5C:FB:B1:68:78:D8:FB:5A:E7:AE:8B:77:CC:1A:17:0F:5D:3F X509v3 Authority Key Identifier: keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:49:c5:85:5c:56:88:3a:c9:3f:2a:c8:11:a2:0c:74:ec: 32:e2:e0:a2:d2:18:2b:06:53:d9:86:f1:0b:a3:35:51:bf:6e: 2a:39:c1:79:22:0e:94:b2:a5:06:ae:f7:cb:bf:83:18:6a:46: 36:e1:ca:bd:51:8c:e5:6a:66:04:5c:af:bc:c2:43:7f:f2:61: 7c:8d:95:7a:06:af:6a:cf:75:96:ce:f7:ad:d2:1d:eb:9c:85: c6:96:8d:97:23:e0:ef:71:d0:d7:cc:17:65:68:69:c0:d8:e9: 48:a1:6d:0c:68:c0:1f:ed:25:83:42:88:07:3c:06:51:8f:d3: a3:9c:8c:8d:c8:47:03:4c:fc:bf:77:75:b1:be:8d:52:9d:91: ad:45:e9:e2:1f:3f:69:78:8c:cb:ff:2b:0e:2f:3d:da:8c:ba: f7:09:18:42:44:5c:14:e5:9d:89:9b:b0:33:6d:2b:66:73:ab: cd:37:e4:5c:47:f4:d0:74:7b:88:ab:03:4d:92:bc:fc:b0:be: cf:46:46:67:8d:86:bd:9f:99:f8:e3:87:70:20:e6:bc:69:94: d1:22:02:56:dd:8c:6e:75:f2:2f:da:d5:64:0f:bd:ab:b5:a1: 76:86:df:77:84:dd:0e:93:e6:24:0a:db:5c:3f:df:ae:c8:6f: f9:40:5d:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC OUI0Q0FCNzcwHhcNMjUxMDE4MTk0OTU3WhcNMjUxMDI1MTk0OTU3WjAYMRYwFAYD VQQDEw02OGYzZWY2NS1lZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ElmpoAMpvRZRvxxLFwlQStG1IPf9J86LJGn6t9t/wjwF7+GTRFNiflgNIpF e9lkD20i+T81rJ2MDzFKhkvsqrHzPTk9LShbHmzOHSrZ0MuVRdRcit6sTnCMN+Pc VHuhxQyMzYOr8sYjfmiN4skygu7glPot4dsrQlJ8qjelKRz/kY+sS6TScFKMPyjQ QWe1pnCko+jIb/rmGeITiu59/Bwnkl5bwL5Jhe1fB8QTac2i7xAgYlghRedGsCqh XDInlcYelA4L0d4D0hUyrgPgVsDSY6Sx6+SCyy12iUcz2rVYHn5rOw0tAGu257wt BrOsrKBAs/C796qwRuFsr/AXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKTXPux aHjY+1rnrot3zBoXD10/MB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjY5RC83OEJGOTQ1MDMyQTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21f SFB2d3F2cFdPWDY1dE1xM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/EnFhVxWiDrJPyrIEaIMdOwy4uCi0hgrBlPZhvELozVRv24qOcF5 Ig6UsqUGrvfLv4MYakY24cq9UYzlamYEXK+8wkN/8mF8jZV6Bq9qz3WWzvet0h3r nIXGlo2XI+DvcdDXzBdlaGnA2OlIoW0MaMAf7SWDQogHPAZRj9OjnIyNyEcDTPy/ d3Wxvo1SnZGtReniHz9peIzL/ysOLz3ajLr3CRhCRFwU5Z2Jm7AzbStmc6vNN+Rc R/TQdHuIqwNNkrz8sL7PRkZnjYa9n5n444dwIOa8aZTRIgJW3YxudfIv2tVkD72r taF2ht93hN0Ok+YkCttcP9+uyG/5QF0Z -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:18 2025 by rpki-client