$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: teEO/3iWwANB9y3NkgS1qkYX2PkZZZGxk/p2XJDW55E= Subject key identifier: CF:DB:7F:FD:37:DB:F1:95:6C:55:DD:E3:EB:FA:8A:60:A2:FC:86:DF Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 037E Signing time: Sun 19 Oct 2025 02:51:09 +0000 Manifest this update: Sun 19 Oct 2025 02:51:08 +0000 Manifest next update: Sun 26 Oct 2025 02:51:08 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: RpLhJfOE0vVOsBPMEJ+3P25+4hlQ5sLhl0ITqbd1JRI=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Oct 19 02:51:08 2025 GMT Not After : Oct 26 02:51:08 2025 GMT Subject: CN=68f4521d-8ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:1c:5a:9b:c2:ac:ec:08:01:fc:a8:5f:49: 64:64:fc:db:fb:ce:ea:24:d9:f2:cb:df:74:ea:7e: 16:1c:0a:37:f4:99:5a:ea:1b:e9:75:79:2f:32:8e: 72:59:a6:a1:ca:ce:3c:4d:c0:6e:bc:df:d7:12:5f: 67:19:28:76:74:ec:a3:3c:cd:6d:04:38:b7:05:cb: f2:9d:c0:1c:ec:53:00:56:2c:d0:33:e4:74:c9:4d: 86:65:93:f9:0a:39:2e:86:3f:c4:05:da:62:57:ba: cc:3d:6f:49:5f:20:16:da:38:ef:fd:bf:51:d3:8e: 23:27:99:31:b6:95:03:0e:ff:47:b3:57:92:d8:03: ae:44:68:e9:54:e2:fd:55:d6:2b:7c:49:df:da:67: e5:32:6a:8f:fb:93:3c:79:9a:98:4d:f9:97:64:09: 56:32:6b:eb:b6:cd:2d:cf:e2:0c:b9:d9:3e:1c:60: 61:92:07:3d:be:20:38:7b:7a:2f:73:26:6c:28:d4: 48:94:71:bc:53:ec:de:e5:62:d2:b0:b3:71:95:e8: 43:c8:5e:58:48:09:22:91:da:81:6b:45:86:5d:b8: 3a:79:71:bf:f6:04:47:ee:da:d6:52:d0:ea:5b:3a: fd:3d:50:03:74:47:9b:14:68:2a:ca:7f:73:2d:f0: f5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DB:7F:FD:37:DB:F1:95:6C:55:DD:E3:EB:FA:8A:60:A2:FC:86:DF X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:a7:47:79:80:f8:86:35:8a:40:2b:2c:ed:8b:f3:82:57:82: f8:1a:7c:65:fd:15:12:88:34:da:3c:06:eb:d9:6d:91:91:ea: 54:19:fe:d2:97:50:57:6f:23:7d:24:4c:83:54:16:11:33:87: b8:39:63:fe:83:be:1f:db:4f:3b:7a:9c:1f:fa:09:50:7a:7d: 23:ec:94:f3:ad:3f:13:3b:4c:31:0a:6d:4a:e8:7a:e8:a1:d7: 02:39:51:de:b0:49:1c:4a:19:ba:73:02:17:16:b4:31:f9:a8: 32:8e:a9:bd:b0:7a:e5:9a:88:6e:ba:72:c9:e0:88:b8:d8:66: 42:de:69:43:1c:a0:d5:51:71:e3:9a:08:20:2d:9a:49:2d:09: 69:a7:e6:2b:97:b8:85:b8:f4:07:33:ae:2d:c0:a4:04:c3:e6: fd:5d:c1:4c:ca:78:ca:ed:7c:b7:a2:fa:15:bb:1c:73:b8:a3: 6b:b9:57:eb:15:c0:ee:19:bb:55:c3:28:c6:e9:ca:b2:c1:c5: 37:94:04:46:33:0b:65:07:a1:2a:a8:3a:9b:13:db:fa:46:f8: ae:f7:6c:77:54:44:63:50:eb:40:fa:96:1a:d9:5e:a0:8f:bb: 02:7b:35:b6:f7:11:0a:49:df:a4:9b:6d:47:59:39:4d:20:e3: aa:76:c4:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUxMDE5MDI1MTA4WhcNMjUxMDI2MDI1MTA4WjAYMRYwFAYD VQQDEw02OGY0NTIxZC04ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCkcWpvCrOwIAfyoX0lkZPzb+87qJNnyy9906n4WHAo39Jla6hvpdXkvMo5y Waahys48TcBuvN/XEl9nGSh2dOyjPM1tBDi3BcvyncAc7FMAVizQM+R0yU2GZZP5 Cjkuhj/EBdpiV7rMPW9JXyAW2jjv/b9R044jJ5kxtpUDDv9Hs1eS2AOuRGjpVOL9 VdYrfEnf2mflMmqP+5M8eZqYTfmXZAlWMmvrts0tz+IMudk+HGBhkgc9viA4e3ov cyZsKNRIlHG8U+ze5WLSsLNxlehDyF5YSAkikdqBa0WGXbg6eXG/9gRH7trWUtDq Wzr9PVADdEebFGgqyn9zLfD1MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/bf/03 2/GVbFXd4+v6imCi/IbfMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3p0d5gPiGNYpAKyzti/OCV4L4Gnxl/RUSiDTaPAbr2W2RkepUGf7S l1BXbyN9JEyDVBYRM4e4OWP+g74f2087epwf+glQen0j7JTzrT8TO0wxCm1K6Hro odcCOVHesEkcShm6cwIXFrQx+agyjqm9sHrlmohuunLJ4Ii42GZC3mlDHKDVUXHj mgggLZpJLQlpp+Yrl7iFuPQHM64twKQEw+b9XcFMynjK7Xy3ovoVuxxzuKNruVfr FcDuGbtVwyjG6cqywcU3lARGMwtlB6EqqDqbE9v6Rviu92x3VERjUOtA+pYa2V6g j7sCezW29xEKSd+km21HWTlNIOOqdsSo -----END CERTIFICATE-----Generated at Mon Oct 20 00:21:02 2025 by rpki-client