$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json) Hash identifier: EN4i9/A+VXO0j+b0/baBRGWEpVr1GHZKHHGsek+vInI= Subject key identifier: B6:CA:BF:64:21:D2:0C:4E:12:03:DB:5D:72:16:3C:E6:FD:85:97:58 Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft Manifest number: 035E Signing time: Sun 19 Oct 2025 02:59:14 +0000 Manifest this update: Sun 19 Oct 2025 02:59:13 +0000 Manifest next update: Sun 26 Oct 2025 02:59:13 +0000 Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: SJ3LwRKum8YBbnu9a+/KK0mXjGRHn813H6ciWlpBF/Q=) 2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: 0uCjW0GPDpZBOo9X1hFG0KRIzIvMOnBTLzlDMrS+8IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Oct 19 02:59:13 2025 GMT Not After : Oct 26 02:59:13 2025 GMT Subject: CN=68f45401-d474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:90:ba:e0:53:cf:dc:f4:36:56:45:60:44: 0b:d7:06:7a:d7:ff:f6:67:43:01:4b:37:08:61:fd: 4f:c9:b4:bd:f1:4a:91:bd:3d:01:6a:59:52:5c:ab: 6a:9e:23:63:5c:97:17:86:59:65:81:c5:53:29:93: 34:4e:6e:a8:76:ad:d9:6c:f9:3f:21:45:91:19:ba: 55:82:eb:1b:94:0c:fd:cd:3d:35:ef:3f:3f:67:60: 63:a9:fb:04:d4:29:9d:f6:9b:40:9b:27:bd:36:24: 2e:9f:06:60:1d:33:7e:33:c6:1d:90:23:3b:a9:2c: 11:a0:f0:3a:a7:a3:8d:16:4b:25:bb:58:9d:fd:e1: 56:3e:77:4f:65:6f:1b:8b:ff:79:25:ff:2d:29:2f: df:92:d9:de:ff:46:83:e3:3a:4c:de:9b:f4:5f:59: 19:63:0f:21:15:4e:f8:2e:60:1b:ce:93:3d:85:a8: b8:b1:94:92:07:15:d8:68:df:25:43:67:c5:fd:22: 91:2b:13:8e:e0:70:63:23:dd:f8:5b:f7:c1:6c:17: f0:ea:f2:08:a3:30:b8:fb:b0:ef:33:8a:ea:1d:df: 05:c0:1a:72:f4:9f:83:e2:d9:af:ab:c4:c7:6c:bf: 33:eb:54:82:e4:c0:b7:79:61:e6:9d:6f:93:7c:94: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CA:BF:64:21:D2:0C:4E:12:03:DB:5D:72:16:3C:E6:FD:85:97:58 X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:2c:58:1d:6a:db:1c:cd:82:c2:bc:93:00:02:9b:db:ce: 03:ff:0b:1e:fc:21:d8:42:5b:15:d3:6b:c0:e5:c6:32:95:8a: 17:7d:66:36:d3:29:83:c3:73:d6:c1:5e:d9:2f:51:b0:76:43: cb:2a:2e:b1:72:50:6c:82:04:62:28:9f:c9:b6:6d:d5:02:6f: 36:59:df:b4:e9:39:b2:0b:c5:17:57:2a:e0:6e:f8:32:42:9f: 65:2d:eb:67:a9:cf:4e:d7:11:0b:04:27:32:2a:15:9a:5b:2f: a6:b5:d5:ed:23:9a:35:9e:69:29:00:72:49:14:3c:9e:d9:e3: e3:26:fa:f2:e3:f8:af:65:cd:1d:27:da:a7:a0:a6:c2:f8:d3: 54:d5:50:eb:7b:52:86:91:52:de:d2:2f:3d:b3:29:92:cc:d2: 48:6c:61:70:8a:92:91:23:4c:27:a7:b3:93:94:6e:ab:e2:a0: 04:b1:8e:99:6f:87:13:a9:9d:10:a2:6e:cf:28:17:16:93:79: 4d:0b:fd:e5:f3:76:3c:1a:5e:a7:2e:db:60:c5:5d:8a:db:fd: 84:a5:03:d0:61:2a:53:f6:e7:1a:72:a3:6f:2b:46:d1:9e:d5: ed:0d:b4:4f:31:ab:e5:97:40:3f:be:fa:5f:49:dd:2c:fd:f4: aa:bc:38:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjUxMDE5MDI1OTEzWhcNMjUxMDI2MDI1OTEzWjAYMRYwFAYD VQQDEw02OGY0NTQwMS1kNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/iQuuBTz9z0NlZFYEQL1wZ61//2Z0MBSzcIYf1PybS98UqRvT0BallSXKtq niNjXJcXhlllgcVTKZM0Tm6odq3ZbPk/IUWRGbpVgusblAz9zT017z8/Z2BjqfsE 1Cmd9ptAmye9NiQunwZgHTN+M8YdkCM7qSwRoPA6p6ONFkslu1id/eFWPndPZW8b i/95Jf8tKS/fktne/0aD4zpM3pv0X1kZYw8hFU74LmAbzpM9hai4sZSSBxXYaN8l Q2fF/SKRKxOO4HBjI934W/fBbBfw6vIIozC4+7DvM4rqHd8FwBpy9J+D4tmvq8TH bL8z61SC5MC3eWHmnW+TfJQbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbKv2Qh 0gxOEgPbXXIWPOb9hZdYMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS WUdTM21STnd6SlpNUFM4NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2NyxYHWrbHM2CwryTAAKb284D/wse/CHYQlsV02vA5cYylYoXfWY2 0ymDw3PWwV7ZL1GwdkPLKi6xclBsggRiKJ/Jtm3VAm82Wd+06TmyC8UXVyrgbvgy Qp9lLetnqc9O1xELBCcyKhWaWy+mtdXtI5o1nmkpAHJJFDye2ePjJvry4/ivZc0d J9qnoKbC+NNU1VDre1KGkVLe0i89symSzNJIbGFwipKRI0wnp7OTlG6r4qAEsY6Z b4cTqZ0Qom7PKBcWk3lNC/3l83Y8Gl6nLttgxV2K2/2EpQPQYSpT9ucacqNvK0bR ntXtDbRPMavll0A/vvpfSd0s/fSqvDh2 -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:45 2025 by rpki-client