$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json) Hash identifier: vuF41Z4cj+sf73xgWspaS6S+UsxnYqlbFclJNT39Lao= Subject key identifier: 3B:3A:77:30:B8:BE:D8:43:8B:02:60:51:80:0F:56:1D:E9:DC:57:1F Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:28:47 +0000 Manifest this update: Sun 19 Oct 2025 11:28:46 +0000 Manifest next update: Sun 26 Oct 2025 11:28:46 +0000 Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: gb3u4buzNYXetReTyDVRCdETY8O0wp260ycp/PCWygA=) 2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: j+lAAPB9v9s39rB3XeTq/mQabzWIrT+uwwVzKJaE2Fw=) 3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: CNeskz25yAbEaxsLMjegHDJiYGePQTzaDUtY7werUEc=) 4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Oct 19 11:28:46 2025 GMT Not After : Oct 26 11:28:46 2025 GMT Subject: CN=68f4cb6e-0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:64:1a:cc:ce:3a:97:29:7f:29:0e:03:55: 4d:0c:2e:6e:ec:fb:97:57:79:58:6e:10:35:cc:f5: 6d:47:d4:16:48:f3:5a:3f:7a:f4:3e:88:f9:3f:0c: 91:02:c5:e9:ed:ec:d8:49:a1:17:cd:32:33:bd:37: 26:35:92:1b:06:d6:4d:43:ac:dc:b1:f2:ac:c8:8e: 05:aa:35:0f:40:18:91:7a:be:a6:26:d1:6d:35:90: 1b:62:67:1a:51:58:e4:76:d8:c5:7a:f1:14:0e:4a: 93:44:26:c3:0b:78:ba:bd:34:42:18:bd:cb:c3:2f: ae:57:b8:bf:82:8e:d3:eb:03:a7:11:c1:53:c3:2f: b3:1b:98:a7:26:d4:5d:9d:cd:76:7f:03:65:c7:15: e6:0f:c5:ff:80:de:38:e8:c8:6c:97:83:d7:ef:36: 85:60:2a:17:34:5a:04:c2:24:34:47:3f:6b:66:fd: 17:09:04:53:53:fa:78:db:d7:b5:2d:49:ea:72:8b: 19:b9:45:60:79:e6:3e:e0:e2:4b:91:87:6d:02:92: 86:bc:c2:37:0c:a1:f3:71:9f:3c:9c:60:0c:cd:55: ca:00:73:9d:98:7c:9e:19:7e:a7:aa:5b:8c:8d:06: 6f:f3:27:db:34:ca:e7:8c:da:66:4b:d7:5c:2e:14: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3A:77:30:B8:BE:D8:43:8B:02:60:51:80:0F:56:1D:E9:DC:57:1F X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:ca:ac:52:ed:03:b7:60:02:9c:c2:d5:0b:d4:4f:fd:d1: 41:56:59:50:a2:ee:cd:6b:88:28:52:3d:36:8f:18:58:58:22: b8:a6:79:7c:b3:14:f0:f8:52:ba:4e:71:21:77:1b:2e:f2:c9: 93:90:b7:f7:72:8d:fb:e0:f1:06:8d:c7:81:32:c4:53:7e:32: ab:f4:d2:cc:18:4c:02:6f:b0:11:95:53:64:23:f6:20:a7:ef: 6a:11:3c:9a:bc:9e:e6:41:8f:89:19:49:3b:d2:89:2a:22:05: 5e:6d:e7:2c:da:71:b8:d8:84:da:ce:1c:78:8f:12:63:a2:b3: 60:94:14:60:65:bc:f5:cb:95:b1:40:58:e6:b2:54:bc:d7:97: 8a:0d:1e:45:2a:eb:d5:ba:bd:b8:c8:63:43:2f:a2:4c:3f:26: c1:3d:b0:7f:bb:4a:c0:3a:48:53:c6:ee:eb:73:52:2a:71:e9: 51:cc:6a:8d:1b:b5:8a:fe:c3:99:f7:a4:6b:01:fc:3c:8e:54: d1:23:18:9c:06:c1:c5:6a:98:3c:d8:ee:89:b6:26:8c:25:e1: 8f:a4:ca:6f:33:6e:dc:fa:46:50:d1:7c:70:0d:4d:1a:ab:6d: 14:97:32:07:96:7e:ec:12:60:14:4a:0b:29:34:22:8d:56:b4: 22:1e:e3:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTEwMTkxMTI4NDZaFw0yNTEwMjYxMTI4NDZaMBgxFjAUBgNV BAMTDTY4ZjRjYjZlLTBhZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7RWQazM46lyl/KQ4DVU0MLm7s+5dXeVhuEDXM9W1H1BZI81o/evQ+iPk/DJEC xent7NhJoRfNMjO9NyY1khsG1k1DrNyx8qzIjgWqNQ9AGJF6vqYm0W01kBtiZxpR WOR22MV68RQOSpNEJsMLeLq9NEIYvcvDL65XuL+CjtPrA6cRwVPDL7MbmKcm1F2d zXZ/A2XHFeYPxf+A3jjoyGyXg9fvNoVgKhc0WgTCJDRHP2tm/RcJBFNT+njb17Ut Sepyixm5RWB55j7g4kuRh20Ckoa8wjcMofNxnzycYAzNVcoAc52YfJ4ZfqeqW4yN Bm/zJ9s0yueM2mZL11wuFARjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOzp3MLi+ 2EOLAmBRgA9WHencVx8wHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MENDLzhGQ0NDN0Y4OEY1NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhW Z2VBRm16UjhWRlFUdS1LRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8AyqxS7QO3YAKcwtUL1E/90UFWWVCi7s1riChSPTaPGFhYIrimeXyz FPD4UrpOcSF3Gy7yyZOQt/dyjfvg8QaNx4EyxFN+Mqv00swYTAJvsBGVU2Qj9iCn 72oRPJq8nuZBj4kZSTvSiSoiBV5t5yzacbjYhNrOHHiPEmOis2CUFGBlvPXLlbFA WOayVLzXl4oNHkUq69W6vbjIY0Mvokw/JsE9sH+7SsA6SFPG7utzUipx6VHMao0b tYr+w5n3pGsB/DyOVNEjGJwGwcVqmDzY7om2Jowl4Y+kym8zbtz6RlDRfHANTRqr bRSXMgeWfuwSYBRKCyk0Io1WtCIe40I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:42:17 2025 by rpki-client