$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: iTzUGcWRCzK+DUrJWcHzzJOfrUEFTCfXtRh/jA3E2FY= Subject key identifier: 46:B8:AB:5F:04:F6:5A:2D:F6:18:EE:AF:B4:00:0E:A5:F3:53:CE:7D Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:24:46 +0000 Manifest this update: Sun 19 Oct 2025 11:24:45 +0000 Manifest next update: Sun 26 Oct 2025 11:24:45 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: 9pPmMwJe4pjfFvp6S2NVFCKk2DwJZwkemaWoxAvo+F4=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: llPDQC2jO2w/FvD6c8zrwk1KVoD3gjXSKUJ2H5qo9rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Oct 19 11:24:45 2025 GMT Not After : Oct 26 11:24:45 2025 GMT Subject: CN=68f4ca7e-6493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:7a:37:68:9d:d9:aa:b0:2c:00:ae:a6:3c: e1:87:b2:5f:e3:6d:b3:ca:fc:d2:70:2a:fc:39:91: 6c:43:b8:93:00:a6:ea:b8:40:27:ab:62:26:63:d5: c1:67:c2:d0:ec:c1:61:ad:2a:96:18:37:39:f3:58: 61:b9:4b:a1:bd:aa:7d:04:df:33:1d:b5:3a:0e:58: 8b:9a:1a:9e:0d:7f:77:38:3e:12:dd:25:db:97:7e: 3c:79:c8:6f:51:ab:1f:b0:18:21:1f:4f:62:c2:05: eb:41:fa:84:ae:f2:1b:fe:f4:b3:a7:1b:71:ad:50: 45:4c:86:25:e1:1a:5a:e9:ed:23:12:2a:34:a8:16: 61:47:66:0c:a6:de:38:4d:71:42:30:bf:33:af:a6: 15:10:57:f9:29:82:52:0c:44:80:99:9f:b8:e6:f4: 98:f7:13:e1:98:25:50:54:14:49:e9:f1:d6:80:ee: 86:7d:e4:7a:91:39:6c:a4:4e:2b:a2:a5:7f:ae:59: 9d:9f:6f:ce:1c:c4:54:aa:f8:d7:c7:82:08:d8:28: a5:3e:81:4b:2a:fe:69:41:d8:1d:ad:43:80:95:5b: 0a:a7:78:bf:54:c1:85:f2:e8:d4:2f:3f:f4:e6:79: 5d:2e:75:8f:9c:22:0b:7a:05:88:75:bd:89:74:41: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B8:AB:5F:04:F6:5A:2D:F6:18:EE:AF:B4:00:0E:A5:F3:53:CE:7D X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1a:13:7f:0e:f4:90:79:32:38:20:79:e3:21:db:9e:b3:b0: 61:d5:9e:97:6b:d6:ab:b6:5d:fa:9b:94:9a:ab:7e:5e:44:41: 7f:cd:3a:d0:d1:de:23:9e:48:9f:c6:f8:c6:0d:7f:d9:20:eb: f6:c3:22:35:92:15:b5:cb:5e:c7:7c:ad:d4:b1:a4:e8:8a:c6: cc:91:f9:ba:c1:bb:3d:09:f1:d2:fd:02:1e:f9:4e:3a:c6:c8: 35:32:61:51:b3:e6:b7:e7:f1:cb:5c:8a:b1:2d:71:a0:8f:cc: d7:40:cd:46:09:78:b1:fb:c4:2d:14:20:d2:b4:c2:6f:ad:01: 42:69:84:9d:cf:df:37:a5:84:6e:b9:2a:bd:54:4c:63:18:59: f2:22:21:16:51:73:bd:a9:c9:71:1e:e7:b3:63:79:59:9b:4b: 5f:ab:e5:49:74:23:a2:db:2b:8a:33:62:c9:88:0f:5c:37:c2: 3e:08:93:d3:9c:08:b9:06:95:60:fc:a9:47:fe:f7:8e:2d:8b: df:f6:f0:35:5f:56:9f:00:50:e9:00:f2:04:03:0c:95:fc:bb: b3:2e:f4:f0:86:6e:c8:01:a1:c5:7f:2d:5d:2c:e0:d4:5a:6a: d8:e3:3d:c0:16:ef:0e:64:8f:da:fb:33:0e:47:c3:e4:ca:ef: bc:a6:18:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNTEwMTkxMTI0NDVaFw0yNTEwMjYxMTI0NDVaMBgxFjAUBgNV BAMTDTY4ZjRjYTdlLTY0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0+Xo3aJ3ZqrAsAK6mPOGHsl/jbbPK/NJwKvw5kWxDuJMApuq4QCerYiZj1cFn wtDswWGtKpYYNznzWGG5S6G9qn0E3zMdtToOWIuaGp4Nf3c4PhLdJduXfjx5yG9R qx+wGCEfT2LCBetB+oSu8hv+9LOnG3GtUEVMhiXhGlrp7SMSKjSoFmFHZgym3jhN cUIwvzOvphUQV/kpglIMRICZn7jm9Jj3E+GYJVBUFEnp8daA7oZ95HqROWykTiui pX+uWZ2fb84cxFSq+NfHggjYKKU+gUsq/mlB2B2tQ4CVWwqneL9UwYXy6NQvP/Tm eV0udY+cIgt6BYh1vYl0QcX5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURrirXwT2 Wi32GO6vtAAOpfNTzn0wHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACcaE38O9JB5MjggeeMh256zsGHVnpdr1qu2XfqblJqrfl5EQX/NOtDR 3iOeSJ/G+MYNf9kg6/bDIjWSFbXLXsd8rdSxpOiKxsyR+brBuz0J8dL9Ah75TjrG yDUyYVGz5rfn8ctcirEtcaCPzNdAzUYJeLH7xC0UINK0wm+tAUJphJ3P3zelhG65 Kr1UTGMYWfIiIRZRc72pyXEe57NjeVmbS1+r5Ul0I6LbK4ozYsmID1w3wj4Ik9Oc CLkGlWD8qUf+944ti9/28DVfVp8AUOkA8gQDDJX8u7Mu9PCGbsgBocV/LV0s4NRa atjjPcAW7w5kj9r7Mw5Hw+TK77ymGDk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:31:21 2025 by rpki-client