$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: ZktAt5XKPbWW9MufcuokmnuVnmnhcEnAbkC8ab/Nn8A= Subject key identifier: 04:8E:6A:AE:0F:47:1B:A1:81:4B:F6:D8:EA:56:52:ED:20:CE:A1:E0 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 058E Signing time: Sun 19 Oct 2025 00:55:02 +0000 Manifest this update: Sun 19 Oct 2025 00:55:01 +0000 Manifest next update: Sun 26 Oct 2025 00:55:01 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: ItWWKTPwDokw4d6E9AbpeWepfsiAMJvaw5MfKdM+44s=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: O5L0VNBny7pJfYOS9ciWnkG89gWRJAbqHnsSmXbIfoU=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: CJGHkmIeNsyNcyQKQSDuECGqLutAY84BUmcFgCd6XHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Oct 19 00:55:01 2025 GMT Not After : Oct 26 00:55:01 2025 GMT Subject: CN=68f436e5-a68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:4a:10:6c:62:f8:fc:4c:65:47:4d:4c:3f: 23:67:a5:90:d1:bc:8e:26:de:ed:71:b9:df:d8:22: 8d:5b:59:31:0f:9a:9f:a7:08:a5:d7:99:81:3a:79: f6:dc:f7:48:5b:2c:30:4a:26:4c:d1:b6:81:19:ca: c7:77:c5:3d:a3:78:39:18:72:74:cf:0f:60:ac:49: 84:c5:ad:52:c0:0d:da:15:ed:79:1c:62:37:cd:13: cd:8f:c3:b8:ef:0c:cd:54:13:0f:bb:b2:de:b8:07: 76:3b:d3:d0:bf:72:3c:84:ef:2f:e0:81:7e:8b:50: bd:e2:cd:b6:7c:21:58:9c:71:86:79:29:37:6a:7c: 7c:22:57:9c:ae:67:3e:09:1c:52:b2:98:28:32:d5: ff:d3:6a:fd:c1:dd:93:5d:1a:1c:7d:b2:3c:e3:b3: 00:08:ba:a4:af:1d:0e:ab:8e:b9:d2:b6:22:87:ce: 50:7f:f1:55:53:b2:0f:d9:49:7d:8b:91:cc:60:7b: d7:b2:9e:ab:7d:ee:5a:03:ff:36:48:db:ca:2c:2e: cb:34:82:54:03:af:4b:79:e1:b0:e8:41:83:21:5f: bc:af:0d:ce:02:f2:b7:9c:8d:2b:5b:48:29:e0:94: b3:f2:68:84:16:3d:51:bd:2f:9a:fc:8d:36:f1:0d: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8E:6A:AE:0F:47:1B:A1:81:4B:F6:D8:EA:56:52:ED:20:CE:A1:E0 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:58:3b:cf:2d:97:93:9e:7e:98:29:25:f1:83:84:c1:fe:a4: 2f:e8:96:06:55:45:b2:ed:8a:82:ac:f3:7b:55:cf:7e:72:36: 3d:b1:56:03:a3:63:0f:55:95:52:a1:d3:bb:91:c3:79:7c:87: 03:b7:4a:18:c2:d0:aa:b3:a5:0d:0e:3d:4f:75:1f:74:59:2f: c1:6b:b5:7f:6c:12:9b:4a:a2:c5:38:29:23:56:2d:9a:61:23: fe:b2:f7:75:a7:39:9d:b0:63:23:e5:cc:41:7c:02:5f:82:27: 38:8f:2a:c1:89:49:4a:29:d2:13:7b:72:ba:36:60:29:da:3c: eb:e3:21:e4:02:26:a0:bd:9d:30:af:6e:bf:2e:db:d8:76:5a: 53:e0:a8:c9:56:73:10:b1:99:02:3b:e5:e1:01:0a:30:45:bc: f3:f3:e5:01:0e:b4:fa:5a:0b:c0:b0:f8:1f:9b:6a:f2:fe:91: 97:19:13:bc:6a:bc:a9:8f:64:93:2a:f2:34:54:b8:2b:11:a8: a5:d5:ae:4b:31:97:7e:4c:87:39:eb:a4:6f:88:9c:77:9a:50: 56:11:f0:6c:e7:4e:32:6f:77:9f:40:c8:e2:c4:d8:42:b1:cb: 37:91:d1:a2:d3:24:43:cf:7e:54:4a:b3:ca:bf:72:b0:e8:ba: da:bb:f5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUxMDE5MDA1NTAxWhcNMjUxMDI2MDA1NTAxWjAYMRYwFAYD VQQDEw02OGY0MzZlNS1hNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcZKEGxi+PxMZUdNTD8jZ6WQ0byOJt7tcbnf2CKNW1kxD5qfpwil15mBOnn2 3PdIWywwSiZM0baBGcrHd8U9o3g5GHJ0zw9grEmExa1SwA3aFe15HGI3zRPNj8O4 7wzNVBMPu7LeuAd2O9PQv3I8hO8v4IF+i1C94s22fCFYnHGGeSk3anx8Ilecrmc+ CRxSspgoMtX/02r9wd2TXRocfbI847MACLqkrx0Oq4650rYih85Qf/FVU7IP2Ul9 i5HMYHvXsp6rfe5aA/82SNvKLC7LNIJUA69LeeGw6EGDIV+8rw3OAvK3nI0rW0gp 4JSz8miEFj1RvS+a/I028Q3mVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASOaq4P RxuhgUv22OpWUu0gzqHgMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwWDvPLZeTnn6YKSXxg4TB/qQv6JYGVUWy7YqCrPN7Vc9+cjY9sVYD o2MPVZVSodO7kcN5fIcDt0oYwtCqs6UNDj1PdR90WS/Ba7V/bBKbSqLFOCkjVi2a YSP+svd1pzmdsGMj5cxBfAJfgic4jyrBiUlKKdITe3K6NmAp2jzr4yHkAiagvZ0w r26/LtvYdlpT4KjJVnMQsZkCO+XhAQowRbzz8+UBDrT6WgvAsPgfm2ry/pGXGRO8 arypj2STKvI0VLgrEail1a5LMZd+TIc566RviJx3mlBWEfBs504yb3efQMjixNhC scs3kdGi0yRDz35USrPKv3Kw6Lrau/Xi -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:34 2025 by rpki-client