$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json) Hash identifier: rk1iB9GkE4i1sSC3Jw7t34JbVZvJjUWU5uP7lHIiVgw= Subject key identifier: BD:6B:0A:DA:70:65:D0:93:68:9F:7E:71:78:53:7B:B2:DF:93:FA:E0 Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft Manifest number: 071E Signing time: Sat 18 Oct 2025 23:14:56 +0000 Manifest this update: Sat 18 Oct 2025 23:14:55 +0000 Manifest next update: Sat 25 Oct 2025 23:14:55 +0000 Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: ljiq943Pql91BHOEtEqPwUUG1GHVXyPRLlhNS2+fEJw=) 2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: Zjwbd7A/MXOwRReQkUKden3QdXuGaPIKzLzYkjV/0SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Validity Not Before: Oct 18 23:14:55 2025 GMT Not After : Oct 25 23:14:55 2025 GMT Subject: CN=68f41f70-1922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:ca:48:26:9b:55:78:2d:33:02:4c:cd:79: 4e:ee:56:fd:ef:12:40:f5:ca:c1:32:c8:02:b5:ad: 67:ec:05:8d:33:35:06:f5:94:c4:f9:77:82:7d:b9: b0:93:f8:8b:dc:e9:18:77:37:ab:8c:fc:4b:f5:62: e8:41:40:9d:b4:77:fd:c7:cd:04:37:c0:82:16:01: 16:a8:76:7d:4c:18:c0:6f:e3:80:7a:cd:0e:98:9c: 2e:f5:d8:09:1a:9a:d7:2c:55:b8:64:ae:95:1f:a6: 33:c6:70:81:0b:ac:04:ac:a4:af:e3:60:3a:fc:09: 23:75:aa:8e:15:24:72:18:6c:7d:89:d6:79:e1:47: 35:21:74:8f:8f:e3:2e:78:ca:0b:f5:ea:04:30:9c: 71:d4:66:1f:4d:1e:d6:11:9d:bb:41:ab:92:ba:3e: 6d:8e:0a:6c:46:94:6d:e4:01:41:46:52:05:b1:71: 13:37:11:96:c9:25:52:77:36:91:0a:12:28:c5:3c: 81:c2:aa:51:c6:d0:17:df:87:7b:49:67:b3:bc:af: 19:be:ac:bb:10:04:18:b7:e4:cc:73:5a:68:50:62: 93:81:0b:42:80:7c:36:74:c4:22:93:de:e0:f1:0a: e9:a7:ea:ad:ca:be:63:8a:1c:b6:02:d7:d1:8c:f8: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6B:0A:DA:70:65:D0:93:68:9F:7E:71:78:53:7B:B2:DF:93:FA:E0 X509v3 Authority Key Identifier: keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:59:74:f0:84:c5:83:70:90:9c:7a:d9:b8:aa:92:bd:25:03: 10:39:0a:54:42:42:f0:70:12:97:8e:4b:b4:35:5a:0d:00:74: 38:3a:51:d5:31:f9:95:4b:e3:06:0c:e4:3e:f9:8f:79:b3:0d: 18:e5:8f:e5:95:f5:79:9d:9e:b4:c2:3b:48:57:77:77:68:8a: 8e:59:1e:01:a6:ba:ac:40:05:4c:35:22:38:48:e2:cd:1e:18: d8:ab:28:14:01:73:86:59:14:65:ca:e3:e7:8d:1a:94:30:10: 44:b2:e4:aa:14:e6:c9:03:0c:76:54:c0:e8:5c:82:48:e7:1a: 9c:2f:f9:94:52:fa:84:1f:af:87:1c:aa:21:9f:fb:64:a7:4c: e0:08:37:01:f8:ec:63:69:5f:55:59:0d:56:5f:d4:4c:43:f5: a8:bf:e7:0c:dd:0e:a7:63:53:66:f6:f7:df:98:cb:6e:e1:b6: 53:69:81:a6:9b:51:ba:da:a7:ea:18:0c:26:bc:13:94:d8:3d: a9:b4:97:2f:c6:1f:1e:ed:da:96:05:6e:2b:50:d3:09:21:ab: c7:9e:e3:50:d3:74:23:59:3e:db:48:a9:d3:ad:76:69:48:53: ab:e7:bf:82:fe:22:f0:68:51:fe:ab:b9:db:6d:39:68:6b:80: 8d:51:14:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4 RTU3NzM3MjQwHhcNMjUxMDE4MjMxNDU1WhcNMjUxMDI1MjMxNDU1WjAYMRYwFAYD VQQDEw02OGY0MWY3MC0xOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8/KSCabVXgtMwJMzXlO7lb97xJA9crBMsgCta1n7AWNMzUG9ZTE+XeCfbmw k/iL3OkYdzerjPxL9WLoQUCdtHf9x80EN8CCFgEWqHZ9TBjAb+OAes0OmJwu9dgJ GprXLFW4ZK6VH6YzxnCBC6wErKSv42A6/AkjdaqOFSRyGGx9idZ54Uc1IXSPj+Mu eMoL9eoEMJxx1GYfTR7WEZ27QauSuj5tjgpsRpRt5AFBRlIFsXETNxGWySVSdzaR ChIoxTyBwqpRxtAX34d7SWezvK8Zvqy7EAQYt+TMc1poUGKTgQtCgHw2dMQik97g 8Qrpp+qtyr5jihy2AtfRjPjNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1rCtpw ZdCTaJ9+cXhTe7Lfk/rgMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1 OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2 TDFwWEM1bFJmS0NPVjNOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYWXTwhMWDcJCcetm4qpK9JQMQOQpUQkLwcBKXjku0NVoNAHQ4OlHV MfmVS+MGDOQ++Y95sw0Y5Y/llfV5nZ60wjtIV3d3aIqOWR4BprqsQAVMNSI4SOLN HhjYqygUAXOGWRRlyuPnjRqUMBBEsuSqFObJAwx2VMDoXIJI5xqcL/mUUvqEH6+H HKohn/tkp0zgCDcB+OxjaV9VWQ1WX9RMQ/Wov+cM3Q6nY1Nm9vffmMtu4bZTaYGm m1G62qfqGAwmvBOU2D2ptJcvxh8e7dqWBW4rUNMJIavHnuNQ03QjWT7bSKnTrXZp SFOr57+C/iLwaFH+q7nbbTloa4CNURRi -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:40 2025 by rpki-client