$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: 9Kjas/wsWFyHaz0qNYnLGZfU16VaempZK0vMdX4yyy8= Subject key identifier: C7:EB:FE:17:E7:29:2F:91:0B:E0:E0:C4:8D:92:48:3A:09:9A:0F:7A Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 17AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1787 Signing time: Sat 18 Oct 2025 16:59:26 +0000 Manifest this update: Sat 18 Oct 2025 16:59:26 +0000 Manifest next update: Sat 25 Oct 2025 16:59:26 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: ZPYgu/aZHfb/sPtfyhdSfzdrENRv/34Nn3/QKKa+WaU=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6059 (0x17ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Oct 18 16:59:26 2025 GMT Not After : Oct 25 16:59:26 2025 GMT Subject: CN=68f3c76e-4cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:ed:14:35:e9:0e:83:5a:d9:07:ed:a3:75: ec:82:6c:4a:26:aa:6c:3a:38:7f:30:8f:94:dd:e1: 6e:f4:3c:90:12:bf:90:4f:85:69:94:ab:0b:39:84: a8:65:49:bf:e9:ee:f5:d2:ed:1d:fe:a0:97:07:6a: 61:99:8c:e1:2a:b6:42:8d:89:33:23:84:31:0f:96: ea:4f:5a:62:7c:37:fb:58:07:df:15:40:54:94:a9: 85:9f:77:ce:3a:d3:4e:33:11:91:d5:42:31:6a:13: a8:ad:93:5e:4f:09:89:98:70:0e:4f:3b:82:f6:8f: 36:2f:14:d8:02:86:58:c6:e9:5d:41:b3:ca:1c:f7: 07:69:f4:c4:80:7b:eb:41:42:03:cc:29:41:1e:e6: a6:94:32:69:9e:b8:80:48:d9:dd:d8:3d:db:25:8f: e0:79:f3:8f:b9:fb:66:fa:81:f5:cc:fb:23:de:85: f2:91:2b:7a:44:51:87:5f:2f:a5:74:9f:18:11:b2: 92:74:5a:68:44:34:b7:38:c2:29:51:18:af:c8:d5: 00:c7:91:99:c2:c2:ed:58:54:c1:91:85:b8:1d:3e: 06:90:77:63:00:95:24:39:3c:97:3d:f5:49:92:3f: 0f:8b:37:34:1b:53:cd:4b:53:a7:26:bc:67:53:5d: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:FE:17:E7:29:2F:91:0B:E0:E0:C4:8D:92:48:3A:09:9A:0F:7A X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ed:7c:44:45:df:56:cd:d2:ee:bd:4c:e5:07:28:b6:20:47: bc:4e:b9:db:d3:b4:6d:fd:87:96:d8:7b:e6:23:36:d0:b8:ef: 0c:49:60:2d:b3:b0:cb:09:02:3c:f3:33:8a:6b:32:1c:41:01: a7:8d:64:64:c4:3e:7a:06:62:1a:48:dc:f3:ae:79:e0:e9:a6: 65:9d:60:c0:ca:20:80:05:a7:58:48:73:51:29:b0:78:cc:c3: 29:b7:ab:58:a6:8a:86:46:7c:3b:6f:fc:16:d5:ce:70:d7:8c: d4:03:1b:47:ab:be:bd:d4:d3:e8:0e:47:85:90:34:17:f0:b2: f6:dd:dd:c3:24:82:e5:42:b4:af:4c:5e:ed:c2:30:27:e2:41: 95:2f:bd:c5:8f:9f:f0:8f:ef:d4:1a:83:b6:8c:44:4d:7c:ef: e8:3b:05:02:de:88:62:d6:92:04:59:e6:ce:a2:c3:2e:90:8a: f5:2c:c3:49:0a:c2:80:e0:25:4e:3f:62:80:7c:01:c2:79:41: ba:96:52:c1:04:1d:1d:52:07:01:87:7d:ac:40:04:c3:00:59: ac:ff:1b:3f:10:1f:d4:2a:be:31:d7:7f:ff:06:53:f2:f4:78: ce:65:db:03:ae:40:45:88:39:00:bd:a7:86:1b:1c:ef:a6:c3: a3:5c:6d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUxMDE4MTY1OTI2WhcNMjUxMDI1MTY1OTI2WjAYMRYwFAYD VQQDEw02OGYzYzc2ZS00Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hXtFDXpDoNa2Qfto3XsgmxKJqpsOjh/MI+U3eFu9DyQEr+QT4VplKsLOYSo ZUm/6e710u0d/qCXB2phmYzhKrZCjYkzI4QxD5bqT1pifDf7WAffFUBUlKmFn3fO OtNOMxGR1UIxahOorZNeTwmJmHAOTzuC9o82LxTYAoZYxuldQbPKHPcHafTEgHvr QUIDzClBHuamlDJpnriASNnd2D3bJY/gefOPuftm+oH1zPsj3oXykSt6RFGHXy+l dJ8YEbKSdFpoRDS3OMIpURivyNUAx5GZwsLtWFTBkYW4HT4GkHdjAJUkOTyXPfVJ kj8Pizc0G1PNS1OnJrxnU10QHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfr/hfn KS+RC+DgxI2SSDoJmg96MB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF7XxERd9WzdLuvUzlByi2IEe8Trnb07Rt/YeW2HvmIzbQuO8MSWAt s7DLCQI88zOKazIcQQGnjWRkxD56BmIaSNzzrnng6aZlnWDAyiCABadYSHNRKbB4 zMMpt6tYpoqGRnw7b/wW1c5w14zUAxtHq7691NPoDkeFkDQX8LL23d3DJILlQrSv TF7twjAn4kGVL73Fj5/wj+/UGoO2jERNfO/oOwUC3ohi1pIEWebOosMukIr1LMNJ CsKA4CVOP2KAfAHCeUG6llLBBB0dUgcBh32sQATDAFms/xs/EB/UKr4x13//BlPy 9HjOZdsDrkBFiDkAvaeGGxzvpsOjXG0M -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:02 2025 by rpki-client