$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: kyiCulTGSkI5Zpeuuj2rbcfSy73Hl9FlfjdSqBfkZP4= Subject key identifier: 09:2E:53:BB:A2:C7:66:47:81:F4:44:A0:E6:7C:66:EE:92:6D:D1:8A Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 0119 Signing time: Sun 19 Oct 2025 07:40:15 +0000 Manifest this update: Sun 19 Oct 2025 07:40:14 +0000 Manifest next update: Sun 26 Oct 2025 07:40:14 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: LfFlu/qn22AJyc2VezAn9G4XJ0aFSVpbW1NtVCd4OSg=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Oct 19 07:40:14 2025 GMT Not After : Oct 26 07:40:14 2025 GMT Subject: CN=68f495de-51f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:b4:3e:20:6f:d5:6b:3f:33:48:db:92:23: 98:5a:a7:71:51:85:ff:75:c5:51:e1:7f:19:f2:bb: 3e:f3:98:e0:db:f4:45:3d:88:cb:9a:5a:2a:66:91: b2:96:60:a9:02:5d:c7:b5:b5:c3:12:c6:fa:be:1e: c5:da:61:7f:fc:84:d2:46:c0:c0:30:e2:bd:ad:dd: c9:1a:32:ba:f9:a5:83:18:a3:23:e8:d8:fa:99:f2: 7a:93:80:b5:fa:b8:37:4d:c8:27:92:d1:aa:e4:4f: 54:45:9c:86:3e:32:a0:83:06:6f:7f:db:50:05:61: 1f:91:81:ce:22:50:30:1a:83:18:ef:bc:5a:31:5e: 92:9d:a8:e5:da:4a:c1:eb:c1:6f:43:64:2c:74:c6: 84:35:6c:6f:0f:ce:87:24:ab:54:c0:82:33:1a:c1: 8a:19:ee:1f:db:0e:d5:50:38:5f:83:60:1a:d9:d8: 14:03:c5:97:16:48:c3:30:b2:ea:61:86:01:06:9a: d9:1a:76:ea:6f:46:cc:1c:0e:a8:94:ee:c5:cd:8f: fc:4a:ea:34:74:a0:0f:62:9e:84:a5:99:b0:c3:29: 78:07:61:de:f6:29:b1:91:21:a0:55:4f:3f:9e:2d: eb:32:a5:cb:e0:19:a3:cc:ce:26:9f:c2:88:92:20: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2E:53:BB:A2:C7:66:47:81:F4:44:A0:E6:7C:66:EE:92:6D:D1:8A X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bf:9f:95:25:ba:17:47:3d:7c:2d:7f:3c:19:d4:dc:0b:aa: 0c:02:58:80:6d:86:ef:0c:08:e2:4d:b1:41:ed:aa:ab:1c:e2: bf:bb:e8:48:17:94:36:04:d2:d8:2b:7c:05:34:0f:8d:28:0a: 32:ef:95:60:d3:b5:62:f8:e5:1e:c4:00:66:27:66:30:ed:14: 1f:a7:8b:db:b5:54:31:73:12:78:34:61:4c:09:5b:7a:33:59: 61:b2:c2:1b:b7:74:51:c4:4f:30:03:d2:b8:b2:6b:6a:bc:35: 19:65:12:75:1d:84:b4:3a:7e:10:eb:91:e6:c4:c5:8a:95:b3: 4c:11:1b:43:ea:df:22:2e:bc:62:2a:3f:9d:0b:66:a0:77:57: 4e:a8:36:f4:5e:de:71:8f:96:95:ce:c5:82:ad:43:dc:5f:4d: fa:72:49:f7:25:d2:49:3e:62:44:58:30:37:b2:53:c1:dd:ac: e6:3e:f8:4c:15:e4:9b:f6:78:5e:00:92:99:e5:25:cb:95:1d: 2e:e5:95:77:27:fd:21:75:d8:04:f1:22:bc:2a:88:f0:07:96: 84:76:cf:0c:a6:8a:76:7b:22:80:f7:bd:53:d6:ce:41:9e:47: f5:d1:2a:be:3a:e7:aa:b6:e4:3f:25:2d:e9:e4:d4:0c:0a:2a: 17:e3:ff:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUxMDE5MDc0MDE0WhcNMjUxMDI2MDc0MDE0WjAYMRYwFAYD VQQDEw02OGY0OTVkZS01MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJW0PiBv1Ws/M0jbkiOYWqdxUYX/dcVR4X8Z8rs+85jg2/RFPYjLmloqZpGy lmCpAl3HtbXDEsb6vh7F2mF//ITSRsDAMOK9rd3JGjK6+aWDGKMj6Nj6mfJ6k4C1 +rg3TcgnktGq5E9URZyGPjKggwZvf9tQBWEfkYHOIlAwGoMY77xaMV6Snajl2krB 68FvQ2QsdMaENWxvD86HJKtUwIIzGsGKGe4f2w7VUDhfg2Aa2dgUA8WXFkjDMLLq YYYBBprZGnbqb0bMHA6olO7FzY/8Suo0dKAPYp6EpZmwwyl4B2He9imxkSGgVU8/ ni3rMqXL4BmjzM4mn8KIkiDTjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkuU7ui x2ZHgfREoOZ8Zu6SbdGKMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1v5+VJboXRz18LX88GdTcC6oMAliAbYbvDAjiTbFB7aqrHOK/u+hI F5Q2BNLYK3wFNA+NKAoy75Vg07Vi+OUexABmJ2Yw7RQfp4vbtVQxcxJ4NGFMCVt6 M1lhssIbt3RRxE8wA9K4smtqvDUZZRJ1HYS0On4Q65HmxMWKlbNMERtD6t8iLrxi Kj+dC2agd1dOqDb0Xt5xj5aVzsWCrUPcX036ckn3JdJJPmJEWDA3slPB3azmPvhM FeSb9nheAJKZ5SXLlR0u5ZV3J/0hddgE8SK8KojwB5aEds8Mpop2eyKA971T1s5B nkf10Sq+OueqtuQ/JS3p5NQMCioX4/9p -----END CERTIFICATE-----Generated at Tue Oct 21 03:09:31 2025 by rpki-client