$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft File: DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json) Hash identifier: uoanTjWBUKqRaeYTFLEo7MjY7g7hexRTNiu7CF7IFdE= Subject key identifier: 0D:88:1B:92:04:C7:AF:E6:CF:DB:A2:6A:DC:F6:34:0D:F0:16:35:94 Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26 Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft Manifest number: 10 Signing time: Sun 19 Oct 2025 11:33:08 +0000 Manifest this update: Sun 19 Oct 2025 11:33:07 +0000 Manifest next update: Sun 26 Oct 2025 11:33:07 +0000 Files and hashes: 1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: 7AS3vjcMhq9zC8OAQPKmnO1T85d4xUQcj6ytn0AvmKU=) 2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126 Validity Not Before: Oct 19 11:33:07 2025 GMT Not After : Oct 26 11:33:07 2025 GMT Subject: CN=68f4cc74-d583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:73:21:32:48:21:6c:5b:d9:f5:9c:85:76: 38:06:c9:8f:54:1e:a6:12:e2:69:67:a0:55:76:28: 2e:00:54:41:02:d3:a6:31:42:b8:c2:bf:d5:8d:ed: a5:55:43:57:fe:68:80:9c:eb:e8:f9:af:f0:38:07: 9d:0e:6d:a7:c0:57:b6:d3:37:70:b0:49:c2:c4:bf: d7:f2:63:4c:08:94:8a:dd:b5:29:3d:50:a6:d4:44: c9:98:01:be:65:7e:2d:53:bd:a2:a9:81:06:8f:37: 8f:cf:52:93:62:cd:db:50:77:ad:08:fd:95:0a:31: 50:f0:6a:a2:20:8a:e7:cf:35:6d:66:04:47:82:c7: 34:ca:82:27:a5:54:c3:f5:31:33:ec:ad:1c:f5:9d: 94:9a:a7:7f:0f:69:4c:ed:34:c0:43:0e:e1:73:0f: c8:71:29:31:bf:0a:2d:0a:ff:ee:40:32:0c:5e:ba: e2:7a:62:fb:e2:d4:65:ac:52:a9:c5:17:13:15:14: ba:3f:75:d6:d6:5e:39:eb:b3:3b:5e:5a:35:5f:70: c8:55:94:75:44:86:0a:6e:c0:99:6a:7f:95:c5:db: 4b:51:cd:26:bb:57:77:2a:46:fc:ec:af:91:86:a0: de:96:8a:75:d8:67:71:5a:14:ae:fe:f5:ad:ad:29: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:88:1B:92:04:C7:AF:E6:CF:DB:A2:6A:DC:F6:34:0D:F0:16:35:94 X509v3 Authority Key Identifier: keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d0:32:f3:8e:27:6f:9f:06:59:29:91:fd:e3:58:59:77:35: 6c:fb:96:2e:11:51:7e:56:16:93:e4:c5:95:e8:45:1d:3e:10: 33:f5:18:25:7d:22:6b:ad:37:1c:11:31:df:59:ab:cb:61:14: 85:e0:b8:ec:d3:19:12:10:fd:de:cd:0d:00:fd:28:74:1b:c2: 6f:d0:a8:2e:47:29:cc:e4:c5:6c:7c:2f:08:e3:84:9d:38:cd: 6c:d9:2f:80:92:e9:17:2c:2a:b7:8e:97:cf:25:47:7c:3c:5d: 2d:cc:b6:e4:c1:71:8e:4d:e8:8a:c3:72:4b:70:af:96:56:ec: b1:5a:68:38:0d:c3:2b:43:f2:03:90:2a:4d:6e:75:5b:ae:bd: 22:46:65:01:92:c4:3d:b5:af:ef:fa:a8:59:c7:aa:02:ac:ae: 90:64:3f:3b:b4:54:f4:9e:07:95:82:ed:45:e9:22:db:99:97: 56:5f:91:4c:b8:1e:b7:aa:c3:2f:65:8d:0e:be:cf:a6:53:6c: d1:aa:ce:a1:2a:05:81:39:20:96:4a:49:85:5b:d4:f3:a8:08: 23:9d:a3:3d:57:e2:a9:92:8b:06:4f:53:fd:49:24:a9:22:84: 6f:62:20:a5:ed:33:3c:1a:11:9d:7f:49:a4:17:a0:a6:ed:10: 7e:9e:2d:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMEVBOEUxODA3ODMwNDMyMTU2MDYzNEEzQjRGMjZFQzZF Qzc2MjEyNjAeFw0yNTEwMTkxMTMzMDdaFw0yNTEwMjYxMTMzMDdaMBgxFjAUBgNV BAMTDTY4ZjRjYzc0LWQ1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5a3MhMkghbFvZ9ZyFdjgGyY9UHqYS4mlnoFV2KC4AVEEC06YxQrjCv9WN7aVV Q1f+aICc6+j5r/A4B50ObafAV7bTN3CwScLEv9fyY0wIlIrdtSk9UKbURMmYAb5l fi1TvaKpgQaPN4/PUpNizdtQd60I/ZUKMVDwaqIgiufPNW1mBEeCxzTKgielVMP1 MTPsrRz1nZSap38PaUztNMBDDuFzD8hxKTG/Ci0K/+5AMgxeuuJ6Yvvi1GWsUqnF FxMVFLo/ddbWXjnrszteWjVfcMhVlHVEhgpuwJlqf5XF20tRzSa7V3cqRvzsr5GG oN6WinXYZ3FaFK7+9a2tKV3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDYgbkgTH r+bP26Jq3PY0DfAWNZQwHwYDVR0jBBgwFoAUDqjhgHgwQyFWBjSjtPJuxux2ISYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzU0NjU3RERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlGV0JqU2p0UEp1eHV4MklT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHFqaGdIZ3dReUZXQmpTanRQSnV4dXgySVNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzU0NjU3RERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlG V0JqU2p0UEp1eHV4MklTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPQMvOOJ2+fBlkpkf3jWFl3NWz7li4RUX5WFpPkxZXoRR0+EDP1GCV9 ImutNxwRMd9Zq8thFIXguOzTGRIQ/d7NDQD9KHQbwm/QqC5HKczkxWx8LwjjhJ04 zWzZL4CS6RcsKreOl88lR3w8XS3MtuTBcY5N6IrDcktwr5ZW7LFaaDgNwytD8gOQ Kk1udVuuvSJGZQGSxD21r+/6qFnHqgKsrpBkPzu0VPSeB5WC7UXpItuZl1ZfkUy4 Hreqwy9ljQ6+z6ZTbNGqzqEqBYE5IJZKSYVb1POoCCOdoz1X4qmSiwZPU/1JJKki hG9iIKXtMzwaEZ1/SaQXoKbtEH6eLXk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:20 2025 by rpki-client