$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: qLnHVzgWxBGdsidImhwY88FUlKfV3owR2Wd81KzcXJs= Subject key identifier: 2C:09:23:38:DB:31:CA:DC:80:D5:A5:C6:3A:E8:85:84:5A:5D:11:D8 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 02A9 Signing time: Sun 19 Oct 2025 03:42:18 +0000 Manifest this update: Sun 19 Oct 2025 03:42:17 +0000 Manifest next update: Sun 26 Oct 2025 03:42:17 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: awgou51n+cfgvUh7qICWXFWNZ3K0nVTro7YvQKELfPI=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: Oct 19 03:42:17 2025 GMT Not After : Oct 26 03:42:17 2025 GMT Subject: CN=68f45e1a-22ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:f1:1d:d9:cd:0c:3f:8b:bd:1f:91:eb:b3: c1:61:f2:51:39:cf:01:aa:f8:e1:c4:52:3e:26:23: f0:d8:a5:c8:30:2d:87:8d:b8:00:ed:65:ed:3a:63: e2:70:dd:b3:1d:3b:76:f6:e0:d3:be:bb:17:04:d2: 07:34:e3:fd:c0:82:c3:d3:37:f2:ed:d1:2f:14:24: e7:65:d9:64:ea:a5:ae:07:98:66:33:0e:8f:0e:7e: ef:fd:7f:7d:a8:d7:ed:6d:04:3a:9b:ff:32:eb:f8: 97:3c:45:f1:42:01:e2:71:2c:d0:4e:40:66:5e:32: 55:0b:b5:e6:a6:61:30:94:a8:00:96:3a:c9:56:66: e7:42:a5:36:23:e8:e1:65:be:6d:b7:8a:40:90:71: 78:d9:67:ad:c5:f9:92:2e:9a:28:bd:36:e8:1c:9d: 23:69:bf:04:1b:a2:ad:10:22:03:30:98:32:bf:99: 7b:70:08:0e:1e:aa:0e:5c:34:ca:04:d1:d9:b0:2a: eb:7b:e1:98:70:90:5c:ae:24:d1:52:25:c6:c0:66: 92:20:6d:13:7b:f3:dc:9e:fc:d4:35:1c:f4:5a:ff: 35:41:bd:ca:a1:c2:fb:2a:36:fd:8c:ef:56:92:f9: 9a:d2:b4:98:12:9f:50:40:c5:c6:99:93:39:ba:cb: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:09:23:38:DB:31:CA:DC:80:D5:A5:C6:3A:E8:85:84:5A:5D:11:D8 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0d:f1:35:21:32:25:2f:90:85:f5:87:aa:52:2e:33:44:db: 27:3f:01:9a:2a:9a:af:a3:e1:55:1b:c9:9d:ac:40:3b:11:e8: dc:5e:6f:c5:04:2b:d2:0f:b4:96:ec:f9:d6:9d:58:e5:be:99: 5f:40:f5:1a:90:aa:2a:d7:1f:34:08:d1:0f:3f:32:3d:ca:5b: 89:fd:54:c7:b7:4c:80:6c:61:4a:ec:34:0f:28:1f:2f:cd:0f: 85:cd:54:df:37:5c:8d:1f:ad:a3:f3:56:c3:9f:78:7a:cb:51: fa:98:6d:fa:44:af:a0:9c:c4:a2:11:f9:bb:60:1c:68:5c:a2: b2:a0:91:7d:9d:29:ad:b1:25:aa:0a:eb:f3:58:36:79:ea:f4: f6:61:ac:90:04:a6:d1:ef:02:a8:ab:0d:7c:38:02:c6:a3:95: 41:3e:90:1f:7b:be:ff:5b:24:22:14:bf:3b:a3:c5:0e:c5:22: cc:d7:e4:98:13:cc:65:63:e5:11:2d:27:d4:04:68:19:24:fc: 9e:80:14:8e:c5:0c:02:99:79:a9:ad:fb:03:74:df:cf:3b:0f: 5e:b3:39:b7:12:33:dc:de:29:f8:d2:fb:b4:4a:2e:7b:b5:f9: 16:9b:d8:38:bc:c2:2c:8e:e0:bb:4f:fd:ce:85:b2:d0:7e:ed: 42:68:3d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjUxMDE5MDM0MjE3WhcNMjUxMDI2MDM0MjE3WjAYMRYwFAYD VQQDEw02OGY0NWUxYS0yMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk3xHdnNDD+LvR+R67PBYfJROc8BqvjhxFI+JiPw2KXIMC2HjbgA7WXtOmPi cN2zHTt29uDTvrsXBNIHNOP9wILD0zfy7dEvFCTnZdlk6qWuB5hmMw6PDn7v/X99 qNftbQQ6m/8y6/iXPEXxQgHicSzQTkBmXjJVC7XmpmEwlKgAljrJVmbnQqU2I+jh Zb5tt4pAkHF42WetxfmSLpoovTboHJ0jab8EG6KtECIDMJgyv5l7cAgOHqoOXDTK BNHZsCrre+GYcJBcriTRUiXGwGaSIG0Te/PcnvzUNRz0Wv81Qb3KocL7Kjb9jO9W kvma0rSYEp9QQMXGmZM5usuw3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwJIzjb McrcgNWlxjrohYRaXRHYMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmDfE1ITIlL5CF9YeqUi4zRNsnPwGaKpqvo+FVG8mdrEA7EejcXm/F BCvSD7SW7PnWnVjlvplfQPUakKoq1x80CNEPPzI9yluJ/VTHt0yAbGFK7DQPKB8v zQ+FzVTfN1yNH62j81bDn3h6y1H6mG36RK+gnMSiEfm7YBxoXKKyoJF9nSmtsSWq CuvzWDZ56vT2YayQBKbR7wKoqw18OALGo5VBPpAfe77/WyQiFL87o8UOxSLM1+SY E8xlY+URLSfUBGgZJPyegBSOxQwCmXmprfsDdN/POw9eszm3EjPc3in40vu0Si57 tfkWm9g4vMIsjuC7T/3OhbLQfu1CaD1H -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:11 2025 by rpki-client