$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: 6I7oXSRMdeWxXlu+k+tTcWQeSHt6DWtUKy25nUOk4i8= Subject key identifier: 0B:38:36:AD:BA:59:30:68:E2:5D:BB:EB:EE:64:00:05:AB:4D:94:CD Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:16:28 +0000 Manifest this update: Sun 19 Oct 2025 07:16:27 +0000 Manifest next update: Sun 26 Oct 2025 07:16:27 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: LrHTxlIzl84yxp5U9CSJcnavCm1yqUnOj8QI2/0Ysg4=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: lCLpkvr+Mt+EalvdDtGgIkdudrmtSBSHV/CQh7RNEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6, serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Oct 19 07:16:27 2025 GMT Not After : Oct 26 07:16:27 2025 GMT Subject: CN=68f4904c-1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:46:a2:af:7b:26:4a:92:fc:4a:f2:0a:ab: f1:ad:a8:9d:e2:ce:5d:ee:f1:bc:3a:6d:db:0f:bf: 37:c3:3d:79:16:31:cc:9e:fb:05:ec:09:ac:b2:ea: 94:fb:f2:16:f8:83:68:75:26:eb:a4:be:df:b5:5a: 53:31:f5:2b:35:24:f6:77:7f:2a:9f:d6:e0:f0:a2: 7a:2c:1c:96:e1:e7:ae:5f:3d:ee:2f:35:b2:63:b0: 0d:39:d3:d8:ad:c6:31:81:e2:81:37:a9:eb:8b:c7: d6:0d:5d:1c:60:4d:b8:2f:a0:8c:ca:01:dd:d5:af: 66:28:77:cd:0a:ba:bb:b3:6a:a9:fc:68:d7:77:17: c3:30:7f:30:6d:58:5a:3e:c8:79:3e:e7:a2:41:fa: 68:51:00:33:73:d4:6c:85:b1:dc:38:32:b2:4c:6c: 4c:fe:ae:0e:1c:29:a1:31:31:47:3f:5b:60:02:45: 5c:fe:ee:16:91:50:45:0e:82:cb:c9:a6:4d:f1:dd: 8b:98:47:e7:f5:2d:a9:ba:1f:b3:5d:71:7d:fd:d4: d0:d9:44:4e:0a:e6:48:9a:9c:65:08:d8:af:db:14: 8d:13:0d:57:76:bc:9b:18:de:4d:c3:ac:1b:41:5b: 6d:73:ec:e3:73:5e:b9:0d:12:7d:ae:24:fc:a1:5a: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:36:AD:BA:59:30:68:E2:5D:BB:EB:EE:64:00:05:AB:4D:94:CD X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2b:b8:6d:17:82:c3:0b:52:db:f2:79:dc:1b:02:2e:9e:ad: 87:7a:56:88:f9:8e:d9:90:b0:fd:7e:40:c8:e5:65:60:03:69: e9:18:c2:4a:f3:df:11:84:ff:0f:fb:f4:04:62:ac:43:c4:68: 6a:69:ca:78:cb:7f:11:64:a8:ff:e6:10:e0:ad:69:b5:c7:99: 6e:2c:5e:7a:ed:c6:73:0e:26:54:1b:c6:5c:8d:cf:7a:2c:e2: 19:ca:88:d6:b5:a6:85:47:8c:f7:1c:b9:84:f5:8a:9f:bb:e3: 7e:e4:8f:a9:6d:50:e8:72:69:59:63:25:8b:68:45:71:be:7b: 8a:69:4f:c8:f0:83:b6:5c:59:79:52:3f:6e:81:1f:8a:00:a0: 99:2f:f7:1c:25:df:f5:81:d5:49:c1:14:52:1d:60:15:61:0d: 58:93:80:91:bf:de:ce:40:93:9f:82:9c:0f:dc:fb:1d:03:bb: d5:1a:09:44:1d:0d:f6:51:da:6f:dc:9a:58:86:ff:fc:4b:59: bb:34:ad:18:f0:a6:43:46:2b:89:52:a8:f3:a2:cb:f6:60:12: 8d:54:30:9f:06:a4:e9:23:46:3e:8c:8e:e0:41:c5:5f:5f:f9: e8:6b:51:a6:d7:b7:dc:0a:f4:ec:45:66:ea:c8:13:34:1b:78: b5:37:84:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjUxMDE5MDcxNjI3WhcNMjUxMDI2MDcxNjI3WjAYMRYwFAYD VQQDEw02OGY0OTA0Yy0xYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOtGoq97JkqS/EryCqvxraid4s5d7vG8Om3bD783wz15FjHMnvsF7AmssuqU +/IW+INodSbrpL7ftVpTMfUrNST2d38qn9bg8KJ6LByW4eeuXz3uLzWyY7ANOdPY rcYxgeKBN6nri8fWDV0cYE24L6CMygHd1a9mKHfNCrq7s2qp/GjXdxfDMH8wbVha Psh5PueiQfpoUQAzc9RshbHcODKyTGxM/q4OHCmhMTFHP1tgAkVc/u4WkVBFDoLL yaZN8d2LmEfn9S2puh+zXXF9/dTQ2UROCuZImpxlCNiv2xSNEw1XdrybGN5Nw6wb QVttc+zjc165DRJ9riT8oVp/KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs4Nq26 WTBo4l276+5kAAWrTZTNMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDK7htF4LDC1Lb8nncGwIunq2HelaI+Y7ZkLD9fkDI5WVgA2npGMJK 898RhP8P+/QEYqxDxGhqacp4y38RZKj/5hDgrWm1x5luLF567cZzDiZUG8Zcjc96 LOIZyojWtaaFR4z3HLmE9Yqfu+N+5I+pbVDocmlZYyWLaEVxvnuKaU/I8IO2XFl5 Uj9ugR+KAKCZL/ccJd/1gdVJwRRSHWAVYQ1Yk4CRv97OQJOfgpwP3PsdA7vVGglE HQ32Udpv3JpYhv/8S1m7NK0Y8KZDRiuJUqjzosv2YBKNVDCfBqTpI0Y+jI7gQcVf X/noa1Gm17fcCvTsRWbqyBM0G3i1N4RN -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:52 2025 by rpki-client