$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json) Hash identifier: I9WFPCgwAx3StBZi26ysp33EPlqvs6kjanPZb/dQ7TE= Subject key identifier: 8E:CC:F0:C0:41:93:D4:FC:CB:51:70:9A:95:BD:0F:6C:DB:09:52:8E Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft Manifest number: 1B Signing time: Sun 19 Oct 2025 11:22:55 +0000 Manifest this update: Sun 19 Oct 2025 11:22:54 +0000 Manifest next update: Sun 26 Oct 2025 11:22:54 +0000 Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: Nku8v31vKH3iif8qzxbryCcjtI6srrhqhdKpfPZsymI=) 2: 30A0F15C844211F08D5EDC71C4F9AE02.roa (hash: InIaj/oLsOP7BoW0eQNCHw7tjMCZzbrG21iu4aAkWXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Oct 19 11:22:54 2025 GMT Not After : Oct 26 11:22:54 2025 GMT Subject: CN=68f4ca0e-4187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:d8:56:39:9d:fd:48:57:64:ad:89:28:6d: 0a:de:b8:81:0c:66:cf:15:25:81:8e:7b:be:dc:08: e6:1d:08:79:93:24:3e:56:79:c3:57:42:85:3c:56: 5d:4e:5b:24:9e:6e:47:f6:6d:e6:98:dd:66:f7:f3: f5:6a:34:95:60:38:5c:bb:e2:15:d4:41:c8:fb:9f: 0b:d5:1e:fe:f3:f3:82:d4:13:0c:df:99:9b:f9:7f: 60:c5:93:f7:14:e5:21:bd:34:d8:b1:ac:cb:72:c9: 97:83:73:57:4e:31:75:59:29:46:d1:2a:32:fc:1c: b8:39:3c:83:fe:92:db:d0:8d:81:44:e5:7c:82:7d: ec:1b:7e:f9:74:e2:98:a5:02:9a:97:c2:c8:c2:49: 38:0b:73:31:ec:26:91:69:c0:91:49:5a:20:ba:9d: 6a:3a:3d:4b:ac:fb:93:c0:d5:8c:a0:d5:18:e5:6b: ee:49:8e:a2:ce:03:e0:bc:e6:c8:a5:d6:48:0d:d2: 38:fd:3b:59:91:fe:29:9d:c4:02:c0:2c:6c:b2:ef: 29:9d:3e:3b:f9:e5:ef:85:86:f7:c9:34:a3:8d:f8: f0:83:34:aa:99:92:3d:cf:0a:96:c9:de:36:36:77: df:37:ca:d7:47:8e:5a:07:e0:1b:85:08:8e:c6:bb: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CC:F0:C0:41:93:D4:FC:CB:51:70:9A:95:BD:0F:6C:DB:09:52:8E X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:5f:fa:97:6b:90:b0:11:22:36:aa:de:e6:5a:74:66:32:98: a7:b7:2d:21:24:21:58:af:8d:4a:35:de:aa:f6:33:83:2f:75: d0:9b:2d:c2:8f:9d:b9:3b:b6:12:60:b9:34:89:45:6d:df:6a: ed:73:e2:e5:16:16:2f:30:a0:0d:c2:91:22:d5:5b:64:76:b4: 7d:c5:92:17:b2:bd:5a:f2:7b:f6:99:7a:fb:94:78:d4:d4:44: 26:5b:29:d1:49:33:4a:d9:f2:39:d6:ca:64:6c:cb:d5:5e:5b: d2:d2:ac:96:44:e6:57:95:f2:53:52:eb:af:75:6f:a7:fb:28: 3c:80:c1:90:22:a4:e3:23:d1:6f:5e:fc:3c:98:fb:e3:58:84: de:22:36:22:d6:c2:59:f2:81:c5:d7:aa:9e:e9:5d:58:65:a6: 9f:36:eb:5b:2f:04:f1:da:ef:f4:27:13:d5:e1:a1:74:57:60: 80:aa:3b:b3:fe:b1:f2:19:13:ed:0e:20:8d:ea:68:a2:79:e0: 6a:71:5b:36:de:d6:ab:1c:bc:48:87:8a:81:51:d5:1d:ed:71: 58:f2:c5:1d:a4:09:c8:15:8f:c3:d0:e3:a5:01:96:01:43:92: 13:34:cd:2d:f2:ec:06:7d:6a:58:65:fe:28:ad:21:c6:8e:b0: 9b:cf:14:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNTEwMTkxMTIyNTRaFw0yNTEwMjYxMTIyNTRaMBgxFjAUBgNV BAMTDTY4ZjRjYTBlLTQxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoD9hWOZ39SFdkrYkobQreuIEMZs8VJYGOe77cCOYdCHmTJD5WecNXQoU8Vl1O WySebkf2beaY3Wb38/VqNJVgOFy74hXUQcj7nwvVHv7z84LUEwzfmZv5f2DFk/cU 5SG9NNixrMtyyZeDc1dOMXVZKUbRKjL8HLg5PIP+ktvQjYFE5XyCfewbfvl04pil ApqXwsjCSTgLczHsJpFpwJFJWiC6nWo6PUus+5PA1Yyg1Rjla+5JjqLOA+C85sil 1kgN0jj9O1mR/imdxALALGyy7ymdPjv55e+FhvfJNKON+PCDNKqZkj3PCpbJ3jY2 d983ytdHjloH4BuFCI7Gu0dxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjszwwEGT 1PzLUXCalb0PbNsJUo4wHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdL V1FfOHA2ekVRY3RrU2hUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdf+pdrkLARIjaq3uZadGYymKe3LSEkIVivjUo13qr2M4MvddCbLcKP nbk7thJguTSJRW3fau1z4uUWFi8woA3CkSLVW2R2tH3FkheyvVrye/aZevuUeNTU RCZbKdFJM0rZ8jnWymRsy9VeW9LSrJZE5leV8lNS6691b6f7KDyAwZAipOMj0W9e /DyY++NYhN4iNiLWwlnygcXXqp7pXVhlpp8261svBPHa7/QnE9XhoXRXYICqO7P+ sfIZE+0OII3qaKJ54GpxWzbe1qscvEiHioFR1R3tcVjyxR2kCcgVj8PQ46UBlgFD khM0zS3y7AZ9alhl/iitIcaOsJvPFIM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:01 2025 by rpki-client