$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: jmz3mPsWFSrKipiHkv/BTcXWd+NH8ucjhz0ZKr4xZng= Subject key identifier: 0C:49:3E:02:E9:EC:6F:30:79:8C:8E:C0:EE:F6:02:B8:4D:D2:03:DB Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 063E Signing time: Sun 19 Oct 2025 00:19:16 +0000 Manifest this update: Sun 19 Oct 2025 00:19:15 +0000 Manifest next update: Sun 26 Oct 2025 00:19:15 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: l5H6lZeKC0GYx8uxN4/BaH8VZ+4CZADMccwmFTgsHPU=) 2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 79HGgLT4UvpWXoWIU4dQI1xmx9s6FLe8XfJ4mBLvcew=) 3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: ncmb5q9rR1siQY10NSuWDQXTtyorRNilXo5iuSRTX3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: Oct 19 00:19:15 2025 GMT Not After : Oct 26 00:19:15 2025 GMT Subject: CN=68f42e84-7e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:10:42:80:cb:f6:7c:fd:dc:c3:9d:9b:3d: 8e:47:2a:f0:20:1c:b3:f1:f5:39:7e:9d:94:af:64: ee:4f:67:a4:25:8d:c7:b2:be:08:62:ff:1d:3c:82: 8e:23:19:d9:b8:3e:8a:7a:ff:2e:03:40:98:77:d7: 31:a1:a9:09:7c:40:48:df:2b:83:7e:e4:0c:1b:6a: 4d:78:d9:d8:58:03:d8:70:8c:01:e9:eb:a6:a6:cb: 2d:b0:bf:35:74:18:d0:d8:b8:1d:cc:ef:18:3d:fb: 12:99:4c:f7:1d:9c:93:2f:b1:c1:1c:ff:70:2f:f4: d9:ac:14:ab:a7:3e:cf:5e:f2:f1:4f:fa:b5:df:7c: 8c:2a:2f:69:1d:06:1b:6d:af:e1:86:8d:be:63:b9: 9d:8d:66:bc:0c:9e:fb:7d:3b:af:7e:10:20:2f:02: 6a:29:ec:0d:e5:2b:1b:83:2f:43:2c:c7:fe:24:fb: af:7c:c2:0c:fa:a8:f1:dc:89:fa:ff:0c:df:32:64: 72:50:62:25:66:3c:25:1d:2f:2b:23:e3:7c:b8:58: 58:61:1c:e1:3a:cd:fc:0d:72:37:87:5a:b1:1a:5e: e9:2d:40:b8:ac:41:c3:cf:11:6d:48:8d:dd:e1:b4: 0c:bd:7f:21:f3:4f:86:ab:b1:df:6f:55:77:e2:bd: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:3E:02:E9:EC:6F:30:79:8C:8E:C0:EE:F6:02:B8:4D:D2:03:DB X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:05:77:9f:8f:fc:8c:2c:11:c0:ed:70:8c:60:fa:28:83:17: a9:a7:bf:1f:cf:56:11:5d:39:02:03:65:3b:f3:59:bd:17:fd: 27:de:cc:53:08:75:84:7f:ce:61:c9:a3:9d:c4:72:c4:46:fe: 64:e6:f7:8e:6a:2c:91:30:07:15:b8:56:19:c0:74:e2:45:b6: 80:da:1f:75:06:bc:b6:6f:f0:25:aa:46:09:67:d1:ca:cd:3e: 7e:de:f1:ce:22:31:21:b8:0c:ad:8e:00:de:c9:84:b2:0d:54: d8:6b:27:80:87:0f:cb:aa:5b:c4:8b:99:42:cb:96:c3:c0:c0: 71:cd:d2:03:49:f5:4c:5f:9f:08:24:d4:ad:94:c6:7d:63:ac: e7:28:33:d2:0c:a3:5b:bd:b1:4a:a3:ad:a5:7a:d2:da:d1:6e: b2:f7:e0:2c:3d:63:6a:fd:a6:0e:13:bd:41:fd:a7:8c:a9:75: 1c:38:a4:bd:a8:14:4b:b9:cb:40:f5:4d:e5:20:e7:d3:49:df: d6:b0:4f:7f:b9:30:60:6b:1e:a9:63:e6:34:3f:00:5b:32:3d: 00:8e:de:11:cf:36:f8:3e:d3:83:5a:b7:f5:fa:b5:a8:ca:93: 47:3f:63:f1:d0:65:6e:9b:7c:8d:a9:5e:e8:3b:a3:38:75:0c: 78:0b:0d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjUxMDE5MDAxOTE1WhcNMjUxMDI2MDAxOTE1WjAYMRYwFAYD VQQDEw02OGY0MmU4NC03ZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssAQQoDL9nz93MOdmz2ORyrwIByz8fU5fp2Ur2TuT2ekJY3Hsr4IYv8dPIKO IxnZuD6Kev8uA0CYd9cxoakJfEBI3yuDfuQMG2pNeNnYWAPYcIwB6eumpsstsL81 dBjQ2LgdzO8YPfsSmUz3HZyTL7HBHP9wL/TZrBSrpz7PXvLxT/q133yMKi9pHQYb ba/hho2+Y7mdjWa8DJ77fTuvfhAgLwJqKewN5Ssbgy9DLMf+JPuvfMIM+qjx3In6 /wzfMmRyUGIlZjwlHS8rI+N8uFhYYRzhOs38DXI3h1qxGl7pLUC4rEHDzxFtSI3d 4bQMvX8h80+Gq7Hfb1V34r0o2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxJPgLp 7G8weYyOwO72ArhN0gPbMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPBXefj/yMLBHA7XCMYPoogxepp78fz1YRXTkCA2U781m9F/0n3sxT CHWEf85hyaOdxHLERv5k5veOaiyRMAcVuFYZwHTiRbaA2h91Bry2b/AlqkYJZ9HK zT5+3vHOIjEhuAytjgDeyYSyDVTYayeAhw/LqlvEi5lCy5bDwMBxzdIDSfVMX58I JNStlMZ9Y6znKDPSDKNbvbFKo62letLa0W6y9+AsPWNq/aYOE71B/aeMqXUcOKS9 qBRLuctA9U3lIOfTSd/WsE9/uTBgax6pY+Y0PwBbMj0Ajt4Rzzb4PtODWrf1+rWo ypNHP2Px0GVum3yNqV7oO6M4dQx4Cw38 -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:17 2025 by rpki-client