$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json) Hash identifier: IzJEslAfFPAt0AXYy8gHwYOMgZCEixz0Er62thoGLCY= Subject key identifier: C7:FB:A9:BE:70:D1:AE:C9:FD:3E:F2:74:97:5E:AB:09:4B:36:CF:94 Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft Manifest number: 04BF Signing time: Sun 19 Oct 2025 01:41:18 +0000 Manifest this update: Sun 19 Oct 2025 01:41:17 +0000 Manifest next update: Sun 26 Oct 2025 01:41:17 +0000 Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: oOpky67Y/zqo2hYbXJOWCq+5RcMK8h+vMRMgnUr98GU=) 2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: mciOFoWN4OGu4gy01Ach9NNCm4o/f8zqGbHO8EJqoLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: Oct 19 01:41:17 2025 GMT Not After : Oct 26 01:41:17 2025 GMT Subject: CN=68f441be-3d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:1c:47:29:65:aa:b8:9d:b3:b3:da:1b:74: 19:e6:65:b1:f7:9d:2a:16:1f:63:51:48:b2:00:e5: f0:4c:ec:53:b4:bf:48:0b:b2:d3:5e:0a:74:e3:26: ef:b1:33:75:8d:73:dc:56:af:97:52:ed:dd:aa:c1: 82:bc:c7:7e:6f:98:bb:93:8c:ea:46:a7:29:73:3c: 5e:1b:0e:9e:15:b2:d3:cb:e5:5d:00:ca:2a:47:4f: d2:f6:fc:c1:74:9c:04:74:2e:0d:62:e7:6b:3c:1a: da:91:80:5f:63:b6:94:c3:0e:8b:40:9d:94:4c:8c: fd:90:72:e0:eb:fc:ec:1d:5a:02:4f:46:3b:46:9a: 28:4d:ab:b2:d7:47:fc:80:1a:5b:6e:6f:21:de:23: a2:bb:69:54:d0:f4:c2:42:fc:aa:2c:dd:fc:90:9d: f9:91:9e:57:89:85:dd:b7:d1:98:0c:cd:6c:ba:7e: 72:3d:fc:37:3b:68:94:64:f0:bf:66:06:79:19:19: c8:bc:a7:a9:89:5a:80:2a:3f:79:a8:18:42:05:8f: fc:5d:2d:46:3e:f3:c0:b6:08:39:b9:6d:4c:af:54: 4d:ff:2a:fd:0b:fe:c6:2e:f6:69:8c:9e:ea:56:82: 3b:cd:be:bd:1e:9d:63:5d:3e:bf:bd:7a:da:b9:05: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:A9:BE:70:D1:AE:C9:FD:3E:F2:74:97:5E:AB:09:4B:36:CF:94 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4a:50:fe:0a:44:f2:b1:f6:24:2a:e8:43:c9:1b:a7:fe:b2: 5c:52:8d:3c:55:db:06:12:89:8e:29:5f:e6:12:9d:56:d3:46: 38:2f:5c:b9:c8:c8:b9:c5:b0:77:48:10:f6:70:c9:d6:c1:11: 19:b5:6a:46:a2:fb:84:44:66:3d:67:fe:f7:c2:bc:24:4f:80: 1b:21:7c:6a:07:dd:cf:30:12:3f:8f:05:31:81:32:a7:69:c4: 06:fe:2a:7f:19:da:a7:89:39:16:d3:30:28:85:be:8f:c4:90: 31:0e:de:c2:ed:b4:9f:da:e4:ab:f3:1d:bc:dd:22:39:8f:1f: 28:97:ff:2b:d3:2b:c3:c3:92:37:97:22:43:ec:7e:3b:7c:fb: b1:62:a0:86:67:f7:fe:95:61:7a:0a:67:79:25:2f:16:b3:fb: 93:46:58:2e:5d:95:00:c3:41:32:ad:11:5e:da:2d:29:63:f7: 7e:12:5b:4f:8c:a3:25:79:13:31:1b:a9:1f:d5:89:f7:b4:07: 01:a3:db:91:1d:df:80:35:f6:25:5a:13:c2:74:10:f2:53:84: 15:8e:30:e0:f1:03:05:97:c3:2c:8d:64:19:96:73:18:bb:07: b7:03:a2:a4:c6:d6:d5:96:5e:62:04:e3:44:e6:c5:7f:1d:1c: 5b:5d:41:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUxMDE5MDE0MTE3WhcNMjUxMDI2MDE0MTE3WjAYMRYwFAYD VQQDEw02OGY0NDFiZS0zZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwUcRyllqrids7PaG3QZ5mWx950qFh9jUUiyAOXwTOxTtL9IC7LTXgp04ybv sTN1jXPcVq+XUu3dqsGCvMd+b5i7k4zqRqcpczxeGw6eFbLTy+VdAMoqR0/S9vzB dJwEdC4NYudrPBrakYBfY7aUww6LQJ2UTIz9kHLg6/zsHVoCT0Y7RpooTauy10f8 gBpbbm8h3iOiu2lU0PTCQvyqLN38kJ35kZ5XiYXdt9GYDM1sun5yPfw3O2iUZPC/ ZgZ5GRnIvKepiVqAKj95qBhCBY/8XS1GPvPAtgg5uW1Mr1RN/yr9C/7GLvZpjJ7q VoI7zb69Hp1jXT6/vXrauQVc4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf7qb5w 0a7J/T7ydJdeqwlLNs+UMB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t RlJiaURDNDNOUGhVQnVja1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApSlD+CkTysfYkKuhDyRun/rJcUo08VdsGEomOKV/mEp1W00Y4L1y5 yMi5xbB3SBD2cMnWwREZtWpGovuERGY9Z/73wrwkT4AbIXxqB93PMBI/jwUxgTKn acQG/ip/GdqniTkW0zAohb6PxJAxDt7C7bSf2uSr8x283SI5jx8ol/8r0yvDw5I3 lyJD7H47fPuxYqCGZ/f+lWF6Cmd5JS8Ws/uTRlguXZUAw0EyrRFe2i0pY/d+EltP jKMleRMxG6kf1Yn3tAcBo9uRHd+ANfYlWhPCdBDyU4QVjjDg8QMFl8MsjWQZlnMY uwe3A6KkxtbVll5iBONE5sV/HRxbXUFM -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:25 2025 by rpki-client