$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: QG7uhwR3B20dFu40qjgs/+ITcvEjMazRcdeTGn7MQTk= Subject key identifier: F0:B5:98:60:5C:97:4C:41:80:C6:E9:54:46:DD:35:3A:49:B0:C7:B5 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 34CB Signing time: Mon 20 Oct 2025 15:19:46 +0000 Manifest this update: Mon 20 Oct 2025 15:19:46 +0000 Manifest next update: Mon 27 Oct 2025 15:19:46 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: PIH/UHxIVY5bwT2JVJYP4A5lyzxxcT3iXnA7iyrDgec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Oct 20 15:19:46 2025 GMT Not After : Oct 27 15:19:46 2025 GMT Subject: CN=68f65312-cd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:a5:32:f7:7e:16:08:f7:14:77:59:e2:ab: fd:68:06:e4:7f:61:04:a5:3d:aa:65:5c:82:6b:3d: 3b:27:da:83:68:ed:d3:c6:21:90:95:88:83:2c:18: 40:7f:1f:da:98:61:e2:e1:5e:d5:22:d5:e3:c3:96: 2b:2c:07:f5:eb:82:74:b0:0e:89:87:ad:46:83:b9: 84:e1:df:b7:35:91:e6:bf:5d:6c:67:a5:14:eb:a5: 5a:b8:96:1d:ee:1a:6b:ed:19:15:fa:bb:b8:66:50: 9f:34:18:cb:34:37:98:f9:15:9c:d7:1b:56:29:40: ea:11:c5:de:b8:57:3d:c7:5a:04:78:e7:4b:e8:99: f9:14:a0:1f:b3:c3:89:0b:78:65:50:08:11:6a:dc: ac:15:a9:1f:76:67:29:7b:1e:36:7b:0d:90:e5:11: 40:f5:1c:38:e0:a6:03:50:a0:16:08:cc:c9:42:1c: 7c:ce:04:dc:33:4a:25:8d:e4:02:0a:ce:cb:13:92: d8:a4:2a:80:33:23:e1:31:d9:5a:b1:92:d1:4d:20: 7e:fb:eb:e6:0a:c7:ec:03:42:b0:67:4e:0e:5f:0f: de:44:f7:03:e4:25:f8:fc:c4:3e:07:7e:ed:19:48: 67:53:6d:b6:84:eb:b3:06:17:70:15:c3:5c:6e:82: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B5:98:60:5C:97:4C:41:80:C6:E9:54:46:DD:35:3A:49:B0:C7:B5 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:d8:1d:33:40:d5:6d:0f:93:c4:ab:75:ab:74:78:b0:3c: d1:9f:28:de:91:37:e8:56:c5:f2:3c:0c:80:38:3d:2d:5d:d9: 38:43:34:04:19:45:b7:cc:41:ac:62:4f:b9:11:4f:dd:81:25: a5:16:9b:6b:4d:cc:65:c4:53:20:b9:83:50:43:e3:93:ef:d5: 2d:8a:e6:8e:7e:a0:f8:15:81:1b:a7:b2:43:72:fd:33:6b:00: c0:cf:65:60:c0:8d:79:51:24:f2:6a:88:5a:e4:97:60:52:0f: 1c:53:bb:67:9c:f7:75:5e:e8:c1:c4:55:86:c9:86:da:5c:cb: 77:3e:81:98:ba:d5:5c:d9:95:67:6c:45:e2:3e:73:97:32:43: 16:ae:23:bd:f4:4c:04:cf:c7:e3:8f:d0:ee:2d:62:7f:f1:32: d5:f8:e0:44:ff:32:60:8b:2b:62:d8:2b:b0:a6:4e:b6:99:ef: ee:9b:f4:1e:c6:10:b8:8a:1e:12:3d:3d:57:48:d9:67:7b:8b: 73:91:11:96:19:85:f9:6a:ff:7f:d3:25:55:b4:47:50:d0:43: 98:62:9c:fb:a6:a2:37:7d:02:48:be:ff:d9:b0:a5:02:92:d6: a9:50:ce:b2:24:3d:66:f2:64:cc:ed:25:eb:9a:d1:7f:fd:be: 3d:6f:e5:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjUxMDIwMTUxOTQ2WhcNMjUxMDI3MTUxOTQ2WjAYMRYwFAYD VQQDEw02OGY2NTMxMi1jZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8KlMvd+Fgj3FHdZ4qv9aAbkf2EEpT2qZVyCaz07J9qDaO3TxiGQlYiDLBhA fx/amGHi4V7VItXjw5YrLAf164J0sA6Jh61Gg7mE4d+3NZHmv11sZ6UU66VauJYd 7hpr7RkV+ru4ZlCfNBjLNDeY+RWc1xtWKUDqEcXeuFc9x1oEeOdL6Jn5FKAfs8OJ C3hlUAgRatysFakfdmcpex42ew2Q5RFA9Rw44KYDUKAWCMzJQhx8zgTcM0oljeQC Cs7LE5LYpCqAMyPhMdlasZLRTSB+++vmCsfsA0KwZ04OXw/eRPcD5CX4/MQ+B37t GUhnU222hOuzBhdwFcNcboKJzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC1mGBc l0xBgMbpVEbdNTpJsMe1MB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCklNgdM0DVbQ+TxKt1q3R4sDzRnyjekTfoVsXyPAyAOD0tXdk4QzQE GUW3zEGsYk+5EU/dgSWlFptrTcxlxFMguYNQQ+OT79UtiuaOfqD4FYEbp7JDcv0z awDAz2VgwI15USTyaoha5JdgUg8cU7tnnPd1XujBxFWGyYbaXMt3PoGYutVc2ZVn bEXiPnOXMkMWriO99EwEz8fjj9DuLWJ/8TLV+OBE/zJgiyti2Cuwpk62me/um/Qe xhC4ih4SPT1XSNlne4tzkRGWGYX5av9/0yVVtEdQ0EOYYpz7pqI3fQJIvv/ZsKUC ktapUM6yJD1m8mTM7SXrmtF//b49b+UF -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:30 2025 by rpki-client