$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: cQDaZMH3VtB2Mk8AY8fCJ6Y6ogeRTPNGk4dp1OqIduo= Subject key identifier: A5:2F:98:B5:30:89:31:03:3B:E6:B2:08:17:DB:72:36:84:5C:0E:8F Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: 0219 Signing time: Mon 03 Nov 2025 02:29:38 +0000 Manifest this update: Mon 03 Nov 2025 02:29:38 +0000 Manifest next update: Mon 10 Nov 2025 02:29:38 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: ZfvR8jm54Hex2Abi7NB/V5bU40vBv/gDXf8eyGLe938=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=) 4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 531eC6P1epXQqATQkPS1k/QZSAZVi7XE0wwzhV1HGkw=) 5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=) 6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Nov 3 02:29:38 2025 GMT Not After : Nov 10 02:29:38 2025 GMT Subject: CN=69081392-83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:2e:90:e9:08:21:f4:ad:dd:b7:cc:a4:20: df:46:b3:bf:a6:61:5a:8a:10:1d:be:86:f6:5d:38: fa:8f:ca:a3:7a:da:b4:a7:af:14:63:41:95:a1:d9: eb:db:2c:fc:5c:c0:2c:fb:37:3a:43:76:c4:bf:eb: c0:33:c6:f1:18:32:a3:c3:f3:3b:d2:82:b7:fc:fb: 5d:92:27:dd:ad:76:1e:12:b1:84:68:8a:21:dd:63: e6:68:77:77:da:f5:3c:03:f7:dc:75:72:04:35:1f: c9:ad:b9:4a:64:c6:33:3e:1c:de:70:50:dd:64:b8: 59:ab:20:be:b9:33:f2:1b:37:4c:09:b2:69:e0:84: c9:50:9d:7f:8f:37:c9:b1:a4:1f:cf:df:fa:f0:38: 54:91:eb:44:40:c6:84:7c:37:20:18:38:01:10:32: 83:76:b0:3e:2b:34:74:4a:85:f3:6f:ba:80:16:6a: ff:59:46:e5:4a:d5:9a:f2:f4:ac:ae:3d:be:ea:cf: 65:c5:b3:40:00:1e:9e:8e:99:99:24:62:25:96:da: 55:0f:02:63:8d:bf:24:7b:4d:78:e3:c4:1f:78:46: ab:40:0c:ba:7a:d8:b7:f1:52:65:97:d7:75:94:a5: 5a:9b:92:9e:17:99:f7:b0:8f:94:ea:6e:af:4e:09: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:98:B5:30:89:31:03:3B:E6:B2:08:17:DB:72:36:84:5C:0E:8F X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:af:15:40:0f:ae:2d:3b:c7:68:aa:62:75:90:cc:49:24:8a: 05:e1:f7:88:dc:72:7d:b3:2a:11:a1:e5:e4:9d:d2:b7:cf:d9: f1:c5:ca:3b:14:f5:5d:da:22:8d:cf:70:34:f7:6e:72:12:05: 96:41:91:72:5b:13:26:ee:81:73:8c:ea:fb:3a:96:ce:b8:b2: 2b:16:60:ef:87:b6:42:ce:4f:e9:10:12:c9:dc:5e:79:01:04: 90:7b:2e:aa:09:62:21:d0:8c:6a:f9:bd:bf:18:83:b5:77:b9: 6b:c7:99:07:2a:75:0d:e8:a5:31:51:48:d4:03:2c:6b:62:b4: e0:09:e7:28:cc:c2:9a:40:90:df:e7:44:b9:b4:ed:dc:95:89: 4f:b9:61:60:65:b1:69:cb:83:d4:4b:23:66:32:46:88:23:b1: f1:c9:e0:3e:10:57:9c:35:38:1a:f0:ba:25:03:8a:6d:71:ca: ca:f9:e6:e8:74:d8:a6:7c:07:78:05:78:26:71:78:a8:24:b4: 18:06:04:da:74:c4:89:90:3b:a0:2c:0e:d4:59:e7:c3:02:cb: 75:92:e2:73:94:58:ac:74:d4:b7:87:d1:39:b1:70:74:b7:b8: 52:45:2f:14:bc:cf:d3:89:fc:47:9f:81:97:c8:a6:48:3e:47: 35:d1:f5:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUxMTAzMDIyOTM4WhcNMjUxMTEwMDIyOTM4WjAYMRYwFAYD VQQDEw02OTA4MTM5Mi04M2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJcukOkIIfSt3bfMpCDfRrO/pmFaihAdvob2XTj6j8qjetq0p68UY0GVodnr 2yz8XMAs+zc6Q3bEv+vAM8bxGDKjw/M70oK3/PtdkifdrXYeErGEaIoh3WPmaHd3 2vU8A/fcdXIENR/JrblKZMYzPhzecFDdZLhZqyC+uTPyGzdMCbJp4ITJUJ1/jzfJ saQfz9/68DhUketEQMaEfDcgGDgBEDKDdrA+KzR0SoXzb7qAFmr/WUblStWa8vSs rj2+6s9lxbNAAB6ejpmZJGIlltpVDwJjjb8ke01448QfeEarQAy6eti38VJll9d1 lKVam5KeF5n3sI+U6m6vTgk34QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUvmLUw iTEDO+ayCBfbcjaEXA6PMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQrxVAD64tO8doqmJ1kMxJJIoF4feI3HJ9syoRoeXkndK3z9nxxco7 FPVd2iKNz3A0925yEgWWQZFyWxMm7oFzjOr7OpbOuLIrFmDvh7ZCzk/pEBLJ3F55 AQSQey6qCWIh0Ixq+b2/GIO1d7lrx5kHKnUN6KUxUUjUAyxrYrTgCecozMKaQJDf 50S5tO3clYlPuWFgZbFpy4PUSyNmMkaII7HxyeA+EFecNTga8LolA4ptccrK+ebo dNimfAd4BXgmcXioJLQYBgTadMSJkDugLA7UWefDAst1kuJzlFisdNS3h9E5sXB0 t7hSRS8UvM/TifxHn4GXyKZIPkc10fVR -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:13 2025 by rpki-client