$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json) Hash identifier: uer8ZRgstJIhXC5ujGqajP0C8yKCxTlBdmSJo70eBFA= Subject key identifier: 3E:E8:4C:01:36:3C:08:2C:71:1D:AF:45:C2:9B:91:1C:0D:28:E8:E6 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft Manifest number: 0213 Signing time: Wed 05 Nov 2025 02:27:30 +0000 Manifest this update: Wed 05 Nov 2025 02:27:30 +0000 Manifest next update: Wed 12 Nov 2025 02:27:30 +0000 Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: B7U8CYsWSi7OTsGwpGAQGywlciBq2gZOFotURNXQhJk=) 2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: W0QjuNMkR2tH07pxncoFfLsVRRNFM7JZ6iVRcm37NHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Nov 5 02:27:30 2025 GMT Not After : Nov 12 02:27:30 2025 GMT Subject: CN=690ab612-72ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:59:14:30:22:72:3b:bd:99:af:d0:44:17: da:4c:2e:63:9f:fe:46:31:b9:24:09:2d:98:a6:1b: 3c:46:0a:32:72:62:bb:cb:8d:c9:7b:7b:52:54:a5: fe:ad:30:ab:84:38:59:c2:dd:b0:64:e2:02:55:5a: f4:d8:04:23:e6:b5:67:a4:b6:54:61:93:bd:fa:de: 78:b3:02:5b:b6:e3:e4:ae:e2:ae:92:73:dd:8e:b0: af:08:75:63:fe:91:b6:30:3d:4c:12:2f:47:4a:b4: 54:f3:50:b9:ce:48:97:0b:93:1b:37:25:76:4d:19: 66:8e:ce:ac:da:21:70:b2:32:57:63:71:95:52:98: b9:21:5c:75:ae:09:ae:47:3e:22:89:1b:ae:ea:f8: a6:ea:98:e7:c4:79:63:b4:7c:ad:89:e2:f2:ae:c4: 82:02:dd:7e:a1:a4:2e:11:fb:0b:f0:ab:bf:05:0e: d1:8e:18:44:0d:34:f4:81:4f:73:21:9b:4e:75:aa: f0:be:e6:c6:a7:8d:89:d9:8c:f8:b0:7b:b8:81:26: 90:8a:27:2e:05:bc:cf:88:22:9e:66:03:e9:84:c5: 33:45:51:d6:38:c4:a3:f0:46:bb:00:f7:ee:65:e9: 1a:1c:d8:d1:99:26:ef:ca:f7:8e:2f:08:39:ad:44: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:4C:01:36:3C:08:2C:71:1D:AF:45:C2:9B:91:1C:0D:28:E8:E6 X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:e8:63:e3:b8:d9:b2:84:61:6f:63:21:b0:a0:80:3a:68: e6:5b:c5:fc:80:d1:f9:99:cf:3a:1a:ed:47:ff:cd:11:ed:f5: 01:9a:72:2a:aa:37:d7:7d:59:37:0d:7d:7e:d0:95:60:0a:87: a5:d5:cc:8e:6a:d3:24:8d:71:85:8b:bc:27:79:b7:c3:26:0f: f5:4b:f0:3a:b5:e0:1f:73:a8:2d:c2:0d:05:1c:40:0c:00:e9: e8:41:2e:de:a3:1f:96:00:d9:4d:13:11:79:42:5e:76:a5:b1: a8:fb:25:1b:a4:c8:f6:82:7e:35:f5:fc:ab:c4:7f:f6:8f:5c: e8:1c:a0:05:6b:eb:7c:40:9a:59:f2:c4:fe:4b:d1:95:a4:08: 62:b6:a1:d7:9d:52:65:af:1f:a5:98:a1:0d:f6:9c:8c:4b:cb: 5a:30:3a:4f:fe:9f:36:51:2f:b5:16:05:d5:31:be:ca:aa:7f: 7c:95:8c:9f:0f:b3:f6:e6:c9:5c:04:0e:9a:97:91:5c:e2:d5: 3c:99:3a:8d:7a:a7:1d:bc:cf:1c:16:6d:d9:92:21:8f:09:3d: 58:85:19:71:18:8b:19:b1:2b:f6:5b:e6:ae:aa:e6:f7:12:d2: e1:a8:e7:45:30:ea:d6:79:2e:96:b7:58:a3:31:52:18:58:a6: 64:b4:f1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjUxMTA1MDIyNzMwWhcNMjUxMTEyMDIyNzMwWjAYMRYwFAYD VQQDEw02OTBhYjYxMi03MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulFZFDAicju9ma/QRBfaTC5jn/5GMbkkCS2Yphs8RgoycmK7y43Je3tSVKX+ rTCrhDhZwt2wZOICVVr02AQj5rVnpLZUYZO9+t54swJbtuPkruKuknPdjrCvCHVj /pG2MD1MEi9HSrRU81C5zkiXC5MbNyV2TRlmjs6s2iFwsjJXY3GVUpi5IVx1rgmu Rz4iiRuu6vim6pjnxHljtHytieLyrsSCAt1+oaQuEfsL8Ku/BQ7RjhhEDTT0gU9z IZtOdarwvubGp42J2Yz4sHu4gSaQiicuBbzPiCKeZgPphMUzRVHWOMSj8Ea7APfu ZekaHNjRmSbvyveOLwg5rUQyiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7oTAE2 PAgscR2vRcKbkRwNKOjmMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwRS8wMDA4M0ZBQzlENTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3 bUhKSFM1QndaakJITzIzbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCnOhj47jZsoRhb2MhsKCAOmjmW8X8gNH5mc86Gu1H/80R7fUBmnIq qjfXfVk3DX1+0JVgCoel1cyOatMkjXGFi7wnebfDJg/1S/A6teAfc6gtwg0FHEAM AOnoQS7eox+WANlNExF5Ql52pbGo+yUbpMj2gn419fyrxH/2j1zoHKAFa+t8QJpZ 8sT+S9GVpAhitqHXnVJlrx+lmKEN9pyMS8taMDpP/p82US+1FgXVMb7Kqn98lYyf D7P25slcBA6al5Fc4tU8mTqNeqcdvM8cFm3ZkiGPCT1YhRlxGIsZsSv2W+auqub3 EtLhqOdFMOrWeS6Wt1ijMVIYWKZktPFj -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:13 2025 by rpki-client