$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: 9PFtFs+DS/Pvzx52m82QNpuITRdmC9tv+X6f6HrM9Zc= Subject key identifier: 6E:2D:9B:BA:A7:16:A1:8C:6A:07:CB:64:BD:B4:64:47:E0:BC:D8:74 Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 024D Signing time: Wed 05 Nov 2025 01:59:46 +0000 Manifest this update: Wed 05 Nov 2025 01:59:45 +0000 Manifest next update: Wed 12 Nov 2025 01:59:45 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: Jw7Y93z8tWR9Fp89bcU/ait2SC+XUw5l9bwaQ+7mFOU=) 2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: G5FR8BCzP4HgDtorWui6emF4F8xCXxAPeWvmEJB9XFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Nov 5 01:59:45 2025 GMT Not After : Nov 12 01:59:45 2025 GMT Subject: CN=690aaf92-2293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:58:a5:9b:b0:99:1b:8a:27:ad:85:92:a9: 07:58:52:f2:d6:6a:b8:7a:cd:6e:74:38:49:b1:30: 28:be:20:7d:33:55:3e:60:ea:5c:47:85:09:61:d0: 46:d0:63:16:a9:4c:94:56:ff:92:00:11:8c:d1:c7: ce:75:37:13:ae:16:02:9f:f2:a1:3e:fc:d6:91:09: f7:35:33:d6:79:1f:2f:d8:1f:2c:1a:c4:bc:31:69: c3:1d:9e:cd:55:ec:a5:68:92:19:19:da:37:81:a5: 44:be:25:de:12:2f:ef:6b:2e:77:9c:6b:1a:cc:c6: 72:80:e3:4e:8d:f8:41:38:bd:2d:26:ac:e3:3a:ae: 8a:31:84:87:0e:00:67:84:af:59:06:98:b9:c5:9b: b3:8e:e9:47:2a:9d:27:57:18:f9:73:7d:2d:16:b3: be:f9:e1:c7:4a:58:6e:78:8a:ef:0d:51:09:be:95: f7:ee:95:07:36:f8:15:87:4d:6d:a7:ae:5f:34:9e: 2c:c5:1d:40:93:ab:12:a8:3b:d2:6e:a6:c2:b2:be: 2f:24:c9:1d:ae:3a:81:9a:80:b6:7e:a8:59:0a:ce: a0:c2:58:46:71:99:cc:83:ac:93:1d:06:50:41:22: 48:ce:91:4b:0f:ba:8d:fc:60:0c:28:65:e5:cb:de: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:9B:BA:A7:16:A1:8C:6A:07:CB:64:BD:B4:64:47:E0:BC:D8:74 X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:15:e6:42:59:0d:fb:91:9e:d7:4e:ac:47:06:bd:44:72:38: f8:57:53:9b:82:74:c2:f0:44:b9:37:b4:eb:94:af:46:b2:0b: 12:6c:5e:7a:41:67:34:f5:a2:3d:5d:1a:fd:fa:21:b4:5d:5a: 27:18:48:36:2c:f5:a1:74:0a:50:9a:23:fa:a0:fc:42:68:a9: 69:95:bc:48:38:6a:6f:58:eb:c1:4f:58:06:94:ff:f9:b6:66: de:0e:94:16:be:a3:75:e5:db:eb:38:2f:4f:d4:9d:eb:1b:dc: 93:40:56:62:2a:a2:7f:9c:75:89:82:25:b3:1b:40:59:5e:97: f1:f8:6c:60:e1:e4:da:05:dd:16:09:35:61:a7:ff:09:5f:57: 37:a9:71:e0:62:10:e0:77:94:1b:ff:4c:c6:5c:24:43:24:74: 6d:d7:14:c6:b4:19:4c:c1:6b:67:3a:07:8d:62:44:79:82:ac: 2d:7e:50:81:2d:9f:e5:8e:f0:04:6b:01:f3:13:b4:24:8d:2a: 73:fb:f3:a1:12:47:ce:13:26:97:ed:70:08:a7:43:d3:50:0f: 74:4a:8a:8a:58:52:df:99:f3:45:59:51:8b:98:4c:6d:32:75: 4e:94:9e:38:9e:3f:13:a3:46:6d:f1:0b:93:24:76:b0:de:c4: db:a5:ee:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUxMTA1MDE1OTQ1WhcNMjUxMTEyMDE1OTQ1WjAYMRYwFAYD VQQDEw02OTBhYWY5Mi0yMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvpYpZuwmRuKJ62FkqkHWFLy1mq4es1udDhJsTAoviB9M1U+YOpcR4UJYdBG 0GMWqUyUVv+SABGM0cfOdTcTrhYCn/KhPvzWkQn3NTPWeR8v2B8sGsS8MWnDHZ7N VeylaJIZGdo3gaVEviXeEi/vay53nGsazMZygONOjfhBOL0tJqzjOq6KMYSHDgBn hK9ZBpi5xZuzjulHKp0nVxj5c30tFrO++eHHSlhueIrvDVEJvpX37pUHNvgVh01t p65fNJ4sxR1Ak6sSqDvSbqbCsr4vJMkdrjqBmoC2fqhZCs6gwlhGcZnMg6yTHQZQ QSJIzpFLD7qN/GAMKGXly96iJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4tm7qn FqGMagfLZL20ZEfgvNh0MB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoFeZCWQ37kZ7XTqxHBr1Ecjj4V1ObgnTC8ES5N7TrlK9GsgsSbF56 QWc09aI9XRr9+iG0XVonGEg2LPWhdApQmiP6oPxCaKlplbxIOGpvWOvBT1gGlP/5 tmbeDpQWvqN15dvrOC9P1J3rG9yTQFZiKqJ/nHWJgiWzG0BZXpfx+Gxg4eTaBd0W CTVhp/8JX1c3qXHgYhDgd5Qb/0zGXCRDJHRt1xTGtBlMwWtnOgeNYkR5gqwtflCB LZ/ljvAEawHzE7QkjSpz+/OhEkfOEyaX7XAIp0PTUA90SoqKWFLfmfNFWVGLmExt MnVOlJ44nj8To0Zt8QuTJHaw3sTbpe4a -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:40 2025 by rpki-client