$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: NG4ebpvsfk2jB8TEoxIapGUB9S/mZCPETwRs8NIb55s= Subject key identifier: 87:D2:CA:F2:A5:A9:7F:FC:2F:E5:50:60:2E:18:AB:7A:CE:5F:CE:FF Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 5C Signing time: Mon 03 Nov 2025 07:08:50 +0000 Manifest this update: Mon 03 Nov 2025 07:08:50 +0000 Manifest next update: Mon 10 Nov 2025 07:08:50 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: XYQeR+iI8CRlbx+TVvBMk6F/XepYZejKvuvSW6xhKiE=) 2: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 4: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 7: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc=) 8: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Nov 3 07:08:50 2025 GMT Not After : Nov 10 07:08:50 2025 GMT Subject: CN=69085502-69c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:61:bb:96:25:a2:28:a9:e1:a3:38:83:c5: 71:dd:70:d1:de:fb:e6:15:85:b1:a8:a9:f9:32:1a: ef:64:08:31:47:ea:1d:c1:ca:37:da:cf:00:28:fa: f6:ff:b9:5a:92:11:cb:37:90:f3:7f:9a:cb:0d:29: c1:3f:fe:72:6e:8f:27:0c:3f:01:46:ff:35:ea:72: 29:7b:02:60:fa:75:3c:dc:3b:10:4d:3e:f0:30:a2: eb:76:fa:49:e3:f9:b6:6f:33:1e:6e:be:10:dc:19: eb:e8:1f:e4:2b:53:9a:e8:5c:9a:1b:69:d1:a8:53: 55:fe:12:3c:45:61:14:20:52:b1:4a:0d:06:f8:6c: 9b:ca:9c:bd:68:4e:c5:1a:66:1c:d5:71:94:04:ef: bb:93:0d:15:17:24:a3:16:b3:52:53:88:8a:1e:38: 49:48:0a:09:84:e7:b8:3d:01:c7:55:7f:4a:30:c7: 38:36:75:f0:06:d7:07:5d:a1:6d:8b:ce:26:93:f3: 57:bd:2b:3c:98:2b:ac:9a:85:28:35:50:98:37:25: 52:61:0e:90:d6:49:c2:a2:e1:02:5e:b6:1c:b8:13: ae:41:3c:68:95:5e:3a:92:de:36:07:c1:c6:d9:b8: 51:43:c5:93:9f:4e:1e:61:bf:e0:a0:05:bc:0d:ee: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:CA:F2:A5:A9:7F:FC:2F:E5:50:60:2E:18:AB:7A:CE:5F:CE:FF X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:21:c0:47:7f:eb:4e:ab:3c:c5:57:89:c2:5e:62:72:23:04: f6:a5:16:e0:75:65:2d:18:fd:4f:04:14:8b:51:93:ec:13:5c: cb:ad:3e:c0:ff:d4:fd:78:1e:13:ee:bc:c0:24:45:d6:b1:8c: 33:6e:48:eb:d0:fa:20:fc:34:e7:07:6e:4b:22:86:84:86:56: 6a:a8:83:d6:33:38:ed:7f:95:e7:92:95:5c:50:45:68:d5:b1: 8e:11:b9:75:39:ae:94:99:a2:11:c9:2c:39:5b:97:74:73:ff: 67:61:4f:ca:24:60:12:34:69:31:ff:bd:cd:49:1e:50:ce:3a: 1f:69:b6:5a:60:7e:6e:36:78:06:5f:5a:15:29:22:ed:9c:30: c7:05:b6:53:c9:26:9e:98:38:ee:ce:9a:57:69:57:a8:8e:9f: 53:c3:2b:18:be:c8:3e:85:43:a4:a9:02:8c:df:c0:fa:89:e8: 7d:2c:56:bc:7b:76:dc:96:9a:92:f6:35:4a:f3:84:43:6c:12: f4:8b:17:9f:8c:36:85:d7:a0:e1:7d:e2:b0:0d:15:c6:4e:ac: bc:0b:ea:fa:91:c6:bc:10:57:ab:cc:16:97:08:fe:8e:35:00: e1:aa:0d:26:dc:a1:8b:f6:10:8a:35:d1:6d:98:27:45:46:63: f0:ab:f8:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTExMDMwNzA4NTBaFw0yNTExMTAwNzA4NTBaMBgxFjAUBgNV BAMTDTY5MDg1NTAyLTY5YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzHGG7liWiKKnhoziDxXHdcNHe++YVhbGoqfkyGu9kCDFH6h3ByjfazwAo+vb/ uVqSEcs3kPN/mssNKcE//nJujycMPwFG/zXqcil7AmD6dTzcOxBNPvAwout2+knj +bZvMx5uvhDcGevoH+QrU5roXJobadGoU1X+EjxFYRQgUrFKDQb4bJvKnL1oTsUa ZhzVcZQE77uTDRUXJKMWs1JTiIoeOElICgmE57g9AcdVf0owxzg2dfAG1wddoW2L ziaT81e9KzyYK6yahSg1UJg3JVJhDpDWScKi4QJethy4E65BPGiVXjqS3jYHwcbZ uFFDxZOfTh5hv+CgBbwN7gw/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh9LK8qWp f/wv5VBgLhires5fzv8wHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RkM5LzhEMzVFODJFMzAyQzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlY akhzSkZJaTFMTDM1SVJBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwhwEd/606rPMVXicJeYnIjBPalFuB1ZS0Y/U8EFItRk+wTXMutPsD/ 1P14HhPuvMAkRdaxjDNuSOvQ+iD8NOcHbksihoSGVmqog9YzOO1/leeSlVxQRWjV sY4RuXU5rpSZohHJLDlbl3Rz/2dhT8okYBI0aTH/vc1JHlDOOh9ptlpgfm42eAZf WhUpIu2cMMcFtlPJJp6YOO7OmldpV6iOn1PDKxi+yD6FQ6SpAozfwPqJ6H0sVrx7 dtyWmpL2NUrzhENsEvSLF5+MNoXXoOF94rANFcZOrLwL6vqRxrwQV6vMFpcI/o41 AOGqDSbcoYv2EIo10W2YJ0VGY/Cr+Go= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:03 2025 by rpki-client