$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: hniYc2/f2rEt3tC1vCWPqn7feC40JPAV3gh1C4Uoh10= Subject key identifier: A4:F0:6C:BF:DD:13:29:1D:00:D1:25:76:34:D8:F2:6A:5A:6B:C1:E3 Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 0199 Signing time: Mon 03 Nov 2025 03:22:11 +0000 Manifest this update: Mon 03 Nov 2025 03:22:10 +0000 Manifest next update: Mon 10 Nov 2025 03:22:10 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: isVF2kQ3R979lr5lED9UnNxxgmAf1yDSdJuigqh4G7M=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Nov 3 03:22:10 2025 GMT Not After : Nov 10 03:22:10 2025 GMT Subject: CN=69081fe2-8118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:3c:14:e6:b8:04:bb:e8:83:79:14:9f:3c: bc:0e:86:04:e3:60:70:df:76:38:24:9d:8b:95:6d: 19:67:f9:ae:59:e2:db:2b:45:b6:7b:b0:89:6a:15: 6f:9c:9e:ab:f5:78:9b:ea:d1:49:f3:d7:4c:4b:28: a6:42:1c:2f:1b:6f:08:7c:45:03:4b:9d:89:e0:41: 8c:98:b1:5f:d7:2b:de:3b:a7:5e:56:a3:8f:6c:6f: 21:91:a5:18:d3:96:0c:46:e1:35:3c:81:98:cd:7a: b6:94:2f:de:91:5f:d8:79:43:1b:c7:3a:78:be:34: aa:0a:0d:b8:14:e1:a0:ae:d8:cc:c6:2c:06:1d:f1: 98:83:d2:dd:ff:29:e3:97:3e:da:f5:46:61:e1:79: e1:58:f3:bc:44:de:1d:3d:49:e0:ea:79:bc:a5:4e: 88:e3:f4:25:c1:b4:f8:73:62:dc:f9:de:50:ad:11: f1:ed:1b:62:6f:f7:ca:8a:f4:0e:33:ee:5d:7a:b2: d0:a4:b4:d4:d7:3c:d1:bc:39:c7:c8:8e:9c:70:9c: fb:8b:63:fa:21:98:11:64:6a:c1:83:a2:fc:9e:f4: 96:3f:c0:18:be:9f:d3:39:5a:a5:87:69:86:80:0e: ad:cc:11:42:a4:70:4f:55:39:d1:b9:6e:0a:2d:3c: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:6C:BF:DD:13:29:1D:00:D1:25:76:34:D8:F2:6A:5A:6B:C1:E3 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b2:8d:fb:4b:13:ac:c1:48:17:fb:46:04:75:e0:4d:f3:46: ed:fb:5f:29:db:5a:58:33:9c:2c:15:de:dd:f9:90:94:00:62: f1:e0:a6:9b:59:e7:f8:fc:22:54:12:f2:e8:e9:8a:23:e4:22: 96:6a:06:83:49:a4:da:4c:7b:2d:bb:84:d4:10:f4:fd:a9:90: fe:a8:29:6d:cd:2e:59:51:ee:c7:04:9b:6a:49:82:eb:11:3e: d3:9b:7d:c7:f0:16:c8:55:b0:4e:bc:dc:a5:72:70:a7:21:bb: fd:ce:68:cf:ae:ce:0b:2b:29:89:c4:3a:27:aa:62:a7:3e:23: df:fe:65:76:dc:35:a8:b3:e9:a7:39:e1:cf:cf:ab:ce:35:54: 3f:ba:95:6c:27:ec:8e:8c:ea:d3:45:2c:7a:d9:c0:89:3f:73: 97:cd:85:d5:9e:08:9b:56:89:48:7f:6c:d8:5f:17:de:ce:28: f6:74:35:b5:64:3c:c2:a5:f3:26:7f:aa:5a:5f:01:3a:9e:8e: d9:8a:2c:7d:c3:2b:68:74:7f:90:94:a1:10:d6:8f:18:53:d7: 46:d7:90:8d:79:e7:80:a1:46:26:f5:ac:5e:49:fe:30:d7:a0: 8d:15:85:ec:90:b2:91:62:21:21:e8:07:ac:a6:bb:3d:70:f4: 8e:e9:36:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUxMTAzMDMyMjEwWhcNMjUxMTEwMDMyMjEwWjAYMRYwFAYD VQQDEw02OTA4MWZlMi04MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnI8FOa4BLvog3kUnzy8DoYE42Bw33Y4JJ2LlW0ZZ/muWeLbK0W2e7CJahVv nJ6r9Xib6tFJ89dMSyimQhwvG28IfEUDS52J4EGMmLFf1yveO6deVqOPbG8hkaUY 05YMRuE1PIGYzXq2lC/ekV/YeUMbxzp4vjSqCg24FOGgrtjMxiwGHfGYg9Ld/ynj lz7a9UZh4XnhWPO8RN4dPUng6nm8pU6I4/QlwbT4c2Lc+d5QrRHx7Rtib/fKivQO M+5derLQpLTU1zzRvDnHyI6ccJz7i2P6IZgRZGrBg6L8nvSWP8AYvp/TOVqlh2mG gA6tzBFCpHBPVTnRuW4KLTweIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTwbL/d EykdANEldjTY8mpaa8HjMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDso37SxOswUgX+0YEdeBN80bt+18p21pYM5wsFd7d+ZCUAGLx4Kab Wef4/CJUEvLo6Yoj5CKWagaDSaTaTHstu4TUEPT9qZD+qCltzS5ZUe7HBJtqSYLr ET7Tm33H8BbIVbBOvNylcnCnIbv9zmjPrs4LKymJxDonqmKnPiPf/mV23DWos+mn OeHPz6vONVQ/upVsJ+yOjOrTRSx62cCJP3OXzYXVngibVolIf2zYXxfezij2dDW1 ZDzCpfMmf6paXwE6no7Ziix9wytodH+QlKEQ1o8YU9dG15CNeeeAoUYm9axeSf4w 16CNFYXskLKRYiEh6Aesprs9cPSO6TYB -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:20 2025 by rpki-client