$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json) Hash identifier: StxGwssS+mlC4CvwBuc5jo/mTlwdsb/bz42SD5lKTLU= Subject key identifier: 12:51:7E:DE:08:9F:CC:F9:B8:BD:D1:EF:B8:4D:C5:30:2F:F4:2A:52 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft Manifest number: 0B6C Signing time: Sun 02 Nov 2025 19:25:42 +0000 Manifest this update: Sun 02 Nov 2025 19:25:41 +0000 Manifest next update: Sun 09 Nov 2025 19:25:41 +0000 Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: 5jHWDUgSe+1fK8q5pGePbFr7A0ZXsDPs+PptmqlgsI0=) 2: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=) 3: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=) 4: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=) 5: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=) 6: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (hash: O6CTOo/y474PcGRnYH9PhaTd1EVdAvkFEsjawJ8wYQ0=) 7: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Nov 2 19:25:41 2025 GMT Not After : Nov 9 19:25:41 2025 GMT Subject: CN=6907b035-1948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:69:75:35:dc:29:6f:0e:d5:0f:b8:bb:df: ec:08:af:d2:1e:b0:f3:aa:8f:74:91:54:19:bc:ae: 35:b7:50:d4:38:8f:45:99:1a:49:cb:f1:36:19:3d: ff:c9:18:73:c0:d9:00:90:35:5b:9e:10:19:58:8a: b5:a9:17:d8:99:d8:c1:50:f8:09:44:f0:e9:1b:c0: 36:fc:f8:35:f6:43:d5:22:ff:83:13:b1:54:7f:f0: 76:97:74:c2:2e:64:54:b2:cb:0b:0c:eb:56:49:63: 92:e2:a4:c4:06:a6:12:17:6d:08:f8:63:1c:0e:50: a2:f0:70:e1:93:60:aa:29:b5:01:82:13:0c:02:fd: f1:db:72:f0:1d:1e:e4:8b:f4:17:53:f1:fc:df:4c: f4:86:fb:9a:25:bb:0d:99:9b:14:75:91:6f:77:67: 49:70:0e:b5:d8:e1:52:39:e6:80:7a:a4:3b:aa:d0: 21:59:bb:f0:2e:1d:20:1e:6e:a3:e9:b3:68:2c:89: f6:83:90:12:4b:47:a4:62:89:51:64:b7:f6:2e:d7: be:5a:50:b8:fd:19:d4:35:c3:ed:89:af:63:26:e2: 8a:23:ea:d0:2d:13:a6:ee:0e:ca:c6:ea:8f:b8:93: 83:64:9d:ad:a5:10:38:d0:74:e7:3b:d3:fb:86:ae: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:7E:DE:08:9F:CC:F9:B8:BD:D1:EF:B8:4D:C5:30:2F:F4:2A:52 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0f:47:00:f2:bb:6a:75:98:c3:5c:e7:af:34:57:05:7e:33: 16:aa:c1:cb:1d:12:26:74:84:28:17:3f:34:fa:1c:65:0e:2a: 4f:2e:1c:f1:96:33:8e:f4:e9:16:5a:4b:2e:27:0c:25:b6:7d: ad:dd:98:fa:3f:5a:dd:14:3c:6b:d2:37:95:57:bd:91:3e:6f: 16:e2:0e:9e:95:ed:c8:79:20:79:77:93:df:65:91:7b:bb:6d: 6a:b9:71:2f:72:71:d6:e9:48:58:e1:d5:d1:c0:bd:8a:54:ad: f4:07:63:89:ae:07:d0:c3:ce:f5:f8:7d:51:96:5c:ee:68:8b: b5:91:57:d5:ea:b3:5f:f9:84:54:31:7c:a0:36:02:ef:b1:6b: 39:d4:04:cb:25:46:f0:d6:e9:7e:ec:ef:35:fa:2b:35:99:cf: 10:df:ad:fc:ab:83:8f:dd:d5:69:58:ad:3c:c3:79:32:ca:96: 86:e9:3b:86:f8:4a:6b:74:63:1e:61:8c:d0:e3:f1:78:09:88: 67:6d:21:2e:a5:da:e8:05:3f:83:8c:f0:ea:f5:1c:c1:b7:47: a7:b2:9b:0e:b8:da:67:b5:25:be:9c:6b:af:67:ef:04:57:a1: c4:c3:7e:ff:05:a1:44:f7:09:fe:c3:92:19:41:e6:d8:9d:cd: 1c:23:6a:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUxMTAyMTkyNTQxWhcNMjUxMTA5MTkyNTQxWjAYMRYwFAYD VQQDEw02OTA3YjAzNS0xOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gdpdTXcKW8O1Q+4u9/sCK/SHrDzqo90kVQZvK41t1DUOI9FmRpJy/E2GT3/ yRhzwNkAkDVbnhAZWIq1qRfYmdjBUPgJRPDpG8A2/Pg19kPVIv+DE7FUf/B2l3TC LmRUsssLDOtWSWOS4qTEBqYSF20I+GMcDlCi8HDhk2CqKbUBghMMAv3x23LwHR7k i/QXU/H830z0hvuaJbsNmZsUdZFvd2dJcA612OFSOeaAeqQ7qtAhWbvwLh0gHm6j 6bNoLIn2g5ASS0ekYolRZLf2Lte+WlC4/RnUNcPtia9jJuKKI+rQLROm7g7KxuqP uJODZJ2tpRA40HTnO9P7hq40JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJRft4I n8z5uL3R77hNxTAv9CpSMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9EMUY2NEU3MjVFRUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hE Wm9NSXlhS2VGUUpjRGQtZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMD0cA8rtqdZjDXOevNFcFfjMWqsHLHRImdIQoFz80+hxlDipPLhzx ljOO9OkWWksuJwwltn2t3Zj6P1rdFDxr0jeVV72RPm8W4g6ele3IeSB5d5PfZZF7 u21quXEvcnHW6UhY4dXRwL2KVK30B2OJrgfQw871+H1RllzuaIu1kVfV6rNf+YRU MXygNgLvsWs51ATLJUbw1ul+7O81+is1mc8Q3638q4OP3dVpWK08w3kyypaG6TuG +EprdGMeYYzQ4/F4CYhnbSEupdroBT+DjPDq9RzBt0enspsOuNpntSW+nGuvZ+8E V6HEw37/BaFE9wn+w5IZQebYnc0cI2oe -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:49 2025 by rpki-client