$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: TATBY6+eqrujKxxLUYpOgigAqkCVSkk9lSpdLnL43zU= Subject key identifier: 99:8E:81:B7:7C:D0:41:1F:27:D4:FF:32:75:BF:EC:7A:64:41:A8:AA Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: C7 Signing time: Wed 05 Nov 2025 04:35:33 +0000 Manifest this update: Wed 05 Nov 2025 04:35:33 +0000 Manifest next update: Wed 12 Nov 2025 04:35:33 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: H9yf//fGGmP+tNZ8GhWpJ8eIFaWVFU9pslTUbDEGl08=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Nov 5 04:35:33 2025 GMT Not After : Nov 12 04:35:33 2025 GMT Subject: CN=690ad415-823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:a4:96:e3:20:f1:48:e2:82:ca:fb:0f:85: 7a:54:d0:d8:20:ee:df:92:35:72:3a:fc:13:a9:94: fe:7b:3e:45:5d:15:14:b1:97:50:85:c9:ce:3b:5b: b6:93:e0:65:a4:f5:96:e9:65:61:28:d3:ba:b4:93: b1:69:ce:3c:59:81:f8:94:fb:ed:4e:25:8c:a4:5b: 18:c4:72:7c:42:26:46:2e:06:b4:fb:cb:18:66:ba: 2e:0a:3d:a2:a4:25:8c:90:63:c1:74:de:a9:c7:01: f5:c7:7b:20:2e:36:45:7f:c1:c5:d5:a6:2e:6d:97: b2:74:28:ef:6c:e9:ac:b4:31:b3:f3:d7:36:a5:96: b5:f6:72:52:95:e5:86:13:1b:2d:7a:12:1c:d5:f0: 10:4c:17:cb:64:db:26:c8:72:5e:be:0d:b7:90:ea: 80:5b:01:74:9e:d2:4b:6c:ea:a4:d2:5c:77:da:c4: 1c:3c:c2:ee:43:20:44:8d:2d:00:cd:fa:e4:99:d9: ec:1d:2b:77:20:2a:d7:ba:20:14:85:e1:ac:a6:45: 1a:6a:66:f4:cf:6f:62:55:56:9d:f9:69:33:83:d5: 00:c8:11:70:d3:e5:cd:2d:04:70:43:18:83:a3:2e: 2d:09:94:02:ec:c4:86:20:05:36:74:02:50:3f:2e: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:81:B7:7C:D0:41:1F:27:D4:FF:32:75:BF:EC:7A:64:41:A8:AA X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a9:e7:5d:22:b7:4e:c8:95:20:18:99:99:31:df:41:c8:d0: cb:30:a5:6b:f7:01:7a:f1:3b:0e:4b:94:5b:f2:be:8a:f7:85: a7:8b:87:49:49:94:7f:58:12:07:33:87:c5:60:51:fb:dd:dc: 88:a3:63:67:c2:42:af:3f:30:9e:ad:52:59:47:90:7b:cc:56: de:90:84:2d:35:13:45:a8:83:18:bc:f2:4f:4c:f6:06:32:ce: f0:cd:13:46:93:4a:16:3b:5d:2d:06:5b:fe:db:12:99:ea:7b: f1:21:cb:b9:3f:92:ed:e0:78:86:32:da:6e:79:31:21:30:71: a8:cd:cf:c9:4e:3c:8f:ce:09:a1:c2:b3:5c:9e:5a:9a:d5:48: 2c:13:d6:21:bd:44:93:d8:eb:50:f1:a4:f4:e4:78:22:c2:b5: 60:33:6e:01:58:72:99:b7:cd:e6:de:c2:a2:f2:75:7e:e6:d7: 44:c2:c5:1e:99:8a:16:3d:4d:a2:63:2a:9f:3c:49:04:b1:43: 64:aa:41:2c:a6:72:18:e9:9d:e1:64:a2:ac:67:ab:1d:8d:74: 01:c5:2d:0f:96:b0:11:5f:f2:68:e6:50:a7:29:03:27:1c:0e: 9b:16:cb:ad:7f:69:86:d7:d4:32:7b:6b:54:e1:b5:e2:d6:b2: f8:a4:7c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDc0NDU5MzM2MzdDQ0EzMDlBNEMxNjFBQkZFREY4Nzc5 Q0IyQUIxM0YwHhcNMjUxMTA1MDQzNTMzWhcNMjUxMTEyMDQzNTMzWjAYMRYwFAYD VQQDEw02OTBhZDQxNS04MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyikluMg8Ujigsr7D4V6VNDYIO7fkjVyOvwTqZT+ez5FXRUUsZdQhcnOO1u2 k+BlpPWW6WVhKNO6tJOxac48WYH4lPvtTiWMpFsYxHJ8QiZGLga0+8sYZrouCj2i pCWMkGPBdN6pxwH1x3sgLjZFf8HF1aYubZeydCjvbOmstDGz89c2pZa19nJSleWG ExstehIc1fAQTBfLZNsmyHJevg23kOqAWwF0ntJLbOqk0lx32sQcPMLuQyBEjS0A zfrkmdnsHSt3ICrXuiAUheGspkUaamb0z29iVVad+Wkzg9UAyBFw0+XNLQRwQxiD oy4tCZQC7MSGIAU2dAJQPy4QkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmOgbd8 0EEfJ9T/MnW/7HpkQaiqMB8GA1UdIwQYMBaAFHRFkzY3zKMJpMFhq/7fh3nLKrE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy8yOUI4Njk5NDkw M0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93bWt3V0dyX3QtSGVjc3Fz VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy8yOUI4Njk5NDkwM0ExMUVGQkYxNTZEODFDNEY5QUUwMi9kRVdUTmpmTW93 bWt3V0dyX3QtSGVjc3FzVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1qeddIrdOyJUgGJmZMd9ByNDLMKVr9wF68TsOS5Rb8r6K94Wni4dJ SZR/WBIHM4fFYFH73dyIo2NnwkKvPzCerVJZR5B7zFbekIQtNRNFqIMYvPJPTPYG Ms7wzRNGk0oWO10tBlv+2xKZ6nvxIcu5P5Lt4HiGMtpueTEhMHGozc/JTjyPzgmh wrNcnlqa1UgsE9YhvUST2OtQ8aT05HgiwrVgM24BWHKZt83m3sKi8nV+5tdEwsUe mYoWPU2iYyqfPEkEsUNkqkEspnIY6Z3hZKKsZ6sdjXQBxS0PlrARX/Jo5lCnKQMn HA6bFsutf2mG19Qye2tU4bXi1rL4pHxy -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:25 2025 by rpki-client