$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: QOwNtnphOZNV5Ton+n7weFPO7KgniS409LQ9fcDe0aI= Subject key identifier: 4A:60:25:66:1E:45:94:54:FF:43:68:C5:CB:71:2D:40:22:CA:30:B6 Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 058F Signing time: Sun 02 Nov 2025 23:11:18 +0000 Manifest this update: Sun 02 Nov 2025 23:11:17 +0000 Manifest next update: Sun 09 Nov 2025 23:11:17 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: dkv4HWWBZ/g0GvLOBOYFJzGtAv2Qamt9sMGUhvpIvQs=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: B73jK8rs3UShIkXEqnOr+hGZIISFb8px20z32h4py5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: Nov 2 23:11:17 2025 GMT Not After : Nov 9 23:11:17 2025 GMT Subject: CN=6907e515-39fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:b3:8d:62:e2:08:35:df:37:a8:78:3a:d0: 42:3e:68:ce:5e:06:1e:18:4b:df:36:55:0c:ff:38: 99:37:14:89:75:a2:0a:63:97:76:1f:89:6f:d8:8a: 97:ab:12:27:13:c8:23:60:00:d7:f4:b8:7f:20:38: a8:e0:39:cb:de:08:5b:43:8f:c2:15:ab:0c:e1:92: 0b:db:be:5e:f3:72:bf:94:38:85:5b:f2:8f:d8:de: 10:de:f1:b7:4a:27:ba:9e:97:23:ca:3b:1d:fa:ae: 2d:0a:62:01:ba:11:51:32:e3:57:32:79:d9:c7:e0: fa:b3:17:76:1b:8b:23:06:38:12:70:b7:ba:a0:11: 5b:9a:c4:36:d6:b4:ef:6a:33:1f:f4:4b:e1:98:38: 4b:8f:b4:34:ec:a7:8c:20:3c:68:d2:e1:9e:3a:07: 89:1e:95:a3:85:45:dd:be:da:9d:85:ee:0d:43:7d: 2d:43:0a:bc:8a:8f:1c:9b:e8:3f:fe:c0:76:61:2f: 77:06:1e:b4:1f:9a:07:b1:e2:60:50:20:6c:d5:3f: 58:33:f2:18:41:c3:d2:76:ab:fb:cd:d8:d1:b5:4e: 6a:3e:89:cc:1e:f0:b8:c7:73:5f:12:f8:35:88:13: b1:95:b7:44:19:d1:6b:b0:b9:7a:56:16:98:73:72: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:25:66:1E:45:94:54:FF:43:68:C5:CB:71:2D:40:22:CA:30:B6 X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:f3:a3:d4:48:f0:d8:ed:a5:16:43:de:76:8a:22:e8:e5: 1e:4d:e7:8e:21:82:2d:32:31:c4:6c:ca:52:c3:46:f9:06:79: 76:45:78:4e:2d:a2:2d:9f:34:8e:fe:3f:3f:19:09:f7:2c:70: 32:47:7f:95:67:ba:10:34:b7:0e:2f:29:d9:ce:f9:44:ef:9d: e7:4a:4c:79:a0:5d:02:3d:90:01:d1:3b:bf:3d:a2:78:f5:80: 4e:e8:d9:69:b3:b4:dc:e2:b6:6f:37:c2:22:77:67:90:19:2c: 29:dc:33:2f:f5:e3:59:d4:76:c4:54:3c:88:68:18:8f:78:9a: a3:2f:25:77:da:1e:99:1e:bb:24:f3:2b:fb:47:13:58:02:ae: 17:4e:51:1b:16:91:0d:04:48:f3:25:0a:24:a9:d7:cb:dd:cf: 06:9d:71:81:77:75:c6:26:72:24:89:73:06:c3:97:33:52:9e: 99:69:0f:80:e1:5b:68:0b:cf:7d:f8:17:54:18:b4:fe:49:86: da:d7:6d:51:8a:d3:6a:cb:6e:9d:8f:bd:00:26:fc:5f:88:47: 5f:d6:e5:4c:1e:95:b7:a9:50:bb:96:a4:e6:2d:24:df:38:87: 60:7c:88:f9:f2:28:e2:49:41:6d:91:a2:45:eb:fc:36:b4:4f: cd:ef:18:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUxMTAyMjMxMTE3WhcNMjUxMTA5MjMxMTE3WjAYMRYwFAYD VQQDEw02OTA3ZTUxNS0zOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLWzjWLiCDXfN6h4OtBCPmjOXgYeGEvfNlUM/ziZNxSJdaIKY5d2H4lv2IqX qxInE8gjYADX9Lh/IDio4DnL3ghbQ4/CFasM4ZIL275e83K/lDiFW/KP2N4Q3vG3 Sie6npcjyjsd+q4tCmIBuhFRMuNXMnnZx+D6sxd2G4sjBjgScLe6oBFbmsQ21rTv ajMf9EvhmDhLj7Q07KeMIDxo0uGeOgeJHpWjhUXdvtqdhe4NQ30tQwq8io8cm+g/ /sB2YS93Bh60H5oHseJgUCBs1T9YM/IYQcPSdqv7zdjRtU5qPonMHvC4x3NfEvg1 iBOxlbdEGdFrsLl6VhaYc3JzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpgJWYe RZRU/0NoxctxLUAiyjC2MB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJJ/Oj1Ejw2O2lFkPedooi6OUeTeeOIYItMjHEbMpSw0b5Bnl2RXhO LaItnzSO/j8/GQn3LHAyR3+VZ7oQNLcOLynZzvlE753nSkx5oF0CPZAB0Tu/PaJ4 9YBO6Nlps7Tc4rZvN8Iid2eQGSwp3DMv9eNZ1HbEVDyIaBiPeJqjLyV32h6ZHrsk 8yv7RxNYAq4XTlEbFpENBEjzJQokqdfL3c8GnXGBd3XGJnIkiXMGw5czUp6ZaQ+A 4VtoC899+BdUGLT+SYba121RitNqy26dj70AJvxfiEdf1uVMHpW3qVC7lqTmLSTf OIdgfIj58ijiSUFtkaJF6/w2tE/N7xhr -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:03 2025 by rpki-client