$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: pz6p7p9o38wp+8JmdXSKWriFOJuoDcotuSJvq3gszwk= Subject key identifier: A2:35:8F:49:5F:33:22:D2:6C:28:77:DE:52:12:63:37:28:B5:6B:55 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0D77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0D66 Signing time: Tue 04 Nov 2025 18:04:57 +0000 Manifest this update: Tue 04 Nov 2025 18:04:56 +0000 Manifest next update: Tue 11 Nov 2025 18:04:56 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: 7h1mnWHgmy/OS+0u/d+BaLQJVQOAqyB4P0zW4KsBTmc=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 0IRldC+hawtZkd2Iq9YFUMYJkucfDEzFvM/nRTLCHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3447 (0xd77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Nov 4 18:04:56 2025 GMT Not After : Nov 11 18:04:56 2025 GMT Subject: CN=690a4049-605f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:a8:ef:d1:b5:6e:a0:57:46:21:e4:83:ff: d5:34:d0:6c:e8:3e:89:32:b7:06:dc:de:c1:e8:2c: 8b:ee:1c:66:a6:26:8c:92:de:07:6d:b6:91:55:00: bd:8e:40:d2:42:95:2d:f9:ca:2b:9c:b7:37:ed:3b: d0:2c:db:26:54:f5:60:c7:e5:60:46:a3:c0:7c:0b: 4a:21:e4:85:ec:3f:82:a3:af:97:d5:fd:9a:ea:c2: 2c:b3:63:e2:33:14:2d:c5:32:f7:82:b9:ec:0a:82: db:de:7e:d8:00:73:47:c3:5b:4f:53:d2:f5:f7:76: 3c:42:5a:46:c9:57:09:80:b2:7c:e9:cd:f7:7e:79: 1d:c2:7f:94:a5:4c:cb:36:ac:28:dd:5f:09:8b:33: 4c:3a:ff:2d:65:6d:bb:a4:7b:37:74:66:9d:5e:4b: 5a:df:ca:a7:c0:e9:53:9b:94:b3:27:1c:06:2e:3b: b3:24:d0:b9:85:72:90:83:42:fc:86:b2:95:dc:5b: 32:8e:f6:82:da:1f:77:4e:8e:48:1c:38:a5:d6:32: a6:79:86:c5:36:68:af:fb:74:db:a9:6a:df:10:b8: 92:06:81:cd:10:ed:5e:c6:0e:97:99:64:53:21:4d: c2:b8:45:cd:3b:9d:a1:c3:6b:b6:ff:2e:26:ee:c9: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:8F:49:5F:33:22:D2:6C:28:77:DE:52:12:63:37:28:B5:6B:55 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2f:cd:9d:e2:e8:89:37:a9:41:d4:66:ce:f8:3e:1b:d1:1c: c0:a3:bc:38:9a:25:60:83:51:45:1f:0d:eb:b0:1e:13:3f:e5: 03:5e:b8:60:d8:04:00:e1:5d:c3:53:7a:16:f4:f3:61:0a:d7: 75:50:a8:28:b9:86:8b:9e:45:f0:f7:73:83:c0:cd:41:84:be: a9:08:f6:66:5a:12:04:cb:ba:24:8f:ca:0e:ee:07:52:b0:fc: e8:23:49:8a:ec:b2:6c:06:b9:20:dc:4a:1b:7f:af:4a:21:a0: 30:cb:4b:65:f7:06:0b:c0:9e:20:d7:c4:0b:67:e4:29:a7:2e: a0:96:4e:d7:90:ad:f1:21:fd:b4:65:0a:c4:e8:53:c0:b6:d4: 22:e2:01:58:ed:a2:75:3e:32:76:43:fd:10:60:4d:3b:d3:4e: f6:20:d0:ad:b1:94:f0:ec:a5:c3:c5:1c:9a:5b:6b:f8:c5:4b: 83:54:31:3c:12:a1:98:cf:30:e3:49:82:d0:31:39:da:9f:dd: 50:11:09:c5:a5:43:5a:55:94:71:28:6b:fb:a2:82:c7:6d:ac: 02:a3:c7:de:77:f7:ac:9d:2e:e2:82:b3:31:7e:18:ed:8d:44: 8e:41:bc:19:a6:cd:49:eb:9a:43:c9:7c:d1:88:25:61:8c:30: 77:e9:e5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjUxMTA0MTgwNDU2WhcNMjUxMTExMTgwNDU2WjAYMRYwFAYD VQQDEw02OTBhNDA0OS02MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dKo79G1bqBXRiHkg//VNNBs6D6JMrcG3N7B6CyL7hxmpiaMkt4HbbaRVQC9 jkDSQpUt+cornLc37TvQLNsmVPVgx+VgRqPAfAtKIeSF7D+Co6+X1f2a6sIss2Pi MxQtxTL3grnsCoLb3n7YAHNHw1tPU9L193Y8QlpGyVcJgLJ86c33fnkdwn+UpUzL Nqwo3V8JizNMOv8tZW27pHs3dGadXkta38qnwOlTm5SzJxwGLjuzJNC5hXKQg0L8 hrKV3FsyjvaC2h93To5IHDil1jKmeYbFNmiv+3TbqWrfELiSBoHNEO1exg6XmWRT IU3CuEXNO52hw2u2/y4m7slPBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI1j0lf MyLSbCh33lISYzcotWtVMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8L82d4uiJN6lB1GbO+D4b0RzAo7w4miVgg1FFHw3rsB4TP+UDXrhg 2AQA4V3DU3oW9PNhCtd1UKgouYaLnkXw93ODwM1BhL6pCPZmWhIEy7okj8oO7gdS sPzoI0mK7LJsBrkg3Eobf69KIaAwy0tl9wYLwJ4g18QLZ+Qppy6glk7XkK3xIf20 ZQrE6FPAttQi4gFY7aJ1PjJ2Q/0QYE070072INCtsZTw7KXDxRyaW2v4xUuDVDE8 EqGYzzDjSYLQMTnan91QEQnFpUNaVZRxKGv7ooLHbawCo8fed/esnS7igrMxfhjt jUSOQbwZps1J65pDyXzRiCVhjDB36eXg -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:52 2025 by rpki-client