$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: XWKJG4IIaifeSdwtE1V5TkyE/LM8u891tlPhuf0xjos= Subject key identifier: 07:C1:05:A7:EF:6A:5F:B8:B1:8B:84:5F:F6:2E:76:4F:C7:90:60:1D Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 10BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 10B2 Signing time: Tue 04 Nov 2025 17:24:58 +0000 Manifest this update: Tue 04 Nov 2025 17:24:57 +0000 Manifest next update: Tue 11 Nov 2025 17:24:57 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: 51L0DDvPjsPdP37yClkljiQIQ0puEXqeEBY67itUmsI=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4286 (0x10be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Nov 4 17:24:57 2025 GMT Not After : Nov 11 17:24:57 2025 GMT Subject: CN=690a36ea-a857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:43:65:51:43:a2:40:7d:54:e8:bb:8b:00: a0:b7:1b:e9:c6:3e:20:c1:4c:d4:37:9a:2e:a3:f4: 6d:81:39:f5:20:39:32:5f:63:66:8b:24:c7:e6:4b: 2f:08:6c:30:36:f1:8a:28:d6:f8:a1:98:f2:41:5f: 3f:8c:39:b9:28:67:d6:50:ee:83:24:b6:00:78:44: 07:09:54:7d:d8:e2:5b:e3:cd:bd:c6:1c:8d:6c:71: 81:16:ea:21:f8:36:ce:0e:d5:61:81:77:90:2e:70: 3e:e7:96:f3:d2:9e:29:bc:74:ca:f2:85:8c:35:42: 4b:0c:2d:eb:3f:49:4a:aa:18:29:10:cd:fe:85:76: 4f:2a:ee:ab:2f:e8:c0:2b:04:56:7a:19:2c:89:21: f8:0a:f1:29:69:8b:de:15:11:87:ea:b2:bf:bd:e5: a9:c1:0e:29:f7:f0:23:5f:77:fe:1e:de:20:df:ec: 35:a4:fe:b6:c1:32:6c:8a:1d:c3:c1:d3:1a:dd:9b: ca:57:ee:62:0c:89:7a:e1:ae:c4:d2:94:6e:98:f4: 3c:68:c3:67:b5:0a:37:d8:b8:b1:21:04:5f:91:ae: 0b:aa:bb:56:bc:c6:7c:76:9c:80:b8:0f:62:ad:8c: e5:4f:a6:c7:bf:36:46:5f:0f:34:4e:8d:75:6e:32: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:05:A7:EF:6A:5F:B8:B1:8B:84:5F:F6:2E:76:4F:C7:90:60:1D X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ad:41:67:c6:0e:dc:80:09:fa:34:73:6a:c1:b3:94:10:0d: 2c:15:63:2e:69:66:8e:21:29:e2:69:0a:60:58:71:6d:83:23: 18:bd:94:e9:78:7a:a0:00:1d:59:f2:96:ed:b6:01:a4:a6:2e: 21:bb:02:bd:69:3d:f9:0d:77:7b:44:71:44:81:f0:13:ba:17: a5:14:da:51:43:b0:24:40:ff:57:91:18:32:ad:72:27:aa:e4: 0b:64:77:e1:a5:91:2b:8b:92:97:3a:a1:c2:b0:e2:a4:89:5c: 83:78:6d:fc:94:10:5a:ba:59:d1:60:e0:37:66:25:e7:f9:cd: 1a:7d:45:22:f1:49:df:51:ac:aa:18:80:b5:d4:ea:70:76:1a: 5f:08:a4:26:fb:ea:18:c9:0b:84:83:d9:f6:d8:b3:6f:69:64: 0a:76:52:f5:4c:8a:4d:7f:6d:69:91:50:2e:45:72:a6:7b:b8: 35:fe:c1:3b:94:a5:db:2b:77:5f:0d:34:9a:ee:e5:00:12:1a: ab:1c:f6:ef:98:9b:5f:31:69:ab:7a:65:26:1d:48:8f:25:58: cf:01:bb:80:ea:5b:92:2c:95:cb:81:55:b5:e7:f9:ef:9d:14: eb:0e:29:83:9e:b5:76:01:65:47:df:f0:56:92:68:e9:ec:58: c0:d5:62:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUxMTA0MTcyNDU3WhcNMjUxMTExMTcyNDU3WjAYMRYwFAYD VQQDEw02OTBhMzZlYS1hODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj5DZVFDokB9VOi7iwCgtxvpxj4gwUzUN5ouo/RtgTn1IDkyX2NmiyTH5ksv CGwwNvGKKNb4oZjyQV8/jDm5KGfWUO6DJLYAeEQHCVR92OJb4829xhyNbHGBFuoh +DbODtVhgXeQLnA+55bz0p4pvHTK8oWMNUJLDC3rP0lKqhgpEM3+hXZPKu6rL+jA KwRWehksiSH4CvEpaYveFRGH6rK/veWpwQ4p9/AjX3f+Ht4g3+w1pP62wTJsih3D wdMa3ZvKV+5iDIl64a7E0pRumPQ8aMNntQo32LixIQRfka4LqrtWvMZ8dpyAuA9i rYzlT6bHvzZGXw80To11bjI7cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfBBafv al+4sYuEX/Yudk/HkGAdMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBrUFnxg7cgAn6NHNqwbOUEA0sFWMuaWaOISniaQpgWHFtgyMYvZTp eHqgAB1Z8pbttgGkpi4huwK9aT35DXd7RHFEgfATuhelFNpRQ7AkQP9XkRgyrXIn quQLZHfhpZEri5KXOqHCsOKkiVyDeG38lBBaulnRYOA3ZiXn+c0afUUi8UnfUayq GIC11OpwdhpfCKQm++oYyQuEg9n22LNvaWQKdlL1TIpNf21pkVAuRXKme7g1/sE7 lKXbK3dfDTSa7uUAEhqrHPbvmJtfMWmremUmHUiPJVjPAbuA6luSLJXLgVW15/nv nRTrDimDnrV2AWVH3/BWkmjp7FjA1WIB -----END CERTIFICATE-----Generated at Wed Nov 5 16:48:45 2025 by rpki-client