$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: ZFs1b75Xbw3LMCMMbXVbnIkuz1LwF/e+HIFq7YoNukQ= Subject key identifier: 22:2C:5C:84:A4:14:F2:9A:70:90:0D:13:3B:21:BB:E9:12:75:2A:BC Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0C4D Signing time: Sun 02 Nov 2025 18:36:03 +0000 Manifest this update: Sun 02 Nov 2025 18:36:03 +0000 Manifest next update: Sun 09 Nov 2025 18:36:03 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: xUDcwxx2ttEvrtsEkKMd96ax2wMJdTYMY40SokJHjs4=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3164 (0xc5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Nov 2 18:36:03 2025 GMT Not After : Nov 9 18:36:03 2025 GMT Subject: CN=6907a493-a5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:75:2a:9c:fe:14:87:da:ec:de:9d:c4:83: 82:2f:2b:bb:03:25:3f:41:5f:bc:f7:39:74:92:53: 2f:9e:79:15:77:ac:0f:3e:5c:53:20:56:db:d8:53: 73:25:41:7f:92:78:11:55:b6:b1:57:73:5e:1f:8c: 7b:97:50:bb:37:0f:cd:c9:1f:7a:77:51:3f:dc:e6: 12:48:02:77:f9:47:95:70:e7:a9:6f:4c:4f:ca:e1: b6:a4:e0:34:7a:d3:01:c9:9a:aa:0c:0f:75:cb:3c: 23:d5:0c:7f:b1:35:84:3a:b7:0c:ed:49:67:98:d4: 0c:2c:c5:32:29:a3:c0:12:93:c2:b8:98:56:45:13: e5:b7:4c:07:d9:ef:d5:bf:2c:0b:eb:7b:a6:30:b6: ec:fd:a7:82:63:67:8a:68:29:ee:80:fc:75:96:cc: b0:a4:c2:ab:39:42:f1:bb:bd:e1:62:82:50:65:88: a7:7c:2d:88:b3:76:28:a8:b8:4f:ca:f5:ce:ad:9e: 5a:d6:b7:54:e6:12:a1:5c:f6:6c:8c:2d:fa:bc:a5: 68:13:2d:cd:88:18:c2:9d:0c:39:70:e1:97:cc:a0: af:67:ce:3c:bd:e5:ad:0d:e4:06:7f:1b:b5:3a:31: 75:02:73:30:6b:ea:40:cf:45:e4:15:9c:71:4c:93: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:5C:84:A4:14:F2:9A:70:90:0D:13:3B:21:BB:E9:12:75:2A:BC X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:ee:02:46:3f:29:46:d3:6a:8a:2f:89:03:51:c9:b9:56: af:06:b2:0b:0d:aa:57:6e:4d:85:d8:02:16:4d:68:e6:a4:1b: c9:e1:02:4c:f1:a9:68:8c:a4:a0:b0:62:1f:a0:73:14:ab:e9: 8e:3d:6f:74:04:1d:d7:85:f3:f2:78:23:4d:93:cb:79:4c:f3: db:7d:fe:45:6a:d2:84:a6:6b:69:48:2b:8b:7c:5c:99:ce:4f: b6:df:c9:2f:ae:16:33:3f:00:fa:93:1f:c1:4c:ba:c3:19:de: ad:c4:c0:c0:44:f8:c2:ba:e1:2d:19:b4:f1:c4:a7:98:98:f1: fe:b0:4a:97:42:09:e6:59:f4:59:40:86:02:25:e0:38:85:59: 6a:69:7b:ae:d9:c1:e3:fa:fb:6f:04:04:b2:a0:0b:95:ad:e9: 7d:09:10:8e:37:ee:fb:83:38:ef:33:a0:f6:59:f6:51:d3:e9: da:43:13:29:b9:92:27:f6:f7:7a:53:33:67:ab:d5:58:a3:1d: 50:7f:df:ca:9d:b7:da:90:f1:6f:8c:52:d9:a7:10:32:f3:e3: 23:4a:5d:78:4a:dd:86:5c:30:53:3d:c0:a2:2c:6d:f2:56:41: d1:6c:7b:8e:56:2d:5f:f3:53:3f:1e:c9:01:51:a8:dc:28:d6: 3a:4e:21:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUxMTAyMTgzNjAzWhcNMjUxMTA5MTgzNjAzWjAYMRYwFAYD VQQDEw02OTA3YTQ5My1hNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tJ1Kpz+FIfa7N6dxIOCLyu7AyU/QV+89zl0klMvnnkVd6wPPlxTIFbb2FNz JUF/kngRVbaxV3NeH4x7l1C7Nw/NyR96d1E/3OYSSAJ3+UeVcOepb0xPyuG2pOA0 etMByZqqDA91yzwj1Qx/sTWEOrcM7UlnmNQMLMUyKaPAEpPCuJhWRRPlt0wH2e/V vywL63umMLbs/aeCY2eKaCnugPx1lsywpMKrOULxu73hYoJQZYinfC2Is3YoqLhP yvXOrZ5a1rdU5hKhXPZsjC36vKVoEy3NiBjCnQw5cOGXzKCvZ848veWtDeQGfxu1 OjF1AnMwa+pAz0XkFZxxTJPZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIsXISk FPKacJANEzshu+kSdSq8MB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACr+4CRj8pRtNqii+JA1HJuVavBrILDapXbk2F2AIWTWjmpBvJ4QJM 8alojKSgsGIfoHMUq+mOPW90BB3XhfPyeCNNk8t5TPPbff5FatKEpmtpSCuLfFyZ zk+238kvrhYzPwD6kx/BTLrDGd6txMDARPjCuuEtGbTxxKeYmPH+sEqXQgnmWfRZ QIYCJeA4hVlqaXuu2cHj+vtvBASyoAuVrel9CRCON+77gzjvM6D2WfZR0+naQxMp uZIn9vd6UzNnq9VYox1Qf9/KnbfakPFvjFLZpxAy8+MjSl14St2GXDBTPcCiLG3y VkHRbHuOVi1f81M/HskBUajcKNY6TiGH -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:54 2025 by rpki-client