$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft File: DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json) Hash identifier: t0bEYNsWeb+DS4aBpuAyQbwFrLdfZ0tRdbu2KYPihEk= Subject key identifier: 50:5F:33:70:9A:9F:35:FD:D8:95:16:E4:BC:50:33:D4:5F:33:A7:1C Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft Manifest number: 9E Signing time: Wed 05 Nov 2025 06:50:52 +0000 Manifest this update: Wed 05 Nov 2025 06:50:52 +0000 Manifest next update: Wed 12 Nov 2025 06:50:51 +0000 Files and hashes: 1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: q+Ojr7KDmZXLMROwQaHu2nUr+8gbR2CYqAY0rSa3SD8=) 2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: wWfdJ3ojQgnjYv+xQZQJGvsjjx2qqrsimiX/OkxE+Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103 Validity Not Before: Nov 5 06:50:52 2025 GMT Not After : Nov 12 06:50:51 2025 GMT Subject: CN=690af3cc-ad70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:9f:52:cd:3f:83:5f:ef:1c:0a:f0:f0:0a: 9d:07:8a:e8:ff:58:ac:72:02:4b:53:78:ce:b4:85: cf:a2:81:13:ab:3b:77:e8:61:df:0a:c2:85:93:50: 4b:b6:43:98:90:ba:bb:c0:b1:68:17:77:76:d2:2d: c2:76:98:bb:69:a7:0a:be:de:15:ab:be:95:06:bc: d6:a7:e4:15:b8:6a:4f:f7:3d:dd:0c:81:22:54:5b: bf:36:9b:f9:5d:28:34:2f:46:1f:6a:5f:c9:44:bc: dd:6f:2b:8c:01:29:19:ea:ea:ec:fb:ee:69:6a:dc: be:19:ec:be:b5:00:4a:5b:df:ec:09:6c:a6:08:78: 09:c2:d6:3c:96:3e:f5:9e:b7:f5:82:89:1b:2e:1c: bd:9c:f6:fe:ee:a5:1d:a9:58:d0:79:64:0e:f2:27: b7:79:9c:37:82:2c:64:7c:f7:6a:1f:25:6e:5b:90: 0a:ab:e0:2c:16:a5:48:7d:c6:6c:7d:d5:ee:fa:58: 7a:26:bf:75:88:e2:39:83:33:69:32:b3:5f:f8:14: 9f:ce:8b:c5:35:aa:f0:c5:bd:b8:91:fc:ca:b9:82: cd:fc:d4:35:76:9e:82:83:f1:d1:2e:a7:2e:46:6f: e2:b9:09:c8:9e:02:0f:8a:f0:44:6d:75:e7:6b:33: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:33:70:9A:9F:35:FD:D8:95:16:E4:BC:50:33:D4:5F:33:A7:1C X509v3 Authority Key Identifier: keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4c:6e:a9:18:08:96:02:8d:f1:6f:12:74:fb:37:30:5d:bc: cf:e1:07:5a:a8:a4:9b:6e:93:40:19:d9:a0:0d:70:02:a6:2d: b3:7d:82:02:7e:d0:fe:15:bb:e5:ee:b7:3d:81:a3:a2:5d:68: fe:92:d9:1b:ae:03:59:ab:dc:98:f7:ca:50:fe:b9:ed:8c:26: 8a:e2:12:20:aa:98:80:83:e5:a1:d5:e0:c9:8c:c2:1f:b2:2a: d8:03:30:d5:08:7f:ca:ca:13:90:ff:33:5c:ec:5a:7b:8b:22: 62:ed:13:1f:74:84:6c:5a:3d:7c:a2:85:b4:18:48:bf:81:ad: 57:28:82:89:b7:87:4b:2f:9d:55:66:0c:82:29:36:3e:d9:62: 16:ce:e0:21:22:48:7b:32:b3:b0:10:a9:dc:1b:20:8d:dd:97: c6:9c:1d:5b:12:ad:51:ab:c6:9b:99:15:a2:5d:ac:f3:d4:cb: 59:fb:00:c6:cf:59:af:ca:5f:c0:d0:0e:29:69:4c:9f:e2:2a: b3:fa:ee:f6:9d:b5:dd:2a:2f:3c:cb:14:2b:c9:4e:f8:ac:d9: dd:63:d7:55:4d:76:d6:bd:43:0a:15:f3:e4:0a:9d:b7:20:bb: d9:c4:2c:f8:ac:1e:67:75:12:e9:23:cb:25:97:7c:44:ae:4a: 0f:55:29:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg5NTkxMTAvBgNVBAUTKDBFOTM2NjFBQzE2MTU0RjY1RDJBMkY3ODFBMDMxRjM1 QzkzMTAxMDMwHhcNMjUxMTA1MDY1MDUyWhcNMjUxMTEyMDY1MDUxWjAYMRYwFAYD VQQDEw02OTBhZjNjYy1hZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4KfUs0/g1/vHArw8AqdB4ro/1iscgJLU3jOtIXPooETqzt36GHfCsKFk1BL tkOYkLq7wLFoF3d20i3Cdpi7aacKvt4Vq76VBrzWp+QVuGpP9z3dDIEiVFu/Npv5 XSg0L0Yfal/JRLzdbyuMASkZ6urs++5paty+Gey+tQBKW9/sCWymCHgJwtY8lj71 nrf1gokbLhy9nPb+7qUdqVjQeWQO8ie3eZw3gixkfPdqHyVuW5AKq+AsFqVIfcZs fdXu+lh6Jr91iOI5gzNpMrNf+BSfzovFNarwxb24kfzKuYLN/NQ1dp6Cg/HRLqcu Rm/iuQnIngIPivBEbXXnazNCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBfM3Ca nzX92JUW5LxQM9RfM6ccMB8GA1UdIwQYMBaAFA6TZhrBYVT2XSoveBoDHzXJMQED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODk1OS9CQkQxNDA4Q0NE RUIxMUVGQjUzQTFCMjBDNEY5QUUwMi9EcE5tR3NGaFZQWmRLaTk0R2dNZk5ja3hB UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RwTm1Hc0ZoVlBaZEtpOTRHZ01mTmNreEFRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODk1OS9CQkQxNDA4Q0NERUIxMUVGQjUzQTFCMjBDNEY5QUUwMi9EcE5tR3NGaFZQ WmRLaTk0R2dNZk5ja3hBUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDTG6pGAiWAo3xbxJ0+zcwXbzP4QdaqKSbbpNAGdmgDXACpi2zfYIC ftD+Fbvl7rc9gaOiXWj+ktkbrgNZq9yY98pQ/rntjCaK4hIgqpiAg+Wh1eDJjMIf sirYAzDVCH/KyhOQ/zNc7Fp7iyJi7RMfdIRsWj18ooW0GEi/ga1XKIKJt4dLL51V ZgyCKTY+2WIWzuAhIkh7MrOwEKncGyCN3ZfGnB1bEq1Rq8abmRWiXazz1MtZ+wDG z1mvyl/A0A4paUyf4iqz+u72nbXdKi88yxQryU74rNndY9dVTXbWvUMKFfPkCp23 ILvZxCz4rB5ndRLpI8sll3xErkoPVSkA -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:13 2025 by rpki-client