$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: I3yze47E2P6Onn8RtCJyYD78J5mejWHe1FUW3BZsLO0= Subject key identifier: 25:50:38:8E:33:5E:18:9D:FB:FF:3E:B4:06:D6:45:0E:EC:40:BC:8E Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 03CC Signing time: Wed 05 Nov 2025 00:45:02 +0000 Manifest this update: Wed 05 Nov 2025 00:45:02 +0000 Manifest next update: Wed 12 Nov 2025 00:45:01 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: 8CDnCQq8+2RBUQfhHS32+moZOlMR8ec8g/xmS5q2Jqc=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: EyHs5y7oE17xIkYVPklIvc2ZONwGgz4agYPg5DpPAPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Nov 5 00:45:02 2025 GMT Not After : Nov 12 00:45:01 2025 GMT Subject: CN=690a9e0e-74f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:b4:ba:c2:4b:53:4d:0d:95:df:6e:3c:d4: 59:ab:80:5d:87:f1:47:e7:92:16:21:7f:21:94:93: 4c:47:18:4a:bd:b0:bc:dc:2d:2a:da:0b:44:5e:fa: 8e:8b:41:51:14:f1:eb:cc:e5:e5:03:1d:86:4f:cd: 17:d6:c7:db:da:fb:ff:e1:14:ad:a1:0e:41:d6:04: 59:aa:bf:40:2a:a3:65:e6:38:38:6e:70:8f:26:ac: d2:ad:b0:a0:ee:a7:a8:1f:fc:30:c7:0d:b8:5c:a6: 33:c8:64:e3:77:8e:93:dd:46:5e:71:dd:e7:24:2d: fd:ed:24:a5:e1:98:04:51:d4:bf:4a:46:4c:62:9f: 8f:52:7c:5b:cf:a3:c5:ed:e0:d1:63:74:26:60:bf: 85:78:15:30:a3:75:dd:9c:4a:f0:7e:4f:3a:fb:05: 5f:7f:ef:c9:ad:21:76:40:f8:94:12:07:55:2d:a4: eb:8a:c5:c6:95:17:a9:70:6d:c6:b8:0c:9e:a5:3b: 6c:70:41:d7:af:e6:90:db:f6:e7:2f:55:ef:29:26: fa:91:32:06:59:43:a9:36:e5:f7:15:92:ab:f1:3f: 5f:56:03:6a:ae:cf:07:06:18:3d:71:9e:e5:86:c1: 72:16:ed:73:9f:62:ce:75:70:e5:d9:5b:51:c7:17: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:38:8E:33:5E:18:9D:FB:FF:3E:B4:06:D6:45:0E:EC:40:BC:8E X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:c3:84:83:12:68:8d:f7:47:5b:7b:14:40:a5:5a:a9:0d: ce:e4:f8:f7:c6:18:4a:4b:8c:c0:29:5b:c8:3d:d4:2c:cc:98: 93:c9:bf:5d:69:e6:2c:f6:bf:15:d2:43:85:89:86:92:01:e0: fc:ad:aa:8d:5c:0c:61:ec:79:74:7a:e5:3e:4e:46:43:86:37: 96:89:e1:bd:25:2f:7f:3a:16:4c:2d:9f:f7:90:b5:3a:99:e6: 5f:db:75:7a:39:00:39:b2:8a:de:00:e3:e3:06:36:d5:24:21: 62:e7:75:ec:a9:af:99:bb:1a:e9:34:ae:60:c8:0c:69:dc:28: 16:98:ce:49:41:b4:8b:83:4b:2c:4a:ea:af:46:e0:a6:d9:63: f9:c9:cd:ce:80:57:4c:af:2a:c6:3c:d0:f4:d9:35:da:95:60: fb:fa:bb:14:a9:16:1e:db:03:e5:a9:4b:20:7c:42:9a:8f:9e: 32:38:33:fa:10:9c:83:f5:fc:40:54:b9:52:5c:99:3e:16:ba: 77:fb:e0:b3:82:97:cc:ed:a1:dd:40:b3:d4:e1:e3:6c:2d:c6: 07:ef:26:6e:5b:07:0b:8d:df:28:52:05:61:b1:d9:26:be:8f: 63:45:1e:7b:7c:28:3e:51:13:dd:6b:f2:1f:b8:82:12:bd:c4: c0:ef:d9:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUxMTA1MDA0NTAyWhcNMjUxMTEyMDA0NTAxWjAYMRYwFAYD VQQDEw02OTBhOWUwZS03NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvO0usJLU00Nld9uPNRZq4Bdh/FH55IWIX8hlJNMRxhKvbC83C0q2gtEXvqO i0FRFPHrzOXlAx2GT80X1sfb2vv/4RStoQ5B1gRZqr9AKqNl5jg4bnCPJqzSrbCg 7qeoH/wwxw24XKYzyGTjd46T3UZecd3nJC397SSl4ZgEUdS/SkZMYp+PUnxbz6PF 7eDRY3QmYL+FeBUwo3XdnErwfk86+wVff+/JrSF2QPiUEgdVLaTrisXGlRepcG3G uAyepTtscEHXr+aQ2/bnL1XvKSb6kTIGWUOpNuX3FZKr8T9fVgNqrs8HBhg9cZ7l hsFyFu1zn2LOdXDl2VtRxxevkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVQOI4z Xhid+/8+tAbWRQ7sQLyOMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAleMOEgxJojfdHW3sUQKVaqQ3O5Pj3xhhKS4zAKVvIPdQszJiTyb9d aeYs9r8V0kOFiYaSAeD8raqNXAxh7Hl0euU+TkZDhjeWieG9JS9/OhZMLZ/3kLU6 meZf23V6OQA5soreAOPjBjbVJCFi53Xsqa+ZuxrpNK5gyAxp3CgWmM5JQbSLg0ss SuqvRuCm2WP5yc3OgFdMryrGPND02TXalWD7+rsUqRYe2wPlqUsgfEKaj54yODP6 EJyD9fxAVLlSXJk+Frp3++CzgpfM7aHdQLPU4eNsLcYH7yZuWwcLjd8oUgVhsdkm vo9jRR57fCg+URPda/IfuIISvcTA79ky -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:06 2025 by rpki-client