$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: FbKhUnAbbx2yP2Ech7+ecsipfxQM/wZ4jRmqZtfbC1Q= Subject key identifier: 0E:D7:C7:76:BE:CC:30:A8:FC:47:2D:B9:D3:75:DC:46:59:1B:BB:C8 Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 08B3 Signing time: Tue 04 Nov 2025 20:33:38 +0000 Manifest this update: Tue 04 Nov 2025 20:33:37 +0000 Manifest next update: Tue 11 Nov 2025 20:33:37 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: 9e2r+AbVLupymSHg2gR3ibmJD6rtWhSeL2okQ2Ii/JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Nov 4 20:33:37 2025 GMT Not After : Nov 11 20:33:37 2025 GMT Subject: CN=690a6322-0ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:7f:80:17:6d:04:00:05:27:32:e8:6c:99: 1a:5d:7a:0f:e8:85:c5:e2:b5:18:82:41:6a:18:57: 53:41:b4:c6:dd:a2:81:3e:82:38:fb:4d:5c:c2:57: 03:65:14:bf:03:51:56:aa:a5:96:2a:13:09:54:05: 6d:1d:d3:53:78:82:a0:f4:b7:86:db:53:d9:16:8b: 53:25:f3:07:27:9a:ad:ea:d4:7e:7a:4d:3e:18:f2: 5b:5a:38:cd:c5:8f:b4:6e:74:26:df:18:3a:6d:28: 00:3b:c7:18:15:df:2b:9e:5c:52:3d:95:13:c2:b2: 82:1a:fb:f8:3b:d6:2b:3d:18:f8:0a:cc:c4:38:f2: 87:7a:7f:1a:84:a8:e0:85:2e:e8:df:65:11:02:e5: c1:2a:68:15:08:be:33:5b:65:b3:fa:cb:d3:30:20: df:1b:47:fb:3e:62:9d:71:57:1d:67:d8:7b:0a:01: 58:05:a0:c6:cd:b1:62:1b:20:4c:7c:8c:e7:35:db: b4:2b:30:82:ae:c3:37:c1:a3:75:f2:ef:9e:ce:2f: 3a:47:7e:63:45:dd:d6:be:e4:fd:cc:8f:ff:25:9d: 41:f8:36:db:e5:9d:78:02:e4:63:fc:a1:81:be:90: 32:ce:0e:c7:48:40:70:42:e0:f1:21:f5:51:b8:04: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D7:C7:76:BE:CC:30:A8:FC:47:2D:B9:D3:75:DC:46:59:1B:BB:C8 X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:10:ce:13:b5:3c:ca:d0:84:82:2f:fc:d4:6a:ca:9c:cc:76: 28:32:9a:b4:da:6b:18:38:50:92:11:a3:a7:d2:34:13:7f:c0: fb:29:fc:31:d5:8d:c7:48:54:8a:f1:dd:b6:48:6b:e0:71:c2: c6:ec:5a:7f:e7:b7:1c:47:ac:0d:50:f2:78:0a:aa:4c:06:4a: f6:27:ea:f9:9e:c9:ff:8d:63:cf:e8:55:5c:12:18:af:5d:25: 01:60:5e:3b:5a:3f:5b:20:5d:4c:05:c3:b4:49:d7:5a:7f:f7: 84:b7:2a:a7:44:d4:a6:50:eb:f3:f6:62:18:80:d7:e6:a5:dd: 63:ae:24:b3:32:02:50:d2:3d:ec:a9:4d:12:5d:99:c9:02:79: 9e:a7:dc:93:0e:8e:ef:7c:52:14:c7:13:ca:09:fb:b9:db:d1: 34:d5:11:d3:28:23:20:1c:e7:63:07:45:50:7e:ee:22:4b:6e: 34:80:19:74:6d:28:c2:1c:d3:08:5b:ca:57:b3:59:60:67:87: 28:6c:b6:98:d4:57:06:b9:f6:62:ed:40:bb:1c:27:3a:cc:2a: 93:a7:ae:94:98:23:13:5c:13:a6:c9:e0:7b:e4:cb:55:15:c8: c8:97:ed:43:5f:e6:42:24:8b:86:86:47:1f:47:c6:0d:a6:45: d9:2b:69:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUxMTA0MjAzMzM3WhcNMjUxMTExMjAzMzM3WjAYMRYwFAYD VQQDEw02OTBhNjMyMi0wZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24Z/gBdtBAAFJzLobJkaXXoP6IXF4rUYgkFqGFdTQbTG3aKBPoI4+01cwlcD ZRS/A1FWqqWWKhMJVAVtHdNTeIKg9LeG21PZFotTJfMHJ5qt6tR+ek0+GPJbWjjN xY+0bnQm3xg6bSgAO8cYFd8rnlxSPZUTwrKCGvv4O9YrPRj4CszEOPKHen8ahKjg hS7o32URAuXBKmgVCL4zW2Wz+svTMCDfG0f7PmKdcVcdZ9h7CgFYBaDGzbFiGyBM fIznNdu0KzCCrsM3waN18u+ezi86R35jRd3WvuT9zI//JZ1B+Dbb5Z14AuRj/KGB vpAyzg7HSEBwQuDxIfVRuAQtpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7Xx3a+ zDCo/EctudN13EZZG7vIMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVEM4TtTzK0ISCL/zUasqczHYoMpq02msYOFCSEaOn0jQTf8D7Kfwx 1Y3HSFSK8d22SGvgccLG7Fp/57ccR6wNUPJ4CqpMBkr2J+r5nsn/jWPP6FVcEhiv XSUBYF47Wj9bIF1MBcO0Sddaf/eEtyqnRNSmUOvz9mIYgNfmpd1jriSzMgJQ0j3s qU0SXZnJAnmep9yTDo7vfFIUxxPKCfu529E01RHTKCMgHOdjB0VQfu4iS240gBl0 bSjCHNMIW8pXs1lgZ4cobLaY1FcGufZi7UC7HCc6zCqTp66UmCMTXBOmyeB75MtV FcjIl+1DX+ZCJIuGhkcfR8YNpkXZK2lB -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:03 2025 by rpki-client