$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: SGSTnntfigReDYitHIO6nU3h1kk0trkJjN7rTKRoEv4= Subject key identifier: 87:DA:FE:18:0F:62:AA:97:A6:0E:47:A8:26:A4:8D:EF:89:77:F5:07 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 34E0 Signing time: Sun 02 Nov 2025 14:17:06 +0000 Manifest this update: Sun 02 Nov 2025 14:17:05 +0000 Manifest next update: Sun 09 Nov 2025 14:17:05 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: zxTH4oIz+vOxb6VA+2MWQ26u72ZO+oTEn8K7NHQ7kOQ=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Nov 2 14:17:05 2025 GMT Not After : Nov 9 14:17:05 2025 GMT Subject: CN=690767e1-2b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:13:d6:14:78:3d:8e:96:e1:1d:e3:90:a2: 08:3b:6a:c5:c7:9d:8d:63:b3:a3:28:fe:f9:48:2d: d6:3b:43:1b:3d:1c:38:4a:db:b9:c0:58:fa:d8:c5: dd:01:39:37:2f:13:d2:d7:89:e6:01:d0:20:08:a8: 74:7f:d7:86:0c:91:20:93:15:0d:61:58:dc:8b:86: 4d:99:66:94:94:af:b3:20:ca:4b:18:d9:5e:4e:f7: 65:d9:e6:f1:2f:e9:e9:76:ba:df:3d:f3:b0:03:69: 0d:fe:94:a2:9b:6a:d9:1d:78:00:a4:39:b4:2a:e4: 49:b9:76:de:50:8b:b5:e5:ab:eb:45:01:e3:ca:ea: 38:95:96:b6:df:fd:53:d6:d9:8e:1e:91:bb:dd:5b: b8:95:d5:d7:f1:e6:28:43:3d:91:e9:ed:cd:88:2b: 3e:9b:e2:b4:70:7b:9e:75:7c:d0:8e:01:f0:08:24: ae:11:47:01:1d:07:c0:c7:f9:f6:b9:0b:d9:e0:9c: 54:6d:0d:89:a1:55:55:10:62:ad:06:73:6d:c2:c3: 2a:0a:68:af:c4:f3:cb:80:aa:ff:91:aa:48:fd:da: cb:92:7b:e1:22:1f:57:3d:d1:72:89:b5:c0:f5:a2: be:ef:94:81:4d:92:72:69:40:7a:a4:c5:4d:40:30: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:FE:18:0F:62:AA:97:A6:0E:47:A8:26:A4:8D:EF:89:77:F5:07 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9b:35:92:54:73:28:50:ce:ae:69:24:c7:af:10:60:53:12: b1:18:7e:c2:94:4e:a2:92:0f:eb:80:ee:4c:37:e0:61:94:60: 30:07:62:6c:e5:00:6f:79:85:54:1e:c9:e0:6d:dd:68:09:6f: 2f:29:80:69:6f:8e:5c:0d:1e:44:a2:6b:9f:87:23:57:cb:50: ae:04:00:e8:a0:ec:76:79:60:d1:19:a1:b5:09:71:9d:d5:30: 20:c0:ee:37:37:1c:57:a7:ef:ce:1e:40:8c:58:5d:cc:be:26: ff:34:5f:b5:21:86:a7:6e:31:f2:3a:0d:f0:59:59:2c:2e:bc: f3:ed:af:15:1e:c2:f7:8b:82:ae:f2:c7:bb:67:0d:c3:eb:a8: 2b:13:f0:c1:33:12:ba:aa:4d:ad:e8:9b:88:f5:37:c3:a5:df: d3:f1:dd:54:ae:9c:46:14:48:7a:ce:49:5a:3b:e2:1f:53:92: 4d:a4:b7:e6:b5:97:c4:64:21:87:bb:6a:80:aa:12:4a:b9:3b: 3c:c0:88:fc:95:6f:3a:ee:e4:e6:5a:26:0f:7d:46:a3:65:d6: cb:32:a3:24:07:5d:47:f1:a2:3d:28:4a:c3:71:8c:28:18:69: fc:bd:bd:31:5a:ca:28:3d:13:41:b5:84:08:25:cd:a8:93:f3: ce:c0:8d:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUxMTAyMTQxNzA1WhcNMjUxMTA5MTQxNzA1WjAYMRYwFAYD VQQDEw02OTA3NjdlMS0yYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05kT1hR4PY6W4R3jkKIIO2rFx52NY7OjKP75SC3WO0MbPRw4Stu5wFj62MXd ATk3LxPS14nmAdAgCKh0f9eGDJEgkxUNYVjci4ZNmWaUlK+zIMpLGNleTvdl2ebx L+npdrrfPfOwA2kN/pSim2rZHXgApDm0KuRJuXbeUIu15avrRQHjyuo4lZa23/1T 1tmOHpG73Vu4ldXX8eYoQz2R6e3NiCs+m+K0cHuedXzQjgHwCCSuEUcBHQfAx/n2 uQvZ4JxUbQ2JoVVVEGKtBnNtwsMqCmivxPPLgKr/kapI/drLknvhIh9XPdFyibXA 9aK+75SBTZJyaUB6pMVNQDBfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfa/hgP YqqXpg5HqCakje+Jd/UHMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5mzWSVHMoUM6uaSTHrxBgUxKxGH7ClE6ikg/rgO5MN+BhlGAwB2Js 5QBveYVUHsngbd1oCW8vKYBpb45cDR5EomufhyNXy1CuBADooOx2eWDRGaG1CXGd 1TAgwO43NxxXp+/OHkCMWF3Mvib/NF+1IYanbjHyOg3wWVksLrzz7a8VHsL3i4Ku 8se7Zw3D66grE/DBMxK6qk2t6JuI9TfDpd/T8d1UrpxGFEh6zklaO+IfU5JNpLfm tZfEZCGHu2qAqhJKuTs8wIj8lW867uTmWiYPfUajZdbLMqMkB11H8aI9KErDcYwo GGn8vb0xWsooPRNBtYQIJc2ok/POwI1l -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:05 2025 by rpki-client