$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft File: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json) Hash identifier: 2hOo3P7DBckpNTmX1xk/DCr/DGtce2lDFoLzGM+Pixs= Subject key identifier: 8D:0D:43:0C:31:AC:39:9B:5E:5B:A0:47:7E:8D:40:72:29:5F:04:9B Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 Certificate issuer: /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft Manifest number: 027A Signing time: Mon 03 Nov 2025 01:35:46 +0000 Manifest this update: Mon 03 Nov 2025 01:35:45 +0000 Manifest next update: Mon 10 Nov 2025 01:35:45 +0000 Files and hashes: 1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: g5SozCsspk+01LKg+qbLwzg62LL7+KiqY+sZevz0byE=) 2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6 Validity Not Before: Nov 3 01:35:45 2025 GMT Not After : Nov 10 01:35:45 2025 GMT Subject: CN=690806f2-db64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b1:e9:da:75:d4:01:39:25:10:6f:df:dc:79: 9d:a8:76:5d:e4:59:82:9b:28:98:f4:68:e1:0e:27: 9a:ba:aa:4b:31:43:2c:95:f1:1f:1e:39:ef:02:b2: ac:04:1d:a1:51:25:47:70:ff:83:9f:09:28:0b:90: ae:9e:1d:66:79:27:73:8f:97:52:08:61:28:62:2f: 09:ae:5b:ae:d1:c6:09:e2:b0:df:84:d6:10:ac:3b: aa:56:06:a4:a6:0c:5b:0d:55:c2:d8:55:75:85:7a: dc:2c:81:c0:2c:ff:02:df:02:f8:ee:64:02:ac:83: f1:00:b4:f8:8f:71:ff:40:2c:bb:37:f1:5f:25:55: 1e:2f:a4:13:20:5c:4d:18:b2:6b:d7:a3:13:0e:68: 9a:59:29:92:2e:c0:ea:c0:95:d4:06:ff:8f:39:e3: 46:74:1b:c9:7b:70:24:a9:45:9d:a3:56:32:0b:e4: 11:65:a8:bf:8b:52:01:cb:66:63:13:38:a8:ab:5b: 57:7a:ae:f3:79:71:fd:65:a5:98:13:f1:64:18:3a: 9d:df:39:2f:d5:2d:fc:57:fa:7f:c3:25:0c:3c:93: a5:d6:ef:e9:6f:e0:8f:dd:2c:de:a2:85:b4:7a:1e: 6c:df:d4:25:64:9e:74:63:15:19:05:49:ec:e4:af: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:43:0C:31:AC:39:9B:5E:5B:A0:47:7E:8D:40:72:29:5F:04:9B X509v3 Authority Key Identifier: keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:3f:cf:15:31:24:24:16:e1:3f:6f:2b:74:cf:8b:69:b8: 77:22:96:0f:4c:04:0e:6a:f9:6c:c3:51:c2:1a:d0:dc:f2:50: c4:98:cd:17:c9:7d:b8:d9:c1:85:98:0f:c9:13:fd:be:96:6a: f3:41:04:bc:a6:ec:73:13:82:bf:ea:74:d3:79:62:7a:bf:83: 30:42:59:2c:78:fa:12:62:2e:13:08:76:0c:21:2d:f1:32:32: d4:49:ae:30:f7:47:9d:eb:32:08:12:15:c7:09:07:d6:71:2a: 1d:e2:4d:23:bf:ef:cd:31:5d:d1:fa:af:26:2a:06:c5:b4:f2: 7c:57:2a:6f:2a:7a:34:62:1d:b6:b3:51:2e:81:21:bc:04:d5: 36:2b:2d:7e:61:3b:36:c8:7c:68:f4:39:44:1b:12:3d:ed:ec: 68:a9:7f:bb:e5:a2:68:6e:55:67:0b:33:9b:52:c6:6c:6d:e3: 83:bb:e3:46:a5:ff:3d:13:e3:81:90:41:31:96:f4:53:42:8b: 18:28:1b:55:c2:07:d5:22:dc:f8:a8:e1:df:98:a7:89:63:6d: 55:f8:e4:7c:6b:8d:d9:04:cb:81:89:4d:00:97:1b:da:db:3b: f5:13:d3:62:b9:72:41:c3:2b:cd:af:cf:31:0b:b4:43:74:12: 6c:a3:99:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF RTRFRDJGRjYwHhcNMjUxMTAzMDEzNTQ1WhcNMjUxMTEwMDEzNTQ1WjAYMRYwFAYD VQQDEw02OTA4MDZmMi1kYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bHp2nXUATklEG/f3HmdqHZd5FmCmyiY9GjhDieauqpLMUMslfEfHjnvArKs BB2hUSVHcP+DnwkoC5Cunh1meSdzj5dSCGEoYi8Jrluu0cYJ4rDfhNYQrDuqVgak pgxbDVXC2FV1hXrcLIHALP8C3wL47mQCrIPxALT4j3H/QCy7N/FfJVUeL6QTIFxN GLJr16MTDmiaWSmSLsDqwJXUBv+POeNGdBvJe3AkqUWdo1YyC+QRZai/i1IBy2Zj Ezioq1tXeq7zeXH9ZaWYE/FkGDqd3zkv1S38V/p/wyUMPJOl1u/pb+CP3SzeooW0 eh5s39QlZJ50YxUZBUns5K+YWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0NQwwx rDmbXlugR36NQHIpXwSbMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjpT/PFTEkJBbhP28rdM+Labh3IpYPTAQOavlsw1HCGtDc8lDEmM0X yX242cGFmA/JE/2+lmrzQQS8puxzE4K/6nTTeWJ6v4MwQlksePoSYi4TCHYMIS3x MjLUSa4w90ed6zIIEhXHCQfWcSod4k0jv+/NMV3R+q8mKgbFtPJ8VypvKno0Yh22 s1EugSG8BNU2Ky1+YTs2yHxo9DlEGxI97exoqX+75aJoblVnCzObUsZsbeODu+NG pf89E+OBkEExlvRTQosYKBtVwgfVItz4qOHfmKeJY21V+OR8a43ZBMuBiU0Alxva 2zv1E9NiuXJBwyvNr88xC7RDdBJso5nM -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:50 2025 by rpki-client