$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json) Hash identifier: Xa4QqI3HPOr362ceJCPsCIgA+rYLm2V4dzvAkPl+Pgs= Subject key identifier: 58:C6:F7:86:C4:E1:69:64:23:14:2B:E3:0B:BD:AE:0D:96:EA:A9:2D Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Certificate serial: 0BAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft Manifest number: 0BA6 Signing time: Tue 04 Nov 2025 19:04:12 +0000 Manifest this update: Tue 04 Nov 2025 19:04:11 +0000 Manifest next update: Tue 11 Nov 2025 19:04:11 +0000 Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: rf4A8WN8ieRAAA3eApDPqtBTNjJrbCRcJg/9Md5rrXw=) 2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Validity Not Before: Nov 4 19:04:11 2025 GMT Not After : Nov 11 19:04:11 2025 GMT Subject: CN=690a4e2b-56cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:50:98:e9:09:3c:0a:cc:2a:d1:62:01:c5: 4a:56:5f:ce:bf:cb:1f:fb:b0:67:7d:fa:62:37:96: e3:15:e7:54:da:5a:c1:45:58:b0:41:6d:e1:d7:ac: b1:ea:f2:d1:3d:3d:5c:a5:70:d5:b7:1d:f2:01:6c: c2:4a:94:d0:ad:15:8c:5d:83:73:34:ff:cd:0e:3b: 39:a3:4d:c7:44:9f:14:37:f4:23:f0:a8:9a:4f:91: 23:45:ec:4c:4b:0c:77:a0:8f:c5:e7:f3:86:47:02: c8:ab:6d:f9:19:13:2f:80:d5:5f:48:87:23:d8:d1: f2:d7:97:e3:f9:af:de:08:ee:18:e8:ca:6c:0c:7f: 1e:00:e7:c2:69:b6:ed:a5:b3:70:b2:34:ab:eb:ec: 72:a8:20:0b:32:8e:97:cb:f4:6d:1d:cf:59:39:92: 31:89:44:f2:5d:4e:a7:f4:f4:53:b4:d5:22:fb:34: f0:16:80:f9:f3:98:c3:40:8b:67:33:28:85:54:6a: db:54:bc:fe:c6:42:c0:db:56:17:4e:ff:16:a5:5e: 55:26:72:2b:36:ea:a5:20:af:a5:69:87:63:66:cf: 98:3f:32:bc:9f:f0:b6:54:9b:d2:c4:61:cb:69:f2: d4:6c:c6:48:a0:78:b1:f4:a2:8d:93:bd:f1:92:23: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C6:F7:86:C4:E1:69:64:23:14:2B:E3:0B:BD:AE:0D:96:EA:A9:2D X509v3 Authority Key Identifier: keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:df:ba:cc:02:27:70:c2:42:18:c0:8d:db:62:d6:00:df:39: 2b:6c:99:d6:04:cc:cb:63:e9:75:9c:6e:b6:3d:e2:f0:5d:d0: f9:ae:c6:9e:74:c5:96:60:41:57:f3:49:a6:e3:34:f8:c9:7e: f2:1d:da:4f:75:ab:86:38:c7:fa:d9:8d:51:5c:ce:98:b4:26: 6f:bb:05:4f:82:e9:7e:99:8f:85:a2:5a:0e:6a:7b:12:af:fd: cb:fd:21:22:6d:cf:77:0c:93:0f:48:19:ab:f5:c3:d5:3a:4a: ee:77:d9:4d:b3:39:c5:60:66:32:5b:78:6e:18:4d:ac:10:19: b2:32:4c:c8:e2:cb:c7:34:4f:6d:e0:0f:ea:0c:2c:8b:6f:e9: f1:30:84:ea:e2:47:c7:95:f6:4d:83:e1:f0:33:fe:f3:24:bb: 5b:5a:ae:f3:13:da:2d:15:e2:ac:ee:c1:c9:d6:f8:c1:15:e4: 48:0d:5f:dc:5e:34:ca:ba:f3:ad:7d:4a:be:d9:d3:95:21:6b: 2f:fa:f3:7d:95:6b:f1:67:ea:a8:40:86:c7:c5:99:77:1a:a2: 0a:46:a0:96:01:cb:3e:9e:70:69:60:d8:ec:28:3d:de:bb:69: b7:61:c4:e9:c4:90:a8:ff:f9:16:fe:ba:8c:53:65:aa:86:8d: dc:42:d6:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC OUI0Q0FCNzcwHhcNMjUxMTA0MTkwNDExWhcNMjUxMTExMTkwNDExWjAYMRYwFAYD VQQDEw02OTBhNGUyYi01NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBJQmOkJPArMKtFiAcVKVl/Ov8sf+7BnffpiN5bjFedU2lrBRViwQW3h16yx 6vLRPT1cpXDVtx3yAWzCSpTQrRWMXYNzNP/NDjs5o03HRJ8UN/Qj8KiaT5EjRexM Swx3oI/F5/OGRwLIq235GRMvgNVfSIcj2NHy15fj+a/eCO4Y6MpsDH8eAOfCabbt pbNwsjSr6+xyqCALMo6Xy/RtHc9ZOZIxiUTyXU6n9PRTtNUi+zTwFoD585jDQItn MyiFVGrbVLz+xkLA21YXTv8WpV5VJnIrNuqlIK+laYdjZs+YPzK8n/C2VJvSxGHL afLUbMZIoHix9KKNk73xkiNrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjG94bE 4WlkIxQr4wu9rg2W6qktMB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjY5RC83OEJGOTQ1MDMyQTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21f SFB2d3F2cFdPWDY1dE1xM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt37rMAidwwkIYwI3bYtYA3zkrbJnWBMzLY+l1nG62PeLwXdD5rsae dMWWYEFX80mm4zT4yX7yHdpPdauGOMf62Y1RXM6YtCZvuwVPgul+mY+FoloOansS r/3L/SEibc93DJMPSBmr9cPVOkrud9lNsznFYGYyW3huGE2sEBmyMkzI4svHNE9t 4A/qDCyLb+nxMITq4kfHlfZNg+HwM/7zJLtbWq7zE9otFeKs7sHJ1vjBFeRIDV/c XjTKuvOtfUq+2dOVIWsv+vN9lWvxZ+qoQIbHxZl3GqIKRqCWAcs+nnBpYNjsKD3e u2m3YcTpxJCo//kW/rqMU2Wqho3cQtYw -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:34 2025 by rpki-client