$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: 7TDxKqVe27l5htXlpUUobqEQdxbRQ2JNVCvs44PNuSE= Subject key identifier: 97:6D:11:65:ED:CA:A6:BB:CA:AE:11:7C:7A:D8:EE:F8:AC:FF:EF:2D Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 109A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1085 Signing time: Tue 04 Nov 2025 17:27:57 +0000 Manifest this update: Tue 04 Nov 2025 17:27:57 +0000 Manifest next update: Tue 11 Nov 2025 17:27:57 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: BgIesGVfaDWYW9Lro2PLZ49AcAhPQZp85ea4ufsqqhw=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4250 (0x109a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Nov 4 17:27:57 2025 GMT Not After : Nov 11 17:27:57 2025 GMT Subject: CN=690a379d-9a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:73:02:44:39:d6:e8:d8:a5:dc:8b:06:14: 11:7e:5b:2c:aa:73:fd:79:bf:df:6b:f8:08:24:53: 08:2b:24:dc:de:03:07:56:86:6e:97:ff:38:04:b8: 7e:96:c5:1b:cc:3a:24:c7:30:16:3a:a0:a8:ca:c4: 6a:13:41:87:b6:96:b3:ea:69:5a:0a:ec:37:bf:dd: 11:2f:46:7c:79:4e:e0:95:24:cf:48:28:71:25:94: 40:fd:36:cd:b0:74:eb:58:42:74:6b:c8:de:b9:4d: 0a:57:90:99:92:7d:99:d3:6c:94:ef:1b:15:9b:b6: 05:b0:ec:96:98:67:aa:38:cf:6f:b7:1c:18:6c:e4: b9:5a:11:65:ca:c4:52:3a:2f:85:b6:0e:19:13:fd: ca:40:58:fd:c0:64:d9:c2:bd:d2:4b:dc:6f:72:14: 77:a1:7f:1b:c6:c9:3d:0c:b2:a8:72:3b:7b:09:ef: 45:94:0c:89:53:1e:7a:f0:01:50:fe:93:f4:c7:f8: 77:4e:88:24:14:d5:98:79:5d:8e:d1:58:4b:73:99: 39:81:84:ce:fc:02:ea:33:cf:2d:6d:54:3e:d8:65: 63:6f:f9:5e:54:4d:d3:7c:da:f6:bd:c7:7d:14:6a: 04:3a:70:b3:b1:92:fd:09:49:a1:b1:23:5f:3f:c1: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:11:65:ED:CA:A6:BB:CA:AE:11:7C:7A:D8:EE:F8:AC:FF:EF:2D X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:0b:87:ab:2f:ca:c2:28:d2:36:fb:5b:94:f1:e0:d4:52: 21:fd:76:3c:c2:21:84:ed:c6:2c:b5:cb:eb:ee:a7:a2:53:2e: b0:fc:fe:ec:36:f0:aa:bc:62:38:d9:26:bd:b8:e8:2d:1e:88: 3b:1c:0f:fe:0a:aa:eb:db:42:43:4e:a6:9f:ab:73:32:a6:3b: 1d:d1:54:19:36:1e:4c:7d:0c:1f:5b:11:40:3b:44:75:fb:0f: a4:0d:88:ad:d4:8c:cc:3c:77:f3:dd:71:ae:20:e9:bd:ff:ea: f0:f0:dc:d2:bc:72:a2:d4:a5:e4:ab:ee:4f:ea:7d:56:45:47: e0:44:ee:c8:18:b4:99:cf:46:69:13:09:b9:50:9e:d9:80:14: 69:21:dd:75:5e:79:c8:f2:f3:7d:fd:6f:ee:b4:eb:43:f5:9c: ae:8e:8c:b0:97:2b:60:2b:b0:99:d2:48:82:fd:29:33:a8:69: 06:63:71:a0:e8:27:9f:56:ed:e7:d1:47:51:5b:6e:e6:38:99: 76:0c:a4:dd:ec:f0:41:e8:41:5d:2d:3d:99:42:44:10:5f:86: c2:ea:d0:ad:5d:e7:2f:b9:72:1d:04:43:96:eb:48:fd:52:f3: b6:5a:e7:a7:0d:5b:9d:fe:cc:44:ab:e8:95:03:1f:23:38:ac: 32:1a:a8:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUxMTA0MTcyNzU3WhcNMjUxMTExMTcyNzU3WjAYMRYwFAYD VQQDEw02OTBhMzc5ZC05YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3pzAkQ51ujYpdyLBhQRflssqnP9eb/fa/gIJFMIKyTc3gMHVoZul/84BLh+ lsUbzDokxzAWOqCoysRqE0GHtpaz6mlaCuw3v90RL0Z8eU7glSTPSChxJZRA/TbN sHTrWEJ0a8jeuU0KV5CZkn2Z02yU7xsVm7YFsOyWmGeqOM9vtxwYbOS5WhFlysRS Oi+Ftg4ZE/3KQFj9wGTZwr3SS9xvchR3oX8bxsk9DLKocjt7Ce9FlAyJUx568AFQ /pP0x/h3TogkFNWYeV2O0VhLc5k5gYTO/ALqM88tbVQ+2GVjb/leVE3TfNr2vcd9 FGoEOnCzsZL9CUmhsSNfP8EmfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdtEWXt yqa7yq4RfHrY7vis/+8tMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJVAuHqy/KwijSNvtblPHg1FIh/XY8wiGE7cYstcvr7qeiUy6w/P7s NvCqvGI42Sa9uOgtHog7HA/+Cqrr20JDTqafq3Mypjsd0VQZNh5MfQwfWxFAO0R1 +w+kDYit1IzMPHfz3XGuIOm9/+rw8NzSvHKi1KXkq+5P6n1WRUfgRO7IGLSZz0Zp Ewm5UJ7ZgBRpId11XnnI8vN9/W/utOtD9ZyujoywlytgK7CZ0kiC/SkzqGkGY3Gg 6CefVu3n0UdRW27mOJl2DKTd7PBB6EFdLT2ZQkQQX4bC6tCtXecvuXIdBEOW60j9 UvO2WuenDVud/sxEq+iVAx8jOKwyGqjt -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:38 2025 by rpki-client