$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: xE70NzFexHEoVx4fy9vKNA47qHwcB9BndVvyDLadjTc= Subject key identifier: 36:3F:20:84:9D:15:DA:37:A4:7F:68:A9:12:F3:DC:F1:37:5B:6E:89 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 02F6 Signing time: Wed 05 Nov 2025 01:26:00 +0000 Manifest this update: Wed 05 Nov 2025 01:25:59 +0000 Manifest next update: Wed 12 Nov 2025 01:25:59 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: OPZzdfeW8ix4zRHqZ3wC9k53ra4qMIESQc8sCR3AvDg=) 2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: oF4weljdyCKoRiSGG2z17wTaQsEcpMts8sv9D62jJPE=) 3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ=) 4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Nov 5 01:25:59 2025 GMT Not After : Nov 12 01:25:59 2025 GMT Subject: CN=690aa7a8-b807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:e1:da:f9:47:64:7c:05:53:13:a8:92:82: 92:71:81:b2:8d:11:fb:ab:20:a1:3a:68:4a:93:bf: 11:0e:2b:05:ee:67:d2:72:f5:b6:58:89:d0:45:fe: d8:36:d4:2e:d1:65:f7:4b:1b:76:e2:d4:6d:5f:6f: 98:cd:56:d6:90:9b:00:08:1c:0e:8c:e7:66:e0:bf: dc:45:b6:2a:84:6b:f2:cc:1f:94:f1:dc:cd:91:45: d2:7f:75:07:79:89:fe:5b:c3:97:86:fe:6e:ec:80: 5c:e9:73:fb:8e:a8:39:0b:4c:9a:59:ea:ba:20:79: 80:f3:18:34:6e:48:25:c3:0c:a6:98:58:cb:68:3f: 8a:be:8c:14:52:20:26:a6:b8:a1:b5:99:49:c9:e8: 00:9c:f7:1b:3a:c3:df:1b:8e:ae:8e:de:82:58:31: cf:af:2c:6b:31:a8:de:7d:51:0e:c3:51:0f:af:08: 3a:53:e1:94:39:87:5e:91:eb:cb:a8:db:fc:c9:88: 10:f7:e2:48:b8:fd:69:8c:af:4e:2f:5c:dd:d5:0f: eb:86:0c:4e:51:b2:b9:80:8f:7c:ca:7b:7a:b2:e7: 0e:83:df:f8:15:0c:8a:d6:03:37:b2:4c:f6:71:51: fe:57:69:42:c4:fd:0a:e5:64:4e:e7:c7:72:93:3f: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:20:84:9D:15:DA:37:A4:7F:68:A9:12:F3:DC:F1:37:5B:6E:89 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:b5:c5:30:2c:6f:35:09:0b:da:25:05:5b:1c:53:93:4f: 06:d3:7e:a6:f7:a0:07:3c:f5:fe:56:22:96:7c:07:de:52:6c: ce:03:88:cf:fe:ab:cd:c3:bb:72:44:67:cb:0e:74:0d:04:de: 73:83:15:cc:d2:c2:84:93:a7:0d:4f:e7:4c:57:8d:5e:0f:4b: 69:84:b8:ab:49:1a:af:b5:e8:69:db:29:cc:bb:32:93:d4:95: 0b:a4:fe:68:20:1d:ed:3e:d5:2f:7c:77:b0:01:bf:32:13:09: 6c:c0:78:0b:8e:2d:89:60:fb:a3:2f:65:43:4d:4e:cf:7f:0e: 73:32:31:68:e6:1f:f5:ca:86:27:13:69:96:d9:fd:e8:34:c2: 5c:0a:63:fc:40:b5:97:2b:86:f8:fa:bb:9b:7e:ea:82:2d:f7: 52:e8:08:7a:e5:5b:a3:c5:e3:ea:69:07:02:b0:52:2b:53:a1: 42:93:ce:19:8c:d6:46:b0:1b:26:8d:4e:a4:b2:4d:f6:15:7d: 0e:c6:96:83:8d:d5:dc:e8:c5:91:23:f9:20:66:9b:da:e4:e0: 26:57:88:8e:a2:00:c1:b5:ec:cf:c2:75:4a:1f:cb:bb:e3:2c: a5:55:11:1f:33:41:5f:dd:12:7e:fd:f5:3f:60:2f:ff:8e:68: 76:9d:cc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjUxMTA1MDEyNTU5WhcNMjUxMTEyMDEyNTU5WjAYMRYwFAYD VQQDEw02OTBhYTdhOC1iODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmHh2vlHZHwFUxOokoKScYGyjRH7qyChOmhKk78RDisF7mfScvW2WInQRf7Y NtQu0WX3Sxt24tRtX2+YzVbWkJsACBwOjOdm4L/cRbYqhGvyzB+U8dzNkUXSf3UH eYn+W8OXhv5u7IBc6XP7jqg5C0yaWeq6IHmA8xg0bkglwwymmFjLaD+KvowUUiAm prihtZlJyegAnPcbOsPfG46ujt6CWDHPryxrMajefVEOw1EPrwg6U+GUOYdekevL qNv8yYgQ9+JIuP1pjK9OL1zd1Q/rhgxOUbK5gI98ynt6sucOg9/4FQyK1gM3skz2 cVH+V2lCxP0K5WRO58dykz9rjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY/IISd Fdo3pH9oqRLz3PE3W26JMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1gbXFMCxvNQkL2iUFWxxTk08G036m96AHPPX+ViKWfAfeUmzOA4jP /qvNw7tyRGfLDnQNBN5zgxXM0sKEk6cNT+dMV41eD0tphLirSRqvtehp2ynMuzKT 1JULpP5oIB3tPtUvfHewAb8yEwlswHgLji2JYPujL2VDTU7Pfw5zMjFo5h/1yoYn E2mW2f3oNMJcCmP8QLWXK4b4+rubfuqCLfdS6Ah65VujxePqaQcCsFIrU6FCk84Z jNZGsBsmjU6ksk32FX0OxpaDjdXc6MWRI/kgZpva5OAmV4iOogDBtezPwnVKH8u7 4yylVREfM0Ff3RJ+/fU/YC//jmh2ncxj -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:48 2025 by rpki-client