$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: KxnL6v8hWuLEjcdgPSfcANvhly9ewCNSuJkXJd/7Bj8= Subject key identifier: 10:26:4E:56:94:6E:F9:9E:24:12:16:75:07:08:D6:6B:9B:88:C5:37 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 09D6 Signing time: Tue 04 Nov 2025 20:01:39 +0000 Manifest this update: Tue 04 Nov 2025 20:01:39 +0000 Manifest next update: Tue 11 Nov 2025 20:01:39 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: qWGqHUrIYwrd+QnHyXuHZ015TP32VQFQ69qMUXdgxYA=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Nov 4 20:01:39 2025 GMT Not After : Nov 11 20:01:39 2025 GMT Subject: CN=690a5ba3-9b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:9f:56:1e:c8:95:d0:d5:75:6b:eb:8a:56: 54:87:cb:9f:21:ba:25:64:c3:a9:db:3b:cf:11:a5: 53:3e:7f:39:62:50:cd:06:80:1b:6a:bb:3b:16:52: a3:55:1a:04:73:bd:3e:34:cd:83:96:9f:60:43:62: d9:0d:90:c7:89:3a:43:88:70:ba:15:ba:c3:0a:1c: 2c:78:e9:c3:82:4e:08:2e:3a:41:8b:15:e9:3f:3d: 53:14:19:51:e7:9e:34:55:ce:8b:93:70:48:0b:5a: 8d:78:17:86:bc:87:c7:f2:e6:78:dc:5d:04:91:32: 42:8d:49:08:69:fa:59:78:5e:55:e6:76:28:5a:60: 7b:35:e8:80:27:80:0d:e9:d8:c8:22:14:1c:f9:1a: 5d:b3:69:b2:26:ab:91:d0:72:ef:67:b9:be:7c:a1: 9c:35:af:f5:ae:01:dc:fa:fb:99:5f:ac:e3:34:8b: 76:54:80:52:ef:24:16:c1:cf:a8:15:27:a2:00:7d: b6:70:a4:a8:d5:9e:3e:01:33:b3:91:e6:a7:1b:53: a4:5b:75:58:12:3f:37:9d:b5:03:6e:8b:8a:43:63: d9:b8:46:9e:e0:64:a7:fa:9c:be:10:22:ac:63:75: db:b1:30:63:80:04:bd:68:3a:68:2d:b2:bc:a9:82: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:26:4E:56:94:6E:F9:9E:24:12:16:75:07:08:D6:6B:9B:88:C5:37 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b0:e9:b2:b8:14:89:62:34:2c:ca:65:26:7f:05:ee:06:ae: 03:38:29:a8:95:38:87:06:37:f2:74:b7:80:46:e6:bd:92:2d: 98:52:54:44:81:8e:ea:89:2a:68:e0:b7:67:8a:0c:2b:06:21: ee:b3:eb:2b:f7:3c:64:4c:fa:ff:9d:e6:59:af:f4:17:1f:cf: f2:65:38:88:db:ad:c8:c9:d4:aa:12:57:94:4b:14:33:3b:ff: 2f:22:9e:5c:da:ff:d8:a7:92:39:65:de:00:b0:73:21:93:8a: b7:7f:83:0c:fb:0c:33:d5:97:e0:43:78:8c:9f:32:c7:ed:24: 24:7c:46:a3:a6:d6:ba:b4:10:10:af:b2:85:36:3d:c0:0d:69: 78:c0:c7:e8:d9:a0:de:bf:df:53:bb:61:fd:a6:2d:72:94:82: de:a7:4f:c4:81:6e:16:4c:d5:7b:db:4d:ef:c5:ad:a6:dd:5a: e7:ef:15:c6:75:0a:c2:2e:f8:5e:3a:e3:8e:b3:50:3f:d5:64: 46:78:3c:ed:0b:f0:fc:b1:bc:55:33:4d:d2:2b:db:60:67:10: d9:e1:ab:49:54:30:83:14:c8:27:19:69:ee:1a:48:3d:e0:9d: 36:a3:c0:81:f7:4e:48:b0:98:2e:37:84:54:cc:b7:48:51:42: c3:9b:11:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUxMTA0MjAwMTM5WhcNMjUxMTExMjAwMTM5WjAYMRYwFAYD VQQDEw02OTBhNWJhMy05YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIGfVh7IldDVdWvrilZUh8ufIbolZMOp2zvPEaVTPn85YlDNBoAbars7FlKj VRoEc70+NM2Dlp9gQ2LZDZDHiTpDiHC6FbrDChwseOnDgk4ILjpBixXpPz1TFBlR 5540Vc6Lk3BIC1qNeBeGvIfH8uZ43F0EkTJCjUkIafpZeF5V5nYoWmB7NeiAJ4AN 6djIIhQc+Rpds2myJquR0HLvZ7m+fKGcNa/1rgHc+vuZX6zjNIt2VIBS7yQWwc+o FSeiAH22cKSo1Z4+ATOzkeanG1OkW3VYEj83nbUDbouKQ2PZuEae4GSn+py+ECKs Y3XbsTBjgAS9aDpoLbK8qYK0zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAmTlaU bvmeJBIWdQcI1mubiMU3MB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4sOmyuBSJYjQsymUmfwXuBq4DOCmolTiHBjfydLeARua9ki2YUlRE gY7qiSpo4LdnigwrBiHus+sr9zxkTPr/neZZr/QXH8/yZTiI263IydSqEleUSxQz O/8vIp5c2v/Yp5I5Zd4AsHMhk4q3f4MM+wwz1ZfgQ3iMnzLH7SQkfEajpta6tBAQ r7KFNj3ADWl4wMfo2aDev99Tu2H9pi1ylILep0/EgW4WTNV7203vxa2m3Vrn7xXG dQrCLvheOuOOs1A/1WRGeDztC/D8sbxVM03SK9tgZxDZ4atJVDCDFMgnGWnuGkg9 4J02o8CB905IsJguN4RUzLdIUULDmxGY -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:49 2025 by rpki-client