$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json) Hash identifier: GKHSwVYKImDrlvBqUjGE+C+oBqOVIENMTQdhLrGsUaY= Subject key identifier: 5F:80:54:4E:A2:07:6F:D0:76:CE:1C:A3:E9:EE:8F:9F:F3:D1:4A:82 Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft Manifest number: 19CB Signing time: Tue 04 Nov 2025 17:38:30 +0000 Manifest this update: Tue 04 Nov 2025 17:38:29 +0000 Manifest next update: Tue 11 Nov 2025 17:38:29 +0000 Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: 3s+irmgJMa4C0m9yf4rvz+BJLvZYjaFPBUFbF4sBEOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9 Validity Not Before: Nov 4 17:38:29 2025 GMT Not After : Nov 11 17:38:29 2025 GMT Subject: CN=690a3a15-c579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:65:98:6c:ac:9c:ec:8b:ba:47:b4:49:65: 63:46:a7:f1:28:8b:38:f4:2b:c5:24:7e:03:24:ef: 05:84:55:e6:04:0d:d8:71:d1:ce:5c:a2:3b:b5:c0: 97:74:ff:ac:5a:74:d9:aa:87:29:a4:a1:45:f4:91: 42:5e:fe:3b:35:f4:cd:87:68:8f:8e:aa:ad:47:44: b9:cc:67:84:5f:39:2d:b4:a7:03:d2:d4:65:61:5e: 81:80:2f:33:59:14:a1:d6:61:f3:2d:19:a1:82:42: d9:71:18:29:c9:8a:9b:4c:8c:43:4c:b1:4c:70:6b: 53:c2:28:42:56:91:8e:11:06:5a:92:10:50:e3:5a: 5d:bb:33:fd:a6:f8:dd:09:ac:67:d5:c3:19:7f:5e: 24:2a:4c:46:c3:a8:0a:0f:69:7d:29:27:55:d6:75: a3:ab:4f:cd:b7:b4:4d:04:3b:66:ce:22:90:17:f7: 81:3e:6c:3b:70:24:3e:07:6c:4b:8f:05:3a:2f:0b: 37:de:57:ee:e6:a6:7e:5c:d4:58:a4:08:3c:c5:d9: 35:44:79:a4:63:8a:06:46:0e:a4:bb:2c:c8:fa:a0: 42:0e:d8:30:57:fa:e3:a2:82:43:35:dc:cc:e7:60: af:3b:1b:33:5a:42:23:39:73:ad:a8:fc:dd:7f:d2: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:54:4E:A2:07:6F:D0:76:CE:1C:A3:E9:EE:8F:9F:F3:D1:4A:82 X509v3 Authority Key Identifier: keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:ff:60:2b:c4:6b:fd:f3:ad:32:17:5b:dc:0f:9f:12:ae: c0:38:67:9b:cb:8a:b0:d7:a9:f0:21:0b:05:4b:fe:78:66:b6: 04:19:d0:86:58:61:c7:6d:0a:40:05:9e:69:98:fa:10:69:cb: bf:20:ac:f3:c9:b5:f4:66:e0:34:29:cd:e1:e6:d3:e0:1a:5c: b0:84:d4:2a:13:9f:6c:7c:f9:8a:27:94:3a:85:e8:42:13:66: 14:39:f4:56:ec:ca:0a:9f:66:36:8d:7c:f0:b0:90:82:f7:e7: 7b:f8:9a:9e:31:ab:b1:fc:2d:d8:48:a3:bd:a2:71:0e:03:2c: d4:ca:85:56:90:e4:45:8f:d1:62:fa:b5:ff:97:bd:36:7d:f9: b0:d7:66:41:9c:6b:32:68:37:28:c4:a1:c2:30:55:43:6e:cf: 89:43:d8:79:b8:07:dc:0a:36:96:70:f7:aa:40:fc:30:9c:6c: 7d:73:04:ed:40:a0:dd:c8:2e:d9:d4:14:29:ef:b2:d7:c4:99: 20:0c:8b:b1:b9:b7:e5:e6:49:09:a2:6c:2e:b7:12:26:12:dd: c2:13:5f:a1:1e:ba:86:6e:16:b2:63:c1:92:54:f2:4d:70:cd: 41:ce:60:c9:12:e6:d2:68:79:43:1e:eb:41:1e:20:42:72:d5: a5:c4:91:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDBFRkFBMDEwRjNCMDZENTMyMTkwRUYzNkVEMjAyODc0 RjgyMDE3QzkwHhcNMjUxMTA0MTczODI5WhcNMjUxMTExMTczODI5WjAYMRYwFAYD VQQDEw02OTBhM2ExNS1jNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCZlmGysnOyLuke0SWVjRqfxKIs49CvFJH4DJO8FhFXmBA3YcdHOXKI7tcCX dP+sWnTZqocppKFF9JFCXv47NfTNh2iPjqqtR0S5zGeEXzkttKcD0tRlYV6BgC8z WRSh1mHzLRmhgkLZcRgpyYqbTIxDTLFMcGtTwihCVpGOEQZakhBQ41pduzP9pvjd Caxn1cMZf14kKkxGw6gKD2l9KSdV1nWjq0/Nt7RNBDtmziKQF/eBPmw7cCQ+B2xL jwU6Lws33lfu5qZ+XNRYpAg8xdk1RHmkY4oGRg6kuyzI+qBCDtgwV/rjooJDNdzM 52CvOxszWkIjOXOtqPzdf9KinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+AVE6i B2/Qds4co+nuj5/z0UqCMB8GA1UdIwQYMBaAFA76oBDzsG1TIZDvNu0gKHT4IBfJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JWTWhrTzgyN1NBb2RQZ2dG OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R2cWdFUE93YlZNaGtPODI3U0FvZFBnZ0Y4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9EdnFnRVBPd2JW TWhrTzgyN1NBb2RQZ2dGOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzZf9gK8Rr/fOtMhdb3A+fEq7AOGeby4qw16nwIQsFS/54ZrYEGdCG WGHHbQpABZ5pmPoQacu/IKzzybX0ZuA0Kc3h5tPgGlywhNQqE59sfPmKJ5Q6hehC E2YUOfRW7MoKn2Y2jXzwsJCC9+d7+JqeMaux/C3YSKO9onEOAyzUyoVWkORFj9Fi +rX/l702ffmw12ZBnGsyaDcoxKHCMFVDbs+JQ9h5uAfcCjaWcPeqQPwwnGx9cwTt QKDdyC7Z1BQp77LXxJkgDIuxubfl5kkJomwutxImEt3CE1+hHrqGbhayY8GSVPJN cM1BzmDJEubSaHlDHutBHiBCctWlxJE4 -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:39 2025 by rpki-client