$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json) Hash identifier: cX6Xvy/+vIAgA17ugcOaBQ/2GBqQj4BgGLyflwutvJk= Subject key identifier: 67:2E:07:B9:34:D5:2E:E3:E0:D7:AB:1A:D0:06:57:FD:AE:3D:8F:01 Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft Manifest number: DB Signing time: Wed 05 Nov 2025 05:46:04 +0000 Manifest this update: Wed 05 Nov 2025 05:46:04 +0000 Manifest next update: Wed 12 Nov 2025 05:46:03 +0000 Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: WaUTHT3vPtfYMNmrtgDxF7paODjG0k3EiI0sHTr/K3k=) 2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=) 3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Validity Not Before: Nov 5 05:46:04 2025 GMT Not After : Nov 12 05:46:03 2025 GMT Subject: CN=690ae49c-d894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:d0:a2:e2:00:54:a0:85:27:cd:a1:38:ed: 23:2d:6b:2e:6e:79:11:85:6f:c8:2c:bc:7a:54:95: 6b:d9:88:db:b9:cb:9e:fa:ef:cf:a8:aa:cf:d0:b8: e4:da:80:8c:5d:eb:4d:c0:3e:1b:a1:b3:75:4f:bf: dd:bf:61:10:5a:65:5f:6b:c9:44:ca:05:f3:c8:73: 89:8c:37:c2:49:75:b5:34:50:fe:d7:3f:cb:fa:72: 18:a0:b6:6a:ec:20:a1:fc:79:00:9a:1b:f6:4e:73: 68:53:25:28:91:0a:31:89:51:51:32:88:76:e0:b5: d4:fc:f9:1e:79:01:c2:b2:b4:0b:0b:6e:52:d1:b6: da:c7:c9:69:b7:ed:a8:e7:ee:cf:57:26:a7:d5:bb: 59:79:34:63:a7:e7:b9:8f:97:96:45:de:eb:51:69: a2:b6:2c:d8:0e:53:cf:53:4c:10:a4:46:24:33:8d: 5d:0c:81:63:5d:0d:b7:6e:12:91:2b:c7:0e:4f:ae: 34:ec:cd:d3:14:2c:31:07:2c:c2:df:1f:b3:d4:d3: ec:32:13:18:f6:cb:87:eb:cc:8c:0d:4c:2c:0c:81: 76:6a:c0:0f:ed:d9:b7:4c:90:f7:3c:47:bf:37:ce: 38:1c:4e:fe:6c:c7:5a:e6:19:b4:91:c1:c5:a5:b8: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:07:B9:34:D5:2E:E3:E0:D7:AB:1A:D0:06:57:FD:AE:3D:8F:01 X509v3 Authority Key Identifier: keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c3:f1:c1:b9:04:27:fe:32:ad:9d:48:aa:ef:a5:95:23:02: 83:cc:39:32:5d:05:f9:0a:42:9e:50:83:5c:fb:44:59:d9:9f: 72:41:bd:d7:a0:65:69:f9:48:8e:51:eb:93:a9:26:50:7a:c3: 42:9a:de:1c:26:07:82:fd:82:fa:2e:06:ab:13:7c:b7:70:88: d5:14:ac:4c:59:c2:77:bc:9d:8f:a2:d3:85:ee:24:aa:eb:03: ae:54:e7:2a:2a:db:d5:dc:0b:29:61:40:5c:e0:1e:41:17:74: 15:83:43:03:75:c6:cc:47:6d:1e:d3:32:f8:7f:f1:b3:92:c1: 27:77:cb:95:1b:fb:c9:8f:4e:ac:a1:bc:86:fb:5a:05:9b:69: 34:f2:f1:3a:74:8d:47:17:03:f1:70:dc:9e:76:98:e4:34:4b: 50:74:29:9d:13:b5:4a:29:09:7c:83:43:9c:ef:5a:8c:35:b6: c0:43:b9:93:d7:7b:9d:0c:05:06:db:35:d8:dc:e3:8c:5c:6b: 4d:03:42:b1:1d:df:90:c5:e8:11:df:cb:28:7b:83:4e:87:66: 29:89:ff:6d:c4:48:16:c7:68:88:57:a2:65:6b:28:90:bf:27: 49:3a:8c:5b:44:f7:e7:19:71:f4:c8:ed:eb:a4:db:1b:c8:fb: 78:a8:52:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE4RTIxMTAvBgNVBAUTKDBDMDUyNDNCN0VGNTU2MTFFNDBBNERCQkY3RkU3RTkx MjA5MkE2NTIwHhcNMjUxMTA1MDU0NjA0WhcNMjUxMTEyMDU0NjAzWjAYMRYwFAYD VQQDEw02OTBhZTQ5Yy1kODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy/QouIAVKCFJ82hOO0jLWsubnkRhW/ILLx6VJVr2Yjbucue+u/PqKrP0Ljk 2oCMXetNwD4bobN1T7/dv2EQWmVfa8lEygXzyHOJjDfCSXW1NFD+1z/L+nIYoLZq 7CCh/HkAmhv2TnNoUyUokQoxiVFRMoh24LXU/PkeeQHCsrQLC25S0bbax8lpt+2o 5+7PVyan1btZeTRjp+e5j5eWRd7rUWmitizYDlPPU0wQpEYkM41dDIFjXQ23bhKR K8cOT6407M3TFCwxByzC3x+z1NPsMhMY9suH68yMDUwsDIF2asAP7dm3TJD3PEe/ N844HE7+bMda5hm0kcHFpbh/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcuB7k0 1S7j4NerGtAGV/2uPY8BMB8GA1UdIwQYMBaAFAwFJDt+9VYR5ApNu/f+fpEgkqZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QThFMi9BNDUxRDk4NDZG MkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZoSGtDazI3OV81LWtTQ1Nw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3BsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QThFMi9BNDUxRDk4NDZGMkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZo SGtDazI3OV81LWtTQ1NwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnw/HBuQQn/jKtnUiq76WVIwKDzDkyXQX5CkKeUINc+0RZ2Z9yQb3X oGVp+UiOUeuTqSZQesNCmt4cJgeC/YL6LgarE3y3cIjVFKxMWcJ3vJ2PotOF7iSq 6wOuVOcqKtvV3AspYUBc4B5BF3QVg0MDdcbMR20e0zL4f/GzksEnd8uVG/vJj06s obyG+1oFm2k08vE6dI1HFwPxcNyedpjkNEtQdCmdE7VKKQl8g0Oc71qMNbbAQ7mT 13udDAUG2zXY3OOMXGtNA0KxHd+QxegR38soe4NOh2Ypif9txEgWx2iIV6JlayiQ vydJOoxbRPfnGXH0yO3rpNsbyPt4qFK8 -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:15 2025 by rpki-client