$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: CimDkIaYIGX0B5Fm8sTNCL0JiyNiMQB1wHbv544Omoc= Subject key identifier: 38:BF:1C:3B:78:13:E8:8E:8A:B0:F5:8A:47:4D:40:24:9C:18:FE:A5 Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 018F Signing time: Wed 05 Nov 2025 03:38:09 +0000 Manifest this update: Wed 05 Nov 2025 03:38:08 +0000 Manifest next update: Wed 12 Nov 2025 03:38:08 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: hGIlOm5T3OSsOz/V5qZhSbhuyALkgUtgErkW1fHH6kQ=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: iUnEHsfjN1jchtBZnX9gEs2PWdWpqrF2oKCzEFQT8+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Nov 5 03:38:08 2025 GMT Not After : Nov 12 03:38:08 2025 GMT Subject: CN=690ac6a0-7986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:db:93:c8:52:44:6c:11:2c:d2:f9:0e:97: c0:c3:28:e8:8c:a2:5c:3f:65:0e:ca:16:3f:a3:9b: a9:28:b0:72:ac:ce:ff:33:d5:40:18:92:b5:fe:20: d6:fc:77:41:00:3c:aa:5d:80:fc:03:81:9a:26:e4: 5a:f6:af:51:b4:30:9e:05:d8:5f:c1:a5:82:ea:eb: 4d:7e:2f:ff:7e:9a:2d:86:06:99:ff:88:13:61:42: 1e:21:c8:c7:2b:f5:0e:78:2f:25:e8:06:9f:a2:65: 16:0e:38:4f:53:6a:d6:80:00:c6:8f:ef:d6:46:89: ed:d9:1c:ff:a5:bc:02:ae:5f:c5:8d:8a:c8:2e:1e: e0:09:eb:cd:35:e0:00:c0:36:6f:85:f7:e1:99:7d: d2:41:c7:f7:27:77:da:31:de:5b:d0:0a:98:90:7e: fd:f1:bc:0c:f7:92:22:1d:0f:d2:00:45:37:9d:89: 5e:87:d3:cb:17:71:5b:c5:e8:62:69:4b:e0:12:ae: cd:5f:2c:23:d0:7c:16:8b:df:8c:2b:e2:72:60:a3: 0b:3c:b0:ce:be:6d:0c:eb:b8:2b:78:0e:e8:80:9e: e8:12:09:e8:14:ec:5c:f2:1f:a7:2b:3b:41:c1:3d: 80:9f:88:87:5a:6b:02:7b:20:7b:5a:2c:69:03:ea: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BF:1C:3B:78:13:E8:8E:8A:B0:F5:8A:47:4D:40:24:9C:18:FE:A5 X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:22:43:4f:91:24:77:9f:76:af:24:3d:a4:f8:a7:5d:fb:d3: f0:a7:09:1c:f6:bd:04:b6:3f:e2:df:18:c5:89:88:2f:48:87: 09:d8:c7:d4:21:60:b6:26:e8:af:8d:c9:32:12:84:72:4f:a7: f7:ae:ee:f1:12:78:b5:2f:6d:07:40:fe:e9:1a:6e:8d:d0:8b: f5:c2:92:7b:b9:fa:fe:bd:91:f6:2b:d3:c8:c9:92:73:87:ba: 53:68:5c:d8:dd:02:1f:b4:f5:9a:b8:c6:53:5e:e8:e5:88:59: f4:f2:d4:19:59:02:5c:59:dd:51:21:bb:23:92:d8:69:9a:13: 47:1f:d4:71:8a:10:18:21:36:32:7c:cc:2b:5f:17:99:37:f0: fc:8e:a7:5f:38:bd:cb:ec:54:d9:f3:f4:5e:08:44:07:4c:c5: 2d:d3:ad:2e:64:a9:8f:10:36:70:93:ff:4a:4e:dc:d7:9b:8a: 28:c5:ce:96:be:21:d8:8d:08:79:6d:e6:30:e6:1f:df:44:5e: e3:47:26:a9:b5:c9:63:04:0d:29:5b:ca:d5:af:6b:1d:5d:59: cd:de:b5:73:1c:29:b7:cb:e7:75:8a:24:75:46:0f:b7:0f:96: 6b:76:df:60:a3:01:7d:a4:4f:d9:0f:5f:8a:fc:f0:7c:90:69: 52:85:34:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUxMTA1MDMzODA4WhcNMjUxMTEyMDMzODA4WjAYMRYwFAYD VQQDEw02OTBhYzZhMC03OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3Tbk8hSRGwRLNL5DpfAwyjojKJcP2UOyhY/o5upKLByrM7/M9VAGJK1/iDW /HdBADyqXYD8A4GaJuRa9q9RtDCeBdhfwaWC6utNfi//fpothgaZ/4gTYUIeIcjH K/UOeC8l6AafomUWDjhPU2rWgADGj+/WRont2Rz/pbwCrl/FjYrILh7gCevNNeAA wDZvhffhmX3SQcf3J3faMd5b0AqYkH798bwM95IiHQ/SAEU3nYleh9PLF3Fbxehi aUvgEq7NXywj0HwWi9+MK+JyYKMLPLDOvm0M67greA7ogJ7oEgnoFOxc8h+nKztB wT2An4iHWmsCeyB7WixpA+oFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi/HDt4 E+iOirD1ikdNQCScGP6lMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyIkNPkSR3n3avJD2k+Kdd+9Pwpwkc9r0Etj/i3xjFiYgvSIcJ2MfU IWC2JuivjckyEoRyT6f3ru7xEni1L20HQP7pGm6N0Iv1wpJ7ufr+vZH2K9PIyZJz h7pTaFzY3QIftPWauMZTXujliFn08tQZWQJcWd1RIbsjkthpmhNHH9RxihAYITYy fMwrXxeZN/D8jqdfOL3L7FTZ8/ReCEQHTMUt060uZKmPEDZwk/9KTtzXm4ooxc6W viHYjQh5beYw5h/fRF7jRyaptcljBA0pW8rVr2sdXVnN3rVzHCm3y+d1iiR1Rg+3 D5Zrdt9gowF9pE/ZD1+K/PB8kGlShTQ2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:42 2025 by rpki-client