$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json) Hash identifier: TPuDStkcwruarle4hevHmX1HCHJUI588hcJJ+UtzKv4= Subject key identifier: 04:17:4F:85:79:03:15:77:7D:04:D3:F8:8E:50:0F:81:A3:8F:A4:8B Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft Manifest number: 54 Signing time: Wed 05 Nov 2025 07:25:09 +0000 Manifest this update: Wed 05 Nov 2025 07:25:08 +0000 Manifest next update: Wed 12 Nov 2025 07:25:08 +0000 Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: dgtApNCsi2HkKzUoTIPAgR1P2GmoAJuxBHa8jOac608=) 2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: k8LJciNO3nbjiZjsCJ8G57U38keqVi40DfjRW/V+QTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Nov 5 07:25:08 2025 GMT Not After : Nov 12 07:25:08 2025 GMT Subject: CN=690afbd4-113b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:8b:b7:1c:79:9f:30:a9:82:9a:67:14:be: b3:99:10:a0:4e:94:ff:12:95:da:cb:c3:a7:2f:5c: dc:af:77:9b:ed:c9:05:19:6d:51:5b:d6:0f:c2:63: 82:8a:e3:8d:23:7b:5f:e2:48:ca:e3:c0:61:b4:d5: 75:e5:be:49:06:3d:f3:aa:b0:dd:08:7c:cd:77:a0: b9:75:4a:0c:ad:33:3c:c9:fe:68:32:45:58:e5:2c: e5:3c:61:34:06:76:8c:28:01:8e:b1:72:e8:d9:8d: 33:85:2a:21:19:7f:fe:fd:35:16:d2:44:41:f2:39: 5b:b9:4f:c1:2c:a0:ab:dd:bf:21:3a:41:a1:f4:97: cf:73:05:58:5d:95:90:9e:d7:5d:d4:e6:54:c3:b3: 25:b3:65:1e:9a:0c:f7:1d:05:c1:94:d7:1a:24:cc: ec:89:cb:ca:f1:2f:87:2e:fa:e0:20:25:10:8e:53: 12:79:d5:fc:12:d7:f4:f8:5d:c7:7d:a5:2e:7c:16: 34:ee:24:b1:a3:c4:b6:02:51:ea:bb:b9:f1:a0:60: 64:23:f4:3b:a9:a7:76:74:eb:a8:52:60:87:ee:ed: 54:5f:bc:78:bd:fa:88:fe:9c:b1:ee:2f:c3:7f:23: e0:d4:02:8b:d1:9f:3a:cb:45:36:98:a1:59:80:35: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:17:4F:85:79:03:15:77:7D:04:D3:F8:8E:50:0F:81:A3:8F:A4:8B X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:63:d5:e4:32:39:7e:19:0f:6c:08:79:ee:c9:3b:fe:c6: 7e:7d:7d:ce:22:f6:f5:3b:cb:68:ef:e6:10:15:98:66:fb:0e: 20:8e:fc:b0:73:64:f9:f1:f4:cb:1c:05:2c:9d:35:8c:50:d7: 43:c5:f4:0f:0a:29:b2:a4:12:b4:f4:60:33:ea:c0:47:c3:df: ae:9d:8f:ed:79:1e:a7:2c:01:d9:01:77:b7:82:17:fa:34:0c: e3:b1:55:3e:8d:9f:f1:58:7e:eb:15:00:8f:90:6d:8f:1d:21: 35:19:c9:f5:0a:bc:0e:80:7f:25:a1:55:c8:6a:c8:5b:45:ab: 70:73:37:79:ae:a4:82:3b:ea:3d:e5:14:c8:a5:26:b6:35:f2: 02:b8:4c:f4:7c:db:c1:45:6d:3e:eb:4b:de:b0:a2:e2:eb:e6: 3a:b6:45:2e:97:1d:6a:12:40:77:11:27:72:69:ad:bb:ff:9d: 8b:2d:9c:23:e9:60:2a:49:da:23:cd:6c:3e:d5:ce:fc:ce:f5: fc:b5:78:5b:a5:a1:86:ce:25:8f:29:58:0b:cf:88:ea:54:52: d1:bf:b5:d7:93:00:a9:12:9f:df:9e:37:09:de:8d:a1:ad:41: 67:b3:3e:15:7f:86:d8:32:55:27:b6:c3:62:96:bb:b8:73:d1: 4f:6b:61:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMEM2ODU4MjI4QzMwMTc0ODJCREM3RjM5ODFFODk4Qjk1 NkRBQTAyOTAeFw0yNTExMDUwNzI1MDhaFw0yNTExMTIwNzI1MDhaMBgxFjAUBgNV BAMTDTY5MGFmYmQ0LTExM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEI4u3HHmfMKmCmmcUvrOZEKBOlP8SldrLw6cvXNyvd5vtyQUZbVFb1g/CY4KK 440je1/iSMrjwGG01XXlvkkGPfOqsN0IfM13oLl1SgytMzzJ/mgyRVjlLOU8YTQG dowoAY6xcujZjTOFKiEZf/79NRbSREHyOVu5T8EsoKvdvyE6QaH0l89zBVhdlZCe 113U5lTDsyWzZR6aDPcdBcGU1xokzOyJy8rxL4cu+uAgJRCOUxJ51fwS1/T4Xcd9 pS58FjTuJLGjxLYCUeq7ufGgYGQj9Dupp3Z066hSYIfu7VRfvHi9+oj+nLHuL8N/ I+DUAovRnzrLRTaYoVmANaaTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBBdPhXkD FXd9BNP4jlAPgaOPpIswHwYDVR0jBBgwFoAUDGhYIowwF0gr3H85geiYuVbaoCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzY3QzdBNDJBM0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9D ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdoWUlvd3dGMGdyM0g4NWdlaVl1VmJhb0NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzY3QzdBNDJBM0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0RHaFlJb3d3RjBn cjNIODVnZWlZdVZiYW9Day5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOxY9XkMjl+GQ9sCHnuyTv+xn59fc4i9vU7y2jv5hAVmGb7DiCO/LBz ZPnx9MscBSydNYxQ10PF9A8KKbKkErT0YDPqwEfD366dj+15HqcsAdkBd7eCF/o0 DOOxVT6Nn/FYfusVAI+QbY8dITUZyfUKvA6AfyWhVchqyFtFq3BzN3mupII76j3l FMilJrY18gK4TPR828FFbT7rS96wouLr5jq2RS6XHWoSQHcRJ3Jprbv/nYstnCPp YCpJ2iPNbD7VzvzO9fy1eFuloYbOJY8pWAvPiOpUUtG/tdeTAKkSn9+eNwnejaGt QWezPhV/htgyVSe2w2KWu7hz0U9rYZY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:40:20 2025 by rpki-client