$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json) Hash identifier: DTnrPsZz3bcU5bSmexFwwYnXkOIBJ5akneyH2rc1j2s= Subject key identifier: 41:50:75:48:5D:2C:0A:00:91:BE:B8:43:DA:A1:9F:6D:D5:5C:97:9D Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft Manifest number: 07C0 Signing time: Tue 04 Nov 2025 21:24:05 +0000 Manifest this update: Tue 04 Nov 2025 21:24:04 +0000 Manifest next update: Tue 11 Nov 2025 21:24:04 +0000 Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: kSite+BTdG1nn0Gni2MbUmgPkvKK2SAZAxiUksS8wMg=) 2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=) 3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Validity Not Before: Nov 4 21:24:04 2025 GMT Not After : Nov 11 21:24:04 2025 GMT Subject: CN=690a6ef5-88fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:c5:90:cb:0a:28:38:ec:49:ec:35:33:cf: be:3f:9f:cd:06:22:b8:93:18:e5:51:97:ea:f6:82: ed:cd:49:fa:db:39:97:90:03:3e:d4:81:66:ac:c5: 4b:cf:9a:1f:c6:e2:39:2e:56:f0:81:42:9b:1a:f0: da:b8:34:c9:2b:34:92:41:d6:d9:11:58:1f:e4:f4: 12:85:a3:7a:4f:b7:6a:3d:72:5d:33:98:85:8b:f7: 0b:e6:06:a4:67:e6:71:32:fa:fe:2b:57:da:52:bb: b2:9a:c7:b7:e2:19:e4:62:91:8e:65:42:33:29:b0: 6d:08:34:b6:c0:e2:d9:76:d5:99:fe:2c:0b:bf:b6: 42:b7:cb:7f:00:83:fb:2e:64:88:38:d0:44:b0:0c: 31:ff:a8:51:9e:de:e8:fc:03:e2:e4:7b:01:48:fe: e8:fd:d1:9e:93:d1:87:5c:58:f6:88:e5:e4:52:fd: 6d:68:e3:6e:dc:39:0f:89:14:15:2c:f2:22:c6:70: d8:e9:02:75:04:68:3f:20:e7:94:02:45:ef:cc:b5: 60:3f:1e:64:b1:c1:57:e9:f2:94:bb:44:11:40:fc: dd:c6:60:97:4e:08:bf:6c:1e:95:07:6c:6d:42:fe: f6:09:c6:cb:97:3a:c4:41:98:76:f6:7b:58:9c:c9: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:75:48:5D:2C:0A:00:91:BE:B8:43:DA:A1:9F:6D:D5:5C:97:9D X509v3 Authority Key Identifier: keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:3d:27:ec:72:88:0a:19:99:70:12:5c:40:d6:d0:49:93: 0d:4d:23:ed:5e:32:ef:5e:a5:84:57:ef:73:4d:45:95:7a:48: 3d:ba:4a:ea:45:e6:08:4a:a9:22:85:0d:d5:fc:c9:57:e8:2c: 56:f5:b6:49:6c:f1:60:d2:20:ff:ad:ec:b2:20:c7:90:a5:fe: 56:96:64:46:1f:67:ff:60:94:6d:36:75:93:a7:ea:73:a3:e6: 02:32:40:f0:d8:15:dd:b0:7d:f0:2b:04:f1:30:c4:71:dd:2b: 5a:62:a7:9b:9f:3a:7f:d2:e6:0e:eb:d1:08:2f:1d:fb:65:12: 56:79:7d:6e:b1:1f:e8:63:ef:67:45:11:d1:f6:20:49:d1:b7: 0f:5f:1e:ac:54:9c:22:29:e5:93:3f:f4:bd:3e:fe:33:36:5f: 11:db:fd:79:9b:0b:c1:1f:5c:92:1d:4f:1f:40:98:78:8f:90: 69:a4:d5:64:5d:60:92:73:7c:65:86:8e:09:3e:0d:ca:33:71: 53:0c:b4:15:6c:58:9f:0a:8c:6a:b6:69:8c:4d:df:92:6d:8a: 2b:8e:fd:08:f9:8a:05:b1:38:c2:ea:f0:c8:26:6c:39:d4:9c: c1:9a:fb:c3:20:1a:0e:fc:f4:cd:65:92:aa:54:98:55:81:84: c6:84:02:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB RjlCMUQzNTgwHhcNMjUxMTA0MjEyNDA0WhcNMjUxMTExMjEyNDA0WjAYMRYwFAYD VQQDEw02OTBhNmVmNS04OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwHFkMsKKDjsSew1M8++P5/NBiK4kxjlUZfq9oLtzUn62zmXkAM+1IFmrMVL z5ofxuI5LlbwgUKbGvDauDTJKzSSQdbZEVgf5PQShaN6T7dqPXJdM5iFi/cL5gak Z+ZxMvr+K1faUruymse34hnkYpGOZUIzKbBtCDS2wOLZdtWZ/iwLv7ZCt8t/AIP7 LmSIONBEsAwx/6hRnt7o/APi5HsBSP7o/dGek9GHXFj2iOXkUv1taONu3DkPiRQV LPIixnDY6QJ1BGg/IOeUAkXvzLVgPx5kscFX6fKUu0QRQPzdxmCXTgi/bB6VB2xt Qv72CcbLlzrEQZh29ntYnMmG/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFQdUhd LAoAkb64Q9qhn23VXJedMB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2 aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmqj0n7HKIChmZcBJcQNbQSZMNTSPtXjLvXqWEV+9zTUWVekg9ukrq ReYISqkihQ3V/MlX6CxW9bZJbPFg0iD/reyyIMeQpf5WlmRGH2f/YJRtNnWTp+pz o+YCMkDw2BXdsH3wKwTxMMRx3StaYqebnzp/0uYO69EILx37ZRJWeX1usR/oY+9n RRHR9iBJ0bcPXx6sVJwiKeWTP/S9Pv4zNl8R2/15mwvBH1ySHU8fQJh4j5BppNVk XWCSc3xlho4JPg3KM3FTDLQVbFifCoxqtmmMTd+SbYorjv0I+YoFsTjC6vDIJmw5 1JzBmvvDIBoO/PTNZZKqVJhVgYTGhALg -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:49 2025 by rpki-client