$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: BJZXaXBMnqJcwqXkImDBw0BmRSnwzvic66jsS3AvG5g= Subject key identifier: A1:76:0B:97:10:84:0E:FC:0C:CF:D4:03:0D:C7:A1:39:AF:86:E7:86 Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 01A6 Signing time: Wed 05 Nov 2025 03:30:44 +0000 Manifest this update: Wed 05 Nov 2025 03:30:43 +0000 Manifest next update: Wed 12 Nov 2025 03:30:43 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: 6PQR7TGXvvI9ttax/5Uv1siF3q2IOuXaoWrK+jTlHbw=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: dRIa1L+Dk+ECeqLpFjf2uz44Cfej3F1HAm+B1Eo0OQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: Nov 5 03:30:43 2025 GMT Not After : Nov 12 03:30:43 2025 GMT Subject: CN=690ac4e3-7248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:e9:51:57:17:e0:da:b9:13:7e:b7:71:81: d4:8a:29:5c:1d:33:d6:11:5c:4c:21:eb:63:87:32: e8:5c:ed:ae:ee:5c:43:0f:dd:84:0b:77:55:5d:41: 58:ea:a8:0a:13:78:0a:54:be:16:99:05:0f:28:42: b3:4d:9b:b7:f6:3a:50:fb:68:86:2e:82:e7:36:82: 1a:5f:01:f3:67:01:02:83:e1:98:05:51:97:06:00: 77:03:ee:5d:44:85:b6:30:2f:9d:49:2b:b7:35:3f: 46:af:03:2b:86:d2:52:ce:5f:06:c5:a5:fc:07:2f: 17:86:15:da:0f:83:ab:70:d5:7c:fb:57:d6:d9:63: 81:6a:10:67:f4:54:f0:10:13:ee:d6:1e:09:8d:f7: c4:60:0f:74:1e:54:b1:cb:b2:04:5d:d9:de:8c:7d: f8:eb:b4:ee:8b:1e:0c:88:ed:ec:32:e0:79:6b:86: e0:7f:99:cd:3e:53:0c:65:fd:81:90:58:31:3a:ea: 49:a2:1b:66:66:42:18:23:46:95:67:d5:5f:06:b2: 7d:1f:81:1b:37:55:44:ef:d6:31:97:94:b1:e0:c1: f8:fa:a0:d5:a8:a2:15:6c:37:c9:f4:db:1a:0a:2a: ab:05:d8:0e:83:11:f0:fd:6a:66:55:12:7c:70:73: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:76:0B:97:10:84:0E:FC:0C:CF:D4:03:0D:C7:A1:39:AF:86:E7:86 X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ac:d1:28:63:d9:37:f1:c9:3b:e8:e6:be:b5:21:8b:42:eb: 5b:35:39:57:83:c5:de:91:e0:85:6c:41:d3:a9:ad:1c:da:05: af:a5:50:bb:b9:3c:6c:cf:0f:ff:f0:eb:d3:28:6d:f6:c6:99: ca:84:b8:11:b8:9b:d3:6b:9a:bc:d7:2b:55:3a:94:e6:f3:0c: a1:0c:46:ee:5e:e3:5d:8a:ca:8a:c0:f7:3f:1c:07:fd:5b:09: 99:38:30:71:fe:3a:69:86:3e:e8:99:2b:13:74:56:71:53:94: 90:a6:08:2c:ef:34:ca:a9:9f:5f:7e:ba:bf:b1:ff:43:11:57: 3d:52:d1:1e:2d:20:ae:58:d7:b9:1e:55:dd:c0:09:13:cf:04: 7e:13:e2:5e:a8:c2:ce:6d:c8:af:d1:48:c9:64:ce:f7:e4:89: c4:97:29:43:c9:7f:59:0b:36:69:83:93:53:44:bb:71:d8:7e: 70:7a:c5:11:9c:53:d2:f0:50:52:40:13:82:f6:f4:bb:06:ff: f8:5b:e3:6b:e2:0a:35:ab:ef:b0:98:96:25:67:16:ae:5a:95: 86:64:ce:9b:2a:4c:18:70:42:d7:0a:22:44:78:42:07:1f:58: b5:81:8d:4e:3d:f0:47:c9:85:ce:6d:b6:56:c7:7e:f5:7c:94: ed:af:b7:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUxMTA1MDMzMDQzWhcNMjUxMTEyMDMzMDQzWjAYMRYwFAYD VQQDEw02OTBhYzRlMy03MjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupHpUVcX4Nq5E363cYHUiilcHTPWEVxMIetjhzLoXO2u7lxDD92EC3dVXUFY 6qgKE3gKVL4WmQUPKEKzTZu39jpQ+2iGLoLnNoIaXwHzZwECg+GYBVGXBgB3A+5d RIW2MC+dSSu3NT9GrwMrhtJSzl8GxaX8By8XhhXaD4OrcNV8+1fW2WOBahBn9FTw EBPu1h4JjffEYA90HlSxy7IEXdnejH3467Tuix4MiO3sMuB5a4bgf5nNPlMMZf2B kFgxOupJohtmZkIYI0aVZ9VfBrJ9H4EbN1VE79Yxl5Sx4MH4+qDVqKIVbDfJ9Nsa CiqrBdgOgxHw/WpmVRJ8cHPA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF2C5cQ hA78DM/UAw3HoTmvhueGMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIrNEoY9k38ck76Oa+tSGLQutbNTlXg8XekeCFbEHTqa0c2gWvpVC7 uTxszw//8OvTKG32xpnKhLgRuJvTa5q81ytVOpTm8wyhDEbuXuNdisqKwPc/HAf9 WwmZODBx/jpphj7omSsTdFZxU5SQpggs7zTKqZ9ffrq/sf9DEVc9UtEeLSCuWNe5 HlXdwAkTzwR+E+JeqMLObciv0UjJZM735InElylDyX9ZCzZpg5NTRLtx2H5wesUR nFPS8FBSQBOC9vS7Bv/4W+Nr4go1q++wmJYlZxauWpWGZM6bKkwYcELXCiJEeEIH H1i1gY1OPfBHyYXObbZWx371fJTtr7eB -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:50 2025 by rpki-client