$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft File: _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json) Hash identifier: mBdPlqKXwk8xZ7aT3p9oVhOKB0EGlrqAc6HhhUl5874= Subject key identifier: F4:64:F6:8B:DB:AE:37:CA:BD:0A:17:0B:F5:01:25:5E:E6:5E:36:98 Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft Manifest number: 0875 Signing time: Sun 02 Nov 2025 20:34:58 +0000 Manifest this update: Sun 02 Nov 2025 20:34:57 +0000 Manifest next update: Sun 09 Nov 2025 20:34:57 +0000 Files and hashes: 1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: E56OOo2XlhmL39MRAFPAj0soJarwHIYIn4+tAnpAh7A=) 2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: dUADLZNofYstB4J1GHJqZ4NyoXP/5OBBFPnTwTmX5d0=) 3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: pVe/D2y8+Q5khNjEW30/uK4SviswKm/bN634mRuECH4=) 4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: JKAxoURLcld4TYBs+HuThRABfXOXWBihIh336+ir050=) 5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Vhzmp3txj0Xul7ynXkTKnMTWBScHUp4m7KHYrp1yvUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B Validity Not Before: Nov 2 20:34:57 2025 GMT Not After : Nov 9 20:34:57 2025 GMT Subject: CN=6907c071-a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:ce:c2:81:10:c9:15:49:d7:b2:4c:de:20: 60:f8:e0:15:b3:2d:97:3c:5b:54:2e:b3:b4:d4:e5: 96:2d:70:bf:28:03:a9:bf:e0:89:2e:84:d3:8b:01: 76:5d:8a:76:a8:7b:de:e1:ef:e7:7a:c6:2e:65:aa: 30:42:a8:20:dd:5f:b3:b9:ef:91:c4:a6:4e:b8:97: 4b:69:a1:2e:cb:2a:fe:be:22:68:74:25:32:16:2a: bc:fa:29:b1:84:b6:2a:eb:08:08:23:b9:95:bf:02: 63:d9:64:5a:f8:62:de:c3:18:22:40:29:51:90:2a: da:c1:f9:eb:45:36:dd:8b:dd:e0:47:c1:c1:51:04: d4:7e:da:45:2b:8a:a5:ca:8a:47:e2:67:c4:72:ad: d6:8b:90:47:8f:57:fe:2c:be:5a:e7:f5:3c:ee:f8: cc:8b:0a:bd:16:ba:97:a0:04:85:91:88:f5:42:ed: a4:f9:ad:e5:c8:9e:72:f6:92:f5:2f:93:2c:66:40: 2e:91:f3:f7:47:e5:fe:b9:a7:06:13:58:0e:0c:df: 2a:f7:08:89:eb:17:e7:66:a3:b8:dd:49:b5:56:d3: 3f:ab:4e:8f:e6:15:6f:d4:60:af:0e:f2:b3:23:9d: 48:72:55:22:f4:32:e9:11:05:c5:f4:a8:fd:63:39: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:F6:8B:DB:AE:37:CA:BD:0A:17:0B:F5:01:25:5E:E6:5E:36:98 X509v3 Authority Key Identifier: keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:34:5b:fc:7d:57:d1:7e:7f:f1:5d:09:1c:4a:66:2d:52:e0: 05:e2:23:ce:b5:c5:93:32:4e:6a:b2:5e:b8:42:94:07:59:29: b5:5c:35:a5:c8:f6:6b:43:dd:f4:fd:35:72:25:d8:e0:91:14: 59:bc:fb:62:6f:aa:20:aa:c3:4f:50:6d:d1:58:7c:c6:18:eb: 59:0e:16:60:20:2d:10:49:ab:51:f5:21:37:57:ad:8b:31:47: 4a:70:07:b8:07:e6:57:5f:a8:da:72:75:69:a8:1a:6f:c2:67: 6a:55:3b:0c:cf:9d:7f:9d:61:ed:3d:8f:da:c8:26:cb:93:f5: 26:f6:b7:35:d6:ff:4b:f0:d5:99:f3:93:bd:ac:40:fe:d3:18: 60:08:91:43:8b:f0:81:e3:59:9e:63:57:b4:a5:31:f9:cf:2b: 0a:86:18:3f:ba:23:d8:fc:c4:aa:e8:5f:62:f4:65:cd:59:51: dc:41:d0:07:d1:46:25:51:3e:d0:6a:9a:19:ec:14:a2:53:b9: 4f:3e:4a:ea:68:74:54:6e:25:69:fa:10:86:10:4b:89:17:6f: f2:26:ff:41:e2:8c:9d:de:53:5d:28:30:c8:72:8c:69:7f:b5: 28:a4:c2:fb:0a:61:dd:be:01:2a:41:83:1e:dd:6f:b8:34:8a: 19:86:53:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0N0UxMTAvBgNVBAUTKEZERDI1MDc4MjIxODNDRTgwNzU5NDE5RDU2NTQwNjA2 QTI0ODZCNEIwHhcNMjUxMTAyMjAzNDU3WhcNMjUxMTA5MjAzNDU3WjAYMRYwFAYD VQQDEw02OTA3YzA3MS1hMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwLOwoEQyRVJ17JM3iBg+OAVsy2XPFtULrO01OWWLXC/KAOpv+CJLoTTiwF2 XYp2qHve4e/nesYuZaowQqgg3V+zue+RxKZOuJdLaaEuyyr+viJodCUyFiq8+imx hLYq6wgII7mVvwJj2WRa+GLewxgiQClRkCrawfnrRTbdi93gR8HBUQTUftpFK4ql yopH4mfEcq3Wi5BHj1f+LL5a5/U87vjMiwq9FrqXoASFkYj1Qu2k+a3lyJ5y9pL1 L5MsZkAukfP3R+X+uacGE1gODN8q9wiJ6xfnZqO43Um1VtM/q06P5hVv1GCvDvKz I51IclUi9DLpEQXF9Kj9Yzl1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRk9ovb rjfKvQoXC/UBJV7mXjaYMB8GA1UdIwQYMBaAFP3SUHgiGDzoB1lBnVZUBgaiSGtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjQ3RS8wRDEwQjgwNEQ2 MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBPZ0hXVUdkVmxRR0JxSklh MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kSlFlQ0lZUE9nSFdVR2RWbFFHQnFKSWEwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjQ3RS8wRDEwQjgwNEQ2MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBP Z0hXVUdkVmxRR0JxSklhMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFNFv8fVfRfn/xXQkcSmYtUuAF4iPOtcWTMk5qsl64QpQHWSm1XDWl yPZrQ930/TVyJdjgkRRZvPtib6ogqsNPUG3RWHzGGOtZDhZgIC0QSatR9SE3V62L MUdKcAe4B+ZXX6jacnVpqBpvwmdqVTsMz51/nWHtPY/ayCbLk/Um9rc11v9L8NWZ 85O9rED+0xhgCJFDi/CB41meY1e0pTH5zysKhhg/uiPY/MSq6F9i9GXNWVHcQdAH 0UYlUT7QapoZ7BSiU7lPPkrqaHRUbiVp+hCGEEuJF2/yJv9B4oyd3lNdKDDIcoxp f7UopML7CmHdvgEqQYMe3W+4NIoZhlMA -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:46 2025 by rpki-client