$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: MIdy9l40YP4fktL1H0SOjmKVFxTmp7RyEAN/zs2hpz4= Subject key identifier: AE:3E:28:F9:49:4D:DE:24:61:FA:51:72:42:71:C1:12:EE:FC:56:51 Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: FD Signing time: Mon 03 Nov 2025 05:08:15 +0000 Manifest this update: Mon 03 Nov 2025 05:08:14 +0000 Manifest next update: Mon 10 Nov 2025 05:08:14 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: PjsjgWdNfgHDZeA+SSbHSGaV7oMBrTj4COtZvDb5iRE=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Nov 3 05:08:14 2025 GMT Not After : Nov 10 05:08:14 2025 GMT Subject: CN=690838be-037f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:c9:3c:90:61:59:c1:86:6f:1d:01:ad:4f: 5f:6e:34:a1:12:1a:99:df:90:58:af:bf:01:e5:5d: c9:3f:3d:43:3c:73:b8:55:82:c0:f5:0c:68:de:b6: 19:5e:74:ac:f6:e6:b6:7d:d7:6e:07:5d:cd:55:be: 7c:15:88:54:5b:65:d7:7c:cf:af:3c:d4:f6:75:2e: 2b:95:fa:a1:1a:0c:9d:18:b9:29:f2:1e:32:3f:9f: ae:80:82:b4:fd:df:fc:60:f7:6f:7d:c7:be:d5:b7: 65:97:3f:3d:39:b9:2d:c4:95:f1:25:32:63:1c:1b: 20:1d:c6:bf:c1:9e:13:43:2a:86:c7:5c:02:17:58: c2:ac:d4:fb:68:e8:bf:d6:f8:ed:42:06:b3:46:5a: d6:a9:37:80:bc:57:5f:df:ea:27:7d:10:79:d6:f3: 88:62:c0:8b:f2:7f:23:e2:52:f6:e7:fa:25:e2:9c: c5:3f:e1:47:5b:cb:03:2f:4f:aa:02:ad:b2:9d:91: dd:65:d7:ac:76:ce:90:03:4e:db:c2:01:3b:b5:d2: f9:da:f2:7b:49:43:ea:20:74:f3:ca:b0:e7:ef:68: dc:59:dd:fa:62:b0:3b:7b:6a:6b:92:73:16:62:a5: f9:50:0a:d3:e1:c5:4b:8b:17:ad:1d:c5:e1:f2:63: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:28:F9:49:4D:DE:24:61:FA:51:72:42:71:C1:12:EE:FC:56:51 X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:00:b0:10:91:35:fe:fe:43:f9:29:4f:ef:4f:49:37:9a:e8: 39:5c:7d:4e:c4:fb:60:32:18:48:58:4e:ad:1c:c9:04:20:39: e0:f7:98:34:36:62:df:e5:27:80:04:d2:af:a8:fc:e0:e0:1d: 71:d6:64:b8:97:e4:65:db:cb:2a:86:bd:c0:e2:ed:a6:62:b7: 7c:2b:3b:98:fd:96:c4:19:f0:71:de:70:fc:5e:93:15:96:d4: 07:45:c9:45:ef:bb:93:ed:57:b2:86:bb:81:9c:c5:23:ca:c2: 63:41:da:97:aa:87:5b:87:84:24:96:9d:32:69:1f:3a:d8:a7: 9e:17:d2:c8:06:e9:5a:9c:79:49:e5:74:fa:dd:e1:09:1e:c2: 44:2d:96:e1:6b:e4:cd:00:5d:e5:19:a4:d6:e7:0e:6f:63:ba: 06:aa:97:3e:1a:51:d3:41:25:2c:5f:2a:23:c3:a9:a8:22:3d: 6e:dd:c7:67:ee:3f:de:c6:3d:8b:2e:9b:6d:fd:b6:07:6d:78: 1e:bf:ec:9f:a6:52:87:a2:c6:6f:ff:df:f0:39:5b:06:fa:d7: 67:ad:3a:37:92:7a:f0:9f:7e:48:ed:92:30:6a:63:01:24:97: 46:d2:bb:d4:9d:8d:41:97:98:98:12:dc:08:3f:a1:f1:00:ac: 51:ea:c1:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUxMTAzMDUwODE0WhcNMjUxMTEwMDUwODE0WjAYMRYwFAYD VQQDEw02OTA4MzhiZS0wMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9zJPJBhWcGGbx0BrU9fbjShEhqZ35BYr78B5V3JPz1DPHO4VYLA9Qxo3rYZ XnSs9ua2fdduB13NVb58FYhUW2XXfM+vPNT2dS4rlfqhGgydGLkp8h4yP5+ugIK0 /d/8YPdvfce+1bdllz89ObktxJXxJTJjHBsgHca/wZ4TQyqGx1wCF1jCrNT7aOi/ 1vjtQgazRlrWqTeAvFdf3+onfRB51vOIYsCL8n8j4lL25/ol4pzFP+FHW8sDL0+q Aq2ynZHdZdesds6QA07bwgE7tdL52vJ7SUPqIHTzyrDn72jcWd36YrA7e2prknMW YqX5UArT4cVLixetHcXh8mOY4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4+KPlJ Td4kYfpRckJxwRLu/FZRMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ALAQkTX+/kP5KU/vT0k3mug5XH1OxPtgMhhIWE6tHMkEIDng95g0 NmLf5SeABNKvqPzg4B1x1mS4l+Rl28sqhr3A4u2mYrd8KzuY/ZbEGfBx3nD8XpMV ltQHRclF77uT7VeyhruBnMUjysJjQdqXqodbh4Qklp0yaR862KeeF9LIBulanHlJ 5XT63eEJHsJELZbha+TNAF3lGaTW5w5vY7oGqpc+GlHTQSUsXyojw6moIj1u3cdn 7j/exj2LLptt/bYHbXgev+yfplKHosZv/9/wOVsG+tdnrTo3knrwn35I7ZIwamMB JJdG0rvUnY1Bl5iYEtwIP6HxAKxR6sGS -----END CERTIFICATE-----Generated at Wed Nov 5 00:20:24 2025 by rpki-client