$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft File: DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json) Hash identifier: VHJh+a2p51KS+SK3+nUAQK+V7kgJhY5dadjQ6mw0ecs= Subject key identifier: 47:F0:3B:2E:9B:2C:16:67:62:FE:93:91:9A:26:CF:6A:D0:6D:B1:42 Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft Manifest number: A0 Signing time: Wed 05 Nov 2025 05:37:56 +0000 Manifest this update: Wed 05 Nov 2025 05:37:55 +0000 Manifest next update: Wed 12 Nov 2025 05:37:55 +0000 Files and hashes: 1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: V/7FXg6exfXkU9hJvnW8Pb8RoR5UFLXv69x65dQuoZk=) 2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: xHWD/+6Z6mOfeTNp4+pdNaNQc1T99Xc2O7Zqfmln3YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Validity Not Before: Nov 5 05:37:55 2025 GMT Not After : Nov 12 05:37:55 2025 GMT Subject: CN=690ae2b3-7a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:eb:48:82:04:b5:ef:9d:3d:fb:f3:dc:28: e8:15:64:53:45:16:6c:3f:5f:6a:08:89:0d:71:9a: 67:06:a8:88:79:57:ca:5f:c6:35:3b:92:a1:d4:e8: 40:18:ea:45:72:d8:f4:c6:e7:df:98:17:c9:40:cd: cf:4c:ba:c7:95:d9:8e:50:96:6e:c3:dc:fc:db:0f: 6a:38:7b:06:8f:ea:b1:17:25:b1:a6:b8:c6:f1:4e: 19:49:87:c4:34:a4:7b:b9:33:55:88:3a:4d:8d:28: c1:2a:4f:df:46:19:b1:bb:0b:8a:85:4b:0b:c9:b9: d4:01:c0:b7:45:f1:6a:64:33:a4:6c:04:d2:46:85: 58:21:f1:f0:8b:21:64:62:3b:6f:5b:3b:6c:70:30: c5:ed:cc:a2:d9:97:5a:1e:af:a0:b4:d4:67:7a:72: c3:d8:34:06:2e:ce:42:82:ea:f1:02:90:2b:de:f0: be:d1:4b:3e:4c:21:46:6a:15:e0:dc:ed:4f:19:43: 00:a3:58:39:2e:75:d5:d1:ae:3c:ec:06:cb:90:5c: 07:c6:61:13:d8:47:d8:67:e5:eb:a2:3e:61:33:ed: 41:9c:2e:e7:7f:5a:d6:33:10:9c:4d:bc:98:9b:dd: e6:27:7e:7c:f7:62:21:ac:03:03:df:61:ac:22:d6: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F0:3B:2E:9B:2C:16:67:62:FE:93:91:9A:26:CF:6A:D0:6D:B1:42 X509v3 Authority Key Identifier: keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:92:4e:e6:48:12:4e:87:12:0f:eb:ec:fe:e3:00:60:16:b3: 5a:16:38:5a:23:28:bc:49:fe:52:df:2c:a2:6d:57:b9:83:a3: c4:f3:f4:b4:58:67:5b:c9:e5:69:db:bb:7f:57:9e:7d:5c:1c: 17:92:bd:ba:76:70:b8:76:a5:ef:70:c1:c6:c3:74:bf:00:65: 91:f5:fe:6e:3e:f3:dc:11:bf:16:f1:d3:6d:a7:99:78:51:21: ac:6a:5b:af:91:86:0e:6e:b2:d3:87:93:42:fb:68:48:f1:ea: f6:7f:0c:79:51:9d:10:74:43:00:0a:76:2e:49:e2:bf:f4:b4: 8b:77:bb:3d:c7:bd:fa:bd:53:b1:2f:5d:d5:e8:61:93:7d:a4: 66:e5:d7:33:24:2a:30:75:ca:f2:56:90:8a:34:b7:9a:3c:a2: d3:0f:4e:d0:75:43:60:81:60:a9:22:b2:11:01:40:dc:2a:6b: 47:55:b7:05:9c:5e:b7:8e:c4:48:02:63:e0:26:66:90:7a:43: 5b:75:38:96:05:76:74:7b:df:55:5c:b9:47:02:0a:46:d4:3a: eb:59:4b:a2:ad:80:24:6d:c9:ee:36:d2:c3:d8:87:29:94:e9: c7:ee:26:9b:3d:26:97:76:48:2e:f4:2b:a8:5e:08:17:c0:3c: 1e:a5:1f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDBDNjk3MENBQjlERjhFOUJEMTBFMUMzRTkxODkxQTA5 QTdFODhDMjAwHhcNMjUxMTA1MDUzNzU1WhcNMjUxMTEyMDUzNzU1WjAYMRYwFAYD VQQDEw02OTBhZTJiMy03YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTPrSIIEte+dPfvz3CjoFWRTRRZsP19qCIkNcZpnBqiIeVfKX8Y1O5Kh1OhA GOpFctj0xuffmBfJQM3PTLrHldmOUJZuw9z82w9qOHsGj+qxFyWxprjG8U4ZSYfE NKR7uTNViDpNjSjBKk/fRhmxuwuKhUsLybnUAcC3RfFqZDOkbATSRoVYIfHwiyFk YjtvWztscDDF7cyi2ZdaHq+gtNRnenLD2DQGLs5CgurxApAr3vC+0Us+TCFGahXg 3O1PGUMAo1g5LnXV0a487AbLkFwHxmET2EfYZ+Xroj5hM+1BnC7nf1rWMxCcTbyY m93mJ35892IhrAMD32GsItbGIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfwOy6b LBZnYv6TkZomz2rQbbFCMB8GA1UdIwQYMBaAFAxpcMq5346b0Q4cPpGJGgmn6Iwg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi84OEFEQ0E5OENC RUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpwdlJEaHcta1lrYUNhZm9q Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi84OEFEQ0E5OENCRUYxMUVGOTE2NUMyNDZDNEY5QUUwMi9ER2x3eXJuZmpw dlJEaHcta1lrYUNhZm9qQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7kk7mSBJOhxIP6+z+4wBgFrNaFjhaIyi8Sf5S3yyibVe5g6PE8/S0 WGdbyeVp27t/V559XBwXkr26dnC4dqXvcMHGw3S/AGWR9f5uPvPcEb8W8dNtp5l4 USGsaluvkYYObrLTh5NC+2hI8er2fwx5UZ0QdEMACnYuSeK/9LSLd7s9x736vVOx L13V6GGTfaRm5dczJCowdcryVpCKNLeaPKLTD07QdUNggWCpIrIRAUDcKmtHVbcF nF63jsRIAmPgJmaQekNbdTiWBXZ0e99VXLlHAgpG1DrrWUuirYAkbcnuNtLD2Icp lOnH7iabPSaXdkgu9CuoXggXwDwepR9Y -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:02 2025 by rpki-client