$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json) Hash identifier: iO5SgIvVrpUk9SsM0VEya+EIl9Fg/ow5EykGArdnfoY= Subject key identifier: 24:54:82:81:42:06:CB:72:6A:BC:BF:6A:97:0D:E7:B6:1D:C3:12:8C Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft Manifest number: 0367 Signing time: Mon 03 Nov 2025 00:52:42 +0000 Manifest this update: Mon 03 Nov 2025 00:52:42 +0000 Manifest next update: Mon 10 Nov 2025 00:52:42 +0000 Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: lQYC1azu8mmnSIubt4vuKn1nSzHjDuvKXmn+z/08FEE=) 2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: TiXsMxcSqCX8Y3ymizmUz1FwktPyKeLv11c07UJcgWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Nov 3 00:52:42 2025 GMT Not After : Nov 10 00:52:42 2025 GMT Subject: CN=6907fcda-aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:9a:f7:57:b4:4c:03:ff:a1:c5:12:16:0c: e2:c6:84:06:98:7a:5b:fc:0f:d3:e8:fc:b5:1f:bc: c6:d3:87:4d:02:fd:a3:c3:fd:b1:ca:5e:91:dc:3d: aa:0b:4e:21:ed:cf:fa:2a:3d:6e:f9:28:80:3c:0f: 55:87:00:2e:aa:ec:99:65:65:45:5d:cc:e8:82:16: 90:84:34:94:5f:88:51:c4:db:db:a6:7f:06:c6:cc: 0e:f1:a6:11:61:f7:18:ba:b2:67:61:3e:da:a0:69: 06:7d:99:b2:37:6c:c1:76:b6:d9:ff:0d:fb:98:15: bf:53:d7:ce:17:07:35:cf:42:c7:14:69:63:90:8c: f0:a9:86:b4:10:dd:92:99:92:19:79:e3:71:ee:5f: 8e:83:85:32:ef:8e:ad:e5:9d:da:67:5b:fe:07:5a: da:84:fe:17:86:f2:39:3a:51:b1:26:10:04:95:69: 99:57:53:04:09:5f:a8:04:9b:7f:d1:fd:46:44:7d: 45:a7:79:c6:d8:3a:6e:3a:8e:30:07:6f:97:3b:8c: 2d:ee:10:a4:25:b4:f7:4f:3c:e9:8f:dc:e6:e3:28: b8:68:8c:34:05:f5:8f:92:45:d6:15:ed:d5:5f:4d: 39:ad:4d:14:c6:59:e7:cf:60:ab:57:f2:7b:c4:4b: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:54:82:81:42:06:CB:72:6A:BC:BF:6A:97:0D:E7:B6:1D:C3:12:8C X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ed:63:c4:66:9d:66:b0:a6:aa:1b:58:af:98:10:6b:c0:a5: 3e:6e:cf:c7:98:a7:46:e7:4f:99:43:34:48:da:ee:8c:ca:da: 54:15:4b:aa:3e:9b:b7:9a:41:7c:28:08:7e:70:69:76:52:68: d2:d1:26:4e:1e:1f:ed:e9:e9:3e:bf:89:a9:dc:81:c3:bd:8b: 75:bb:94:4a:36:35:91:f1:7d:90:27:22:19:05:00:0a:0c:27: a0:dc:25:23:ad:47:19:e2:34:dc:ea:b8:88:84:e9:e9:07:76: 67:62:d8:43:4c:cd:97:41:67:cd:11:e7:5a:33:06:ae:11:03: e9:ef:6a:46:34:41:5c:17:84:78:ef:b5:7b:31:69:43:d2:96: ba:62:9f:16:6e:a9:c7:21:e8:ce:88:3c:73:c7:df:2a:16:7f: a5:32:02:13:72:21:2c:c2:cf:eb:9c:5c:87:19:fb:3c:05:0b: f9:42:86:c4:79:28:38:59:81:23:f9:80:69:d7:bc:90:2e:b3: a4:ea:ec:de:11:e8:5d:57:6e:cd:64:1b:74:bc:a6:da:e7:24: ae:e1:d0:c1:ed:72:0c:47:95:60:cf:fd:13:6a:fa:55:a3:60: bf:c2:32:25:a8:82:8e:dc:e8:9d:1c:3f:84:a8:e3:e0:7c:d2: ef:93:a2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjUxMTAzMDA1MjQyWhcNMjUxMTEwMDA1MjQyWjAYMRYwFAYD VQQDEw02OTA3ZmNkYS1hYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAua91e0TAP/ocUSFgzixoQGmHpb/A/T6Py1H7zG04dNAv2jw/2xyl6R3D2q C04h7c/6Kj1u+SiAPA9VhwAuquyZZWVFXczoghaQhDSUX4hRxNvbpn8GxswO8aYR YfcYurJnYT7aoGkGfZmyN2zBdrbZ/w37mBW/U9fOFwc1z0LHFGljkIzwqYa0EN2S mZIZeeNx7l+Og4Uy746t5Z3aZ1v+B1rahP4XhvI5OlGxJhAElWmZV1MECV+oBJt/ 0f1GRH1Fp3nG2DpuOo4wB2+XO4wt7hCkJbT3Tzzpj9zm4yi4aIw0BfWPkkXWFe3V X005rU0Uxlnnz2CrV/J7xEv7cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRUgoFC Bstyary/apcN57YdwxKMMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS WUdTM21STnd6SlpNUFM4NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC7WPEZp1msKaqG1ivmBBrwKU+bs/HmKdG50+ZQzRI2u6MytpUFUuq Ppu3mkF8KAh+cGl2UmjS0SZOHh/t6ek+v4mp3IHDvYt1u5RKNjWR8X2QJyIZBQAK DCeg3CUjrUcZ4jTc6riIhOnpB3ZnYthDTM2XQWfNEedaMwauEQPp72pGNEFcF4R4 77V7MWlD0pa6Yp8WbqnHIejOiDxzx98qFn+lMgITciEsws/rnFyHGfs8BQv5QobE eSg4WYEj+YBp17yQLrOk6uzeEehdV27NZBt0vKba5ySu4dDB7XIMR5Vgz/0TavpV o2C/wjIlqIKO3OidHD+EqOPgfNLvk6I8 -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:16 2025 by rpki-client