$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: e6qa1UqSe1nc4keFpaBuRb2QKYdSA0nFmKB7FbNAUxQ= Subject key identifier: 8B:1A:1A:27:C3:9B:D1:FC:A4:6A:85:8C:C8:69:E0:E2:94:FF:A6:E3 Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 01A3 Signing time: Wed 05 Nov 2025 03:25:10 +0000 Manifest this update: Wed 05 Nov 2025 03:25:09 +0000 Manifest next update: Wed 12 Nov 2025 03:25:09 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: uiTShY69PsPHzFmHiei4GKtXz3RgMy05zYyHKDRpbds=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: Nov 5 03:25:09 2025 GMT Not After : Nov 12 03:25:09 2025 GMT Subject: CN=690ac395-c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:9b:46:8d:84:ee:b8:d9:a9:0c:a1:f8:76: 4e:be:2a:13:26:a8:07:b6:f3:2d:5e:fb:f0:4d:db: 37:fb:8c:d9:00:86:fd:c8:13:e0:bc:45:10:d7:7e: fb:e5:67:46:5d:e9:68:05:25:80:fc:35:90:ee:bb: c8:80:32:1e:40:61:4d:bf:ab:60:21:8d:a4:90:69: 56:1e:ef:dc:16:48:a6:bc:11:52:82:15:95:66:8a: 6c:79:3b:4c:61:2b:ea:ee:af:4e:13:3d:f2:af:b2: 01:36:73:a0:0d:66:c5:c9:58:19:12:4d:e5:75:71: 8c:ed:ae:c1:b9:84:29:08:a0:7c:6c:a7:87:3b:87: 92:83:37:8e:a4:fe:01:7f:24:22:40:9c:4f:46:ec: 10:e9:ff:f3:4f:93:99:18:5d:3d:5b:fe:3f:ea:35: 17:54:fd:ce:ed:cc:23:11:c1:a8:38:e1:a9:a2:a9: 7a:7f:41:26:00:85:9f:00:15:1e:2f:7e:fb:64:87: e1:69:0c:40:a9:37:54:e1:c7:31:24:03:ea:57:15: 63:5d:ea:6a:86:42:cd:1f:aa:04:36:62:a3:39:95: b6:b3:a8:2a:60:e8:2a:3a:2c:5a:89:48:c6:29:e9: f7:67:7c:ed:94:1c:15:64:d2:89:fe:e7:33:a4:ac: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1A:1A:27:C3:9B:D1:FC:A4:6A:85:8C:C8:69:E0:E2:94:FF:A6:E3 X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:cd:4f:f8:22:4a:39:b7:e0:82:29:97:6b:5f:75:cb:ba:48: 4e:3f:b7:92:da:c9:e8:3f:41:9d:63:8b:ac:ab:c3:44:2f:fd: 44:75:45:3c:44:74:ba:fb:97:ec:79:1a:9e:b4:66:5a:96:ec: 27:97:18:d7:8e:5d:de:8d:e8:02:dd:05:5f:b4:62:54:93:a8: 1b:71:85:5f:49:e4:93:89:11:a8:a7:92:ae:32:a6:4a:dd:0e: 26:28:d3:0c:0b:05:57:0f:1e:31:49:59:9f:a3:41:ca:09:1a: 7d:36:4c:da:75:e5:b9:16:d5:ba:13:f6:4b:32:56:83:ae:80: 45:33:5c:e7:7d:b4:4d:0b:7b:c0:5d:ad:ab:9d:3c:ea:56:7a: 3e:57:a8:19:58:4b:b1:0f:21:53:84:ef:a9:ff:64:0e:13:ca: f8:9e:e6:43:74:ef:33:8c:0d:83:82:80:d5:2e:f0:c2:db:ee: e3:d1:63:ee:19:67:ed:80:ed:27:fb:20:59:dd:82:91:f5:1a: 8b:ca:5a:1d:71:18:8a:f0:74:3e:37:bf:79:43:e2:fc:20:e1: 59:c4:01:b4:91:bc:59:f6:76:40:f8:c6:33:78:b1:3c:0f:54: 7a:2c:97:de:a4:ce:8d:8e:03:55:12:83:dd:32:bf:27:96:4d: 8f:18:1e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjUxMTA1MDMyNTA5WhcNMjUxMTEyMDMyNTA5WjAYMRYwFAYD VQQDEw02OTBhYzM5NS1jOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWCbRo2E7rjZqQyh+HZOvioTJqgHtvMtXvvwTds3+4zZAIb9yBPgvEUQ1377 5WdGXeloBSWA/DWQ7rvIgDIeQGFNv6tgIY2kkGlWHu/cFkimvBFSghWVZopseTtM YSvq7q9OEz3yr7IBNnOgDWbFyVgZEk3ldXGM7a7BuYQpCKB8bKeHO4eSgzeOpP4B fyQiQJxPRuwQ6f/zT5OZGF09W/4/6jUXVP3O7cwjEcGoOOGpoql6f0EmAIWfABUe L377ZIfhaQxAqTdU4ccxJAPqVxVjXepqhkLNH6oENmKjOZW2s6gqYOgqOixaiUjG Ken3Z3ztlBwVZNKJ/uczpKw3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsaGifD m9H8pGqFjMhp4OKU/6bjMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLzU/4Iko5t+CCKZdrX3XLukhOP7eS2snoP0GdY4usq8NEL/1EdUU8 RHS6+5fseRqetGZaluwnlxjXjl3ejegC3QVftGJUk6gbcYVfSeSTiRGop5KuMqZK 3Q4mKNMMCwVXDx4xSVmfo0HKCRp9NkzadeW5FtW6E/ZLMlaDroBFM1znfbRNC3vA Xa2rnTzqVno+V6gZWEuxDyFThO+p/2QOE8r4nuZDdO8zjA2DgoDVLvDC2+7j0WPu GWftgO0n+yBZ3YKR9RqLylodcRiK8HQ+N795Q+L8IOFZxAG0kbxZ9nZA+MYzeLE8 D1R6LJfepM6NjgNVEoPdMr8nlk2PGB7y -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:29 2025 by rpki-client