$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: Z+26Pe5HKthJjHPorNHa/oIm3k5qm2+ZBbt/x+UPA0U= Subject key identifier: BF:7C:BA:04:BD:69:6F:26:71:F7:AD:69:AE:86:DA:09:01:D0:85:56 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 17B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 1790 Signing time: Tue 04 Nov 2025 16:40:45 +0000 Manifest this update: Tue 04 Nov 2025 16:40:45 +0000 Manifest next update: Tue 11 Nov 2025 16:40:45 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: W4si49B7kuKH6OIfzhpGYlNBob7NKP+B/EVvnPZLUpM=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6068 (0x17b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Nov 4 16:40:45 2025 GMT Not After : Nov 11 16:40:45 2025 GMT Subject: CN=690a2c8d-b74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:6c:6f:24:28:df:cc:a6:c4:ed:bb:83:23: e5:e3:f8:4a:10:82:2e:79:a5:f7:48:be:29:f9:63: 09:88:3a:15:45:a0:28:a6:9e:45:be:f4:f1:58:9c: 58:cd:4f:7a:b1:b0:4a:9f:90:ae:ab:04:9f:e9:2c: 4c:f7:3c:ac:14:00:21:81:0e:df:de:a0:08:a6:45: 20:64:af:58:ce:5f:11:2f:1f:e3:43:76:92:97:ee: b0:c7:1d:1a:7c:ec:2f:89:43:cb:2d:8e:ec:93:88: 54:f3:e1:ae:9e:20:1f:e5:96:08:0c:9d:71:92:cf: 29:06:08:d4:84:a3:a7:f0:ed:9d:f1:00:ba:42:b3: 71:24:6e:f4:a8:70:bc:de:00:38:0a:44:57:53:2c: f2:24:14:55:4d:98:63:04:09:82:2a:1f:74:62:65: 84:e4:5a:85:5d:9b:4f:f7:c5:69:fc:18:c5:86:a1: db:62:c9:8c:da:13:db:a8:3f:be:75:01:4a:d1:72: 75:1f:fa:7e:13:e6:ee:5c:bb:91:ec:33:2d:a5:62: 4f:1f:19:27:39:60:be:7e:55:a9:d4:74:b3:84:50: d1:80:ae:af:ca:83:95:77:92:cd:0b:ab:34:06:8e: 04:c8:f1:f2:da:5e:7d:0c:19:36:ab:a6:82:69:99: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:BA:04:BD:69:6F:26:71:F7:AD:69:AE:86:DA:09:01:D0:85:56 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:24:56:3d:16:88:a7:e1:66:d4:3e:b9:bd:a8:67:6b:58:8d: f0:df:c5:04:ff:d1:5b:83:13:dc:20:49:1c:9b:59:13:c0:7c: b0:f5:6c:8b:46:52:82:89:2c:4a:b7:02:e4:a1:68:88:95:8f: 8e:88:cc:3a:36:87:2d:fd:6e:69:29:b7:c3:e1:99:dd:5a:47: b8:6c:f9:70:4d:1d:4b:10:c4:30:9a:a0:df:20:55:43:de:38: 1d:2d:3e:b3:ac:b2:4f:c1:ec:a5:40:3a:ff:16:b6:fa:0e:36: 00:00:3e:47:7f:3b:1e:03:e6:d7:aa:be:e1:59:ab:7a:1b:2f: 66:8f:60:a9:87:ad:86:e9:8d:69:bb:61:dd:a0:63:a0:c7:1d: f3:80:28:74:c0:af:5d:fb:19:96:3b:5f:0e:c9:13:d0:7e:b0: f7:0d:46:03:08:d2:b9:54:22:df:ac:8c:13:54:17:cb:c3:ae: 3a:2c:89:34:d8:9d:52:bd:0d:2b:ce:e6:ab:38:78:be:bb:b6: b5:0c:af:da:b1:18:58:4f:40:c0:8d:5d:ea:fb:97:39:f2:45: 4b:05:82:66:b6:ee:2e:8f:b3:25:5d:4b:bd:1b:10:cc:5a:a1: 9c:9a:28:e8:44:a6:be:a3:18:8f:c0:b7:6c:0c:e6:47:4e:d0: 21:a9:bb:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUxMTA0MTY0MDQ1WhcNMjUxMTExMTY0MDQ1WjAYMRYwFAYD VQQDEw02OTBhMmM4ZC1iNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtghsbyQo38ymxO27gyPl4/hKEIIueaX3SL4p+WMJiDoVRaAopp5FvvTxWJxY zU96sbBKn5CuqwSf6SxM9zysFAAhgQ7f3qAIpkUgZK9Yzl8RLx/jQ3aSl+6wxx0a fOwviUPLLY7sk4hU8+GuniAf5ZYIDJ1xks8pBgjUhKOn8O2d8QC6QrNxJG70qHC8 3gA4CkRXUyzyJBRVTZhjBAmCKh90YmWE5FqFXZtP98Vp/BjFhqHbYsmM2hPbqD++ dQFK0XJ1H/p+E+buXLuR7DMtpWJPHxknOWC+flWp1HSzhFDRgK6vyoOVd5LNC6s0 Bo4EyPHy2l59DBk2q6aCaZkJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL98ugS9 aW8mcfetaa6G2gkB0IVWMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDJFY9Foin4WbUPrm9qGdrWI3w38UE/9FbgxPcIEkcm1kTwHyw9WyL RlKCiSxKtwLkoWiIlY+OiMw6Noct/W5pKbfD4ZndWke4bPlwTR1LEMQwmqDfIFVD 3jgdLT6zrLJPweylQDr/Frb6DjYAAD5HfzseA+bXqr7hWat6Gy9mj2Cph62G6Y1p u2HdoGOgxx3zgCh0wK9d+xmWO18OyRPQfrD3DUYDCNK5VCLfrIwTVBfLw646LIk0 2J1SvQ0rzuarOHi+u7a1DK/asRhYT0DAjV3q+5c58kVLBYJmtu4uj7MlXUu9GxDM WqGcmijoRKa+oxiPwLdsDOZHTtAhqbtI -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:38 2025 by rpki-client