$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft File: DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json) Hash identifier: 6e4EpFA4cOVRrO1bLFtXRgP+bT/8Loxh6ouWqVJgDxc= Subject key identifier: 41:6A:CC:6E:24:06:B9:AE:6E:0B:7A:C4:CE:27:F7:19:2A:30:79:46 Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26 Certificate issuer: /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft Manifest number: 17 Signing time: Mon 03 Nov 2025 07:52:37 +0000 Manifest this update: Mon 03 Nov 2025 07:52:36 +0000 Manifest next update: Mon 10 Nov 2025 07:52:36 +0000 Files and hashes: 1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: D0N+KD9WRJLA5R9Ml97NxKfdJE0ILWd5Oa8NtH0JN5E=) 2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126 Validity Not Before: Nov 3 07:52:36 2025 GMT Not After : Nov 10 07:52:36 2025 GMT Subject: CN=69085f44-1d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:e3:12:cc:84:2d:a2:38:47:37:ba:65:0d: 30:e5:8e:77:ae:78:5c:ae:17:7d:4d:b5:55:6c:4a: f7:c3:f7:bf:e7:d2:a9:3a:93:69:c3:6b:8b:31:c2: 85:be:46:93:5a:3e:d3:5f:5f:ab:d5:0d:95:4e:57: 45:a4:18:10:5d:71:4b:eb:f7:ed:a7:8b:3e:39:50: 3c:fb:bd:6c:11:71:17:fb:be:e3:d9:ff:f6:4c:87: 79:a9:e1:16:fc:83:19:bc:f1:63:8c:41:18:04:4d: f8:79:1a:92:6a:ee:0f:c9:85:fb:7d:4a:3e:c4:3f: 07:25:f2:5f:73:69:9d:cd:2b:df:ae:5a:6c:a7:00: 4c:43:7e:ee:88:2d:d0:77:0c:cf:a7:61:44:58:a4: d1:47:bd:58:12:e6:47:6d:69:97:ad:cd:d7:0d:c3: 35:98:2b:9f:e6:2f:8c:cd:74:64:58:6f:c4:93:b6: ea:d1:c6:26:ae:c3:76:7d:3c:ff:42:fd:fb:bf:00: 61:0a:5e:c5:7a:70:54:5c:47:6b:32:43:60:17:db: 0a:4f:20:1d:0f:e3:12:ca:8a:98:c8:d0:b7:54:67: a5:57:77:83:9f:85:1a:22:41:3e:c5:93:88:67:a4: 65:ed:e2:0d:13:3b:d9:aa:ff:2f:08:48:4b:45:09: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:CC:6E:24:06:B9:AE:6E:0B:7A:C4:CE:27:F7:19:2A:30:79:46 X509v3 Authority Key Identifier: keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:6b:e1:28:04:cc:b4:46:96:9b:5c:01:5a:9a:18:99:94: a8:d7:c6:44:b9:ab:7e:35:e3:99:97:bf:52:40:48:1a:2a:53: 0c:00:53:89:0c:e9:42:6d:56:0f:88:44:1a:a3:62:ee:3a:e4: c8:ec:a6:0e:ba:2f:6c:9f:cc:3f:b2:a7:22:05:47:c9:de:c7: b7:f9:17:9a:ad:66:2a:ba:53:13:b8:66:57:51:23:c8:2a:80: 7f:77:dc:8f:66:5c:e8:db:a0:5b:63:a4:3b:44:d1:6b:e9:69: f2:85:06:a9:25:9e:25:5b:be:ac:1d:76:11:c2:4c:fa:86:a4: b2:99:2e:c5:00:9f:96:00:9b:52:d0:c5:e2:51:35:b0:15:50: 80:9f:16:81:1a:3d:62:7a:6f:1b:8a:46:b5:a0:3c:5f:14:0e: 47:82:af:bd:bc:e2:d2:4d:c1:b2:53:5b:8a:c4:d2:dc:40:f3: 47:eb:03:56:1d:f0:8d:17:64:ad:b3:75:44:b8:5a:ff:ef:33: e3:e9:2c:48:2d:1d:e8:50:f1:7c:2e:6c:2c:05:cb:51:45:2e: f3:bf:c4:4c:c6:c5:a8:fe:c9:5c:a0:0d:11:49:ba:00:ae:ae: 7e:4a:1c:91:81:b6:50:55:ea:ee:53:f4:b1:d3:71:54:99:4f: cd:3b:71:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMEVBOEUxODA3ODMwNDMyMTU2MDYzNEEzQjRGMjZFQzZF Qzc2MjEyNjAeFw0yNTExMDMwNzUyMzZaFw0yNTExMTAwNzUyMzZaMBgxFjAUBgNV BAMTDTY5MDg1ZjQ0LTFkMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWx+MSzIQtojhHN7plDTDljneueFyuF31NtVVsSvfD97/n0qk6k2nDa4sxwoW+ RpNaPtNfX6vVDZVOV0WkGBBdcUvr9+2niz45UDz7vWwRcRf7vuPZ//ZMh3mp4Rb8 gxm88WOMQRgETfh5GpJq7g/Jhft9Sj7EPwcl8l9zaZ3NK9+uWmynAExDfu6ILdB3 DM+nYURYpNFHvVgS5kdtaZetzdcNwzWYK5/mL4zNdGRYb8STturRxiauw3Z9PP9C /fu/AGEKXsV6cFRcR2syQ2AX2wpPIB0P4xLKipjI0LdUZ6VXd4OfhRoiQT7Fk4hn pGXt4g0TO9mq/y8ISEtFCZeDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQWrMbiQG ua5uC3rEzif3GSoweUYwHwYDVR0jBBgwFoAUDqjhgHgwQyFWBjSjtPJuxux2ISYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzU0NjU3RERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlGV0JqU2p0UEp1eHV4MklT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHFqaGdIZ3dReUZXQmpTanRQSnV4dXgySVNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzU0NjU3RERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlG V0JqU2p0UEp1eHV4MklTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVEa+EoBMy0RpabXAFamhiZlKjXxkS5q34145mXv1JASBoqUwwAU4kM 6UJtVg+IRBqjYu465Mjspg66L2yfzD+ypyIFR8nex7f5F5qtZiq6UxO4ZldRI8gq gH933I9mXOjboFtjpDtE0WvpafKFBqklniVbvqwddhHCTPqGpLKZLsUAn5YAm1LQ xeJRNbAVUICfFoEaPWJ6bxuKRrWgPF8UDkeCr7284tJNwbJTW4rE0txA80frA1Yd 8I0XZK2zdUS4Wv/vM+PpLEgtHehQ8XwubCwFy1FFLvO/xEzGxaj+yVygDRFJugCu rn5KHJGBtlBV6u5T9LHTcVSZT807ccY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:19 2025 by rpki-client