$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: 1cpdndwMIY1ztohzQV5/2lclhc60RxBiH5wu1u3rzqs= Subject key identifier: 56:9D:1B:A8:55:AA:B6:EF:16:97:A6:44:36:1B:E0:57:47:7D:78:7E Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 34DD Signing time: Thu 06 Nov 2025 14:41:14 +0000 Manifest this update: Thu 06 Nov 2025 14:41:13 +0000 Manifest next update: Thu 13 Nov 2025 14:41:13 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: IH1oUxsaADqsYZuNZY7Mcti6aOvm4BIjXA+8aOPJ42s=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Nov 6 14:41:13 2025 GMT Not After : Nov 13 14:41:13 2025 GMT Subject: CN=690cb38a-4232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:60:fa:17:b8:88:60:9e:b3:50:24:0f:3a: cc:74:18:79:4c:5e:4c:1e:13:84:dd:bc:40:7a:c3: 68:99:f9:ac:77:5d:a2:f9:72:72:da:b8:4f:14:8b: 78:f9:67:9f:8a:db:c1:a9:4c:cf:e7:c3:91:66:57: 0c:10:3b:b2:4f:62:f2:68:8e:e5:91:c3:74:1b:75: 38:5d:24:fb:56:6b:30:55:0e:10:36:b9:57:f0:0e: 03:3c:05:ba:4f:8a:ac:c4:ae:b9:4c:66:33:c3:cd: bf:29:ec:69:19:c7:28:32:7b:c7:fc:23:35:20:73: f1:78:71:cf:ad:1b:e5:57:d0:5e:3b:1c:3e:29:e4: 01:7c:1a:62:52:1e:80:66:87:ba:d5:86:71:59:6d: d5:4e:d7:54:9d:23:fa:89:a7:65:e2:9c:2c:71:f7: ad:13:b0:60:87:cb:b4:b5:ae:e5:89:43:37:f7:62: 27:9d:c0:39:52:fa:b1:fc:1e:a3:2f:a1:1f:5f:d9: af:4d:8e:4b:57:38:ab:ee:95:1d:73:f7:cc:10:22: 83:a6:ca:58:77:ff:f1:fd:08:de:bd:e3:91:8e:c9: c6:11:6e:c2:c2:cf:5a:2b:8f:d4:1f:3a:ef:1e:ec: e8:ee:39:1c:d5:4a:1e:9c:e9:1a:fe:25:b8:27:f5: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9D:1B:A8:55:AA:B6:EF:16:97:A6:44:36:1B:E0:57:47:7D:78:7E X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e5:42:88:86:f9:ef:80:d7:ad:ba:58:dc:aa:2d:58:14:82: 2e:15:74:fe:6c:ea:65:da:91:ea:e6:c2:60:d9:38:b2:40:57: 36:78:0b:ab:90:f7:66:e1:0e:52:d0:05:84:5a:ba:50:c9:5d: 62:1e:2d:71:82:21:2a:f9:84:f5:3f:1e:70:57:11:0a:b2:06: f9:9a:f3:ea:7b:3b:34:9a:95:68:54:16:d1:da:65:1f:0e:e3: 1d:a7:e7:fa:90:0d:29:55:62:a3:7d:ea:fa:95:d9:ce:25:ba: b5:92:ce:53:7b:ff:25:7b:52:ba:e6:2c:98:c8:a3:3b:ea:f7: de:e4:71:5d:0a:67:11:bb:f2:01:35:2a:07:92:f0:53:f0:77: 4c:59:ce:74:34:7e:af:4c:d3:f2:be:00:d2:44:13:c2:a1:5e: 92:eb:e8:b5:be:a1:46:6f:18:c0:0f:cc:4b:2d:08:1d:83:10: 86:d0:3f:b4:47:0c:42:35:2c:39:6f:d2:97:fd:27:4e:c6:41: 24:8f:aa:6b:c7:f5:45:74:2a:b2:69:2b:a0:4a:8e:a3:7c:88: 4d:c8:31:93:80:31:b6:3b:a8:0f:d1:fe:26:1c:f5:8e:4e:99: fd:47:89:a6:d7:c5:9b:49:7e:65:70:bf:7c:74:77:f8:dd:81: e1:b8:04:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUxMTA2MTQ0MTEzWhcNMjUxMTEzMTQ0MTEzWjAYMRYwFAYD VQQDEw02OTBjYjM4YS00MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F9g+he4iGCes1AkDzrMdBh5TF5MHhOE3bxAesNomfmsd12i+XJy2rhPFIt4 +WefitvBqUzP58ORZlcMEDuyT2LyaI7lkcN0G3U4XST7VmswVQ4QNrlX8A4DPAW6 T4qsxK65TGYzw82/KexpGccoMnvH/CM1IHPxeHHPrRvlV9BeOxw+KeQBfBpiUh6A Zoe61YZxWW3VTtdUnSP6iadl4pwscfetE7Bgh8u0ta7liUM392InncA5Uvqx/B6j L6EfX9mvTY5LVzir7pUdc/fMECKDpspYd//x/QjeveORjsnGEW7Cws9aK4/UHzrv Huzo7jkc1UoenOka/iW4J/VxnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFadG6hV qrbvFpemRDYb4FdHfXh+MB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB65UKIhvnvgNetuljcqi1YFIIuFXT+bOpl2pHq5sJg2TiyQFc2eAur kPdm4Q5S0AWEWrpQyV1iHi1xgiEq+YT1Px5wVxEKsgb5mvPqezs0mpVoVBbR2mUf DuMdp+f6kA0pVWKjfer6ldnOJbq1ks5Te/8le1K65iyYyKM76vfe5HFdCmcRu/IB NSoHkvBT8HdMWc50NH6vTNPyvgDSRBPCoV6S6+i1vqFGbxjAD8xLLQgdgxCG0D+0 RwxCNSw5b9KX/SdOxkEkj6prx/VFdCqyaSugSo6jfIhNyDGTgDG2O6gP0f4mHPWO Tpn9R4mm18WbSX5lcL98dHf43YHhuASv -----END CERTIFICATE-----Generated at Fri Nov 7 12:59:21 2025 by rpki-client