$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: iCn8V6I+KIWbEBhkWwTQrXi2qQ4mH+2RPPx3px+7YPo= Subject key identifier: 00:79:AE:B5:79:CD:A7:3A:BE:61:F8:37:62:BC:C6:C2:D8:0B:4A:E7 Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: F8 Signing time: Mon 03 Nov 2025 05:09:35 +0000 Manifest this update: Mon 03 Nov 2025 05:09:34 +0000 Manifest next update: Mon 10 Nov 2025 05:09:34 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: 2FbzTMasdmo6zVyu2kpCONLqnUDrEWK3lR1mc+xr52Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Nov 3 05:09:34 2025 GMT Not After : Nov 10 05:09:34 2025 GMT Subject: CN=6908390f-0bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:ce:0a:c4:98:48:34:23:51:a9:28:4e:98: 74:1b:ef:36:4c:5f:6c:94:14:c7:3e:a9:82:33:e4: 9f:64:05:95:41:1c:58:84:f4:1e:96:6a:d6:1f:8f: 8c:fb:fe:2b:91:d2:9f:c6:3d:08:e8:9b:95:0b:c6: 06:8a:e0:ec:c2:38:f9:c7:33:8e:99:60:3e:5e:7a: 43:73:64:3f:a8:b3:9a:2e:23:83:75:c1:1d:c2:00: f9:5f:b7:9f:9a:b7:95:2c:48:77:f5:99:30:04:d3: 21:ac:6d:e4:57:60:f1:6d:77:bb:0a:8d:02:fb:77: fc:ce:6a:70:15:bc:f5:0b:40:69:c1:6c:37:4f:14: 8b:87:99:0d:ea:a1:bf:7a:22:63:25:c4:a1:f4:ac: 4d:7d:88:61:f2:70:04:bd:54:75:9f:95:d2:79:8d: e1:e2:76:05:e7:70:99:10:16:c5:b7:57:b7:3e:4d: c3:bf:ef:a6:6a:89:84:92:0e:83:81:5f:55:72:20: 40:c0:cb:72:fa:87:96:f2:7d:ff:4d:df:52:52:f4: 30:bc:1d:df:e2:32:d2:c8:14:38:04:13:03:6f:c7: e7:6b:09:3a:dd:1d:e3:91:77:86:52:9c:bf:fb:17: 47:91:ce:c8:80:44:93:3b:c1:8f:fa:04:42:0c:82: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:79:AE:B5:79:CD:A7:3A:BE:61:F8:37:62:BC:C6:C2:D8:0B:4A:E7 X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fd:8d:e8:53:d7:4e:7b:06:ff:c7:6b:86:49:2d:eb:25:db: 50:95:76:6e:d9:7f:12:de:00:ab:ce:79:8d:b5:ea:a2:4a:67: 65:2c:80:90:e2:91:0c:b1:13:7a:48:57:0c:85:7e:b8:88:8b: 27:40:9f:47:4d:00:1b:d7:c5:96:02:2b:b2:e0:1c:2f:ab:34: 7f:fa:29:41:b2:3c:57:c6:32:c8:89:90:ce:43:43:52:a0:69: d5:18:b2:92:48:1c:e6:02:ac:ee:69:65:37:26:2e:f5:3d:4b: 82:ee:b9:d1:eb:2b:1d:7b:41:96:54:3b:d0:e6:ef:3c:d1:ed: a1:8d:97:e0:1d:9c:be:de:cf:e9:09:47:dd:d6:f5:b6:eb:99: 07:60:c5:d5:ef:12:9c:e2:6d:65:f7:5b:98:13:da:bf:16:09: f0:46:7d:3b:a5:21:c6:bd:9a:0c:b3:13:3a:0d:b1:8c:c5:c6: c1:2f:bb:20:b1:53:80:5e:ae:b9:f5:a3:54:8d:05:31:57:fd: eb:ec:05:39:b4:29:52:0b:f8:4d:3d:06:4a:15:9f:89:43:6c: 35:73:60:9d:78:e1:5e:7c:fb:e6:ed:16:4d:42:95:4c:bd:5d: b5:27:51:20:53:c5:7c:1e:93:f2:e4:4b:2e:1f:d9:a5:47:a0: 5f:8f:58:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKDc1QjcxRjU0NkY0N0IyMUVFM0VBOUE4NjUxMTQ2QzFF QzVFQzk1QTYwHhcNMjUxMTAzMDUwOTM0WhcNMjUxMTEwMDUwOTM0WjAYMRYwFAYD VQQDEw02OTA4MzkwZi0wYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsALOCsSYSDQjUakoTph0G+82TF9slBTHPqmCM+SfZAWVQRxYhPQelmrWH4+M +/4rkdKfxj0I6JuVC8YGiuDswjj5xzOOmWA+XnpDc2Q/qLOaLiODdcEdwgD5X7ef mreVLEh39ZkwBNMhrG3kV2DxbXe7Co0C+3f8zmpwFbz1C0BpwWw3TxSLh5kN6qG/ eiJjJcSh9KxNfYhh8nAEvVR1n5XSeY3h4nYF53CZEBbFt1e3Pk3Dv++maomEkg6D gV9VciBAwMty+oeW8n3/Td9SUvQwvB3f4jLSyBQ4BBMDb8fnawk63R3jkXeGUpy/ +xdHkc7IgESTO8GP+gRCDIL68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB5rrV5 zac6vmH4N2K8xsLYC0rnMB8GA1UdIwQYMBaAFHW3H1RvR7Ie4+qahlEUbB7F7JWm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS8wNEQ0NzIwNDNB OEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNoN2o2cHFHVVJSc0hzWHNs YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS8wNEQ0NzIwNDNBOEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNo N2o2cHFHVVJSc0hzWHNsYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz/Y3oU9dOewb/x2uGSS3rJdtQlXZu2X8S3gCrznmNteqiSmdlLICQ 4pEMsRN6SFcMhX64iIsnQJ9HTQAb18WWAiuy4BwvqzR/+ilBsjxXxjLIiZDOQ0NS oGnVGLKSSBzmAqzuaWU3Ji71PUuC7rnR6ysde0GWVDvQ5u880e2hjZfgHZy+3s/p CUfd1vW265kHYMXV7xKc4m1l91uYE9q/FgnwRn07pSHGvZoMsxM6DbGMxcbBL7sg sVOAXq659aNUjQUxV/3r7AU5tClSC/hNPQZKFZ+JQ2w1c2CdeOFefPvm7RZNQpVM vV21J1EgU8V8HpPy5EsuH9mlR6Bfj1i4 -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:32 2025 by rpki-client