$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: IoMkJwzGnBTsk1GBtHfEQfJyzxH/Tr9XiFHIFq/LHLo= Subject key identifier: D9:02:1E:68:57:C3:80:04:3D:36:82:AE:8E:0A:EF:36:F4:F9:70:DD Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0C52 Signing time: Tue 04 Nov 2025 18:43:29 +0000 Manifest this update: Tue 04 Nov 2025 18:43:28 +0000 Manifest next update: Tue 11 Nov 2025 18:43:28 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: iJRsgEFufX8FTrJSRMACjeAgZMS4kwneGAHPz0Vgfzc=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: OPjG40JnviQSdGzeh3MzikJWn6EFssAQI18BDij86Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Nov 4 18:43:28 2025 GMT Not After : Nov 11 18:43:28 2025 GMT Subject: CN=690a4951-c3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:37:af:7a:50:60:50:06:9c:6d:04:65:f9: 15:97:4e:81:b3:61:c2:5e:ad:88:82:02:9a:fa:ec: 5b:5b:8b:d0:82:00:84:bd:b5:c2:7b:4a:75:0b:db: f3:fa:92:55:fa:2a:e1:3f:24:fe:03:a3:8b:67:e7: 5b:02:a1:72:b3:7e:0c:0d:df:67:9d:77:bd:9f:67: c5:8e:5d:71:67:77:34:ae:e2:16:e1:10:78:23:0f: ac:0f:36:c6:31:fe:1e:71:c6:25:fc:42:61:41:83: 00:75:91:e5:25:8b:7e:95:ac:12:8b:bf:a3:10:69: 83:69:3b:46:c5:9b:05:71:09:1d:9b:d4:4f:e2:99: 6b:4d:1c:59:fb:21:f0:af:f2:9a:e0:08:aa:e0:b0: 41:9a:fb:b9:5f:f3:79:4f:d1:85:6e:64:c0:92:2b: d6:4c:61:78:0c:53:85:87:54:9e:9e:ea:b4:1e:08: 79:35:35:84:b0:d7:55:b4:98:a3:d7:77:6d:c8:44: 74:d5:9c:cb:40:8e:55:c2:58:c0:0c:02:12:56:13: ec:be:8b:6a:45:31:32:fb:16:84:27:3d:06:d9:c1: 5a:bd:09:0c:8a:2b:f6:ea:dc:d3:ab:6c:82:d1:a1: b2:4a:fd:8d:c8:02:f4:1c:a7:f8:10:c4:cc:b8:df: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:1E:68:57:C3:80:04:3D:36:82:AE:8E:0A:EF:36:F4:F9:70:DD X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:52:d8:67:ec:ba:0a:bc:75:bf:12:06:6d:43:99:bc:6c:f0: bf:a8:df:cb:8e:52:b3:e8:db:f7:ef:e5:a9:30:94:2b:ed:84: 22:8e:1c:aa:a6:04:53:4f:ad:c5:2e:8f:c3:c1:cc:c2:f6:42: e9:a2:0d:79:52:99:0d:fa:15:96:71:08:7a:6b:a0:41:c8:55: fb:52:88:1d:d6:46:cc:30:94:f1:0e:e4:d6:d5:19:2c:10:4e: 75:6c:a8:c4:62:ee:a7:a7:54:b2:a2:bd:61:10:78:d9:75:85: ed:d6:89:2b:c7:7e:61:ad:d4:8c:9b:ac:ff:68:69:cd:07:91: 5a:e2:28:ce:19:74:09:1d:2a:b4:f2:6d:2c:ed:31:81:2a:05: 69:82:a0:08:cb:d3:f1:ea:84:b0:62:d7:5e:45:d0:96:f2:e5: 14:23:0c:29:f5:8a:1a:1d:e1:e2:2a:ad:eb:45:ce:dd:2c:d4: f4:a4:5f:f4:29:cd:01:43:e0:3f:85:86:ce:d5:6c:2a:77:9a: 0c:cf:e6:50:20:66:65:94:e0:84:9c:d3:d3:95:c6:bc:0b:00: 48:e2:3a:3b:a4:01:a8:0f:a3:bf:d0:ad:c8:3d:4e:05:cb:c6: 52:62:6e:a8:07:e4:a2:bd:0d:fe:50:b2:ed:a6:cb:bb:ab:2c: 9c:68:08:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjUxMTA0MTg0MzI4WhcNMjUxMTExMTg0MzI4WjAYMRYwFAYD VQQDEw02OTBhNDk1MS1jM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCE3r3pQYFAGnG0EZfkVl06Bs2HCXq2IggKa+uxbW4vQggCEvbXCe0p1C9vz +pJV+irhPyT+A6OLZ+dbAqFys34MDd9nnXe9n2fFjl1xZ3c0ruIW4RB4Iw+sDzbG Mf4eccYl/EJhQYMAdZHlJYt+lawSi7+jEGmDaTtGxZsFcQkdm9RP4plrTRxZ+yHw r/Ka4Aiq4LBBmvu5X/N5T9GFbmTAkivWTGF4DFOFh1Senuq0Hgh5NTWEsNdVtJij 13dtyER01ZzLQI5VwljADAISVhPsvotqRTEy+xaEJz0G2cFavQkMiiv26tzTq2yC 0aGySv2NyAL0HKf4EMTMuN/SLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkCHmhX w4AEPTaCro4K7zb0+XDdMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmUthn7LoKvHW/EgZtQ5m8bPC/qN/LjlKz6Nv37+WpMJQr7YQijhyq pgRTT63FLo/DwczC9kLpog15UpkN+hWWcQh6a6BByFX7Uogd1kbMMJTxDuTW1Rks EE51bKjEYu6np1Syor1hEHjZdYXt1okrx35hrdSMm6z/aGnNB5Fa4ijOGXQJHSq0 8m0s7TGBKgVpgqAIy9Px6oSwYtdeRdCW8uUUIwwp9YoaHeHiKq3rRc7dLNT0pF/0 Kc0BQ+A/hYbO1Wwqd5oMz+ZQIGZllOCEnNPTlca8CwBI4jo7pAGoD6O/0K3IPU4F y8ZSYm6oB+SivQ3+ULLtpsu7qyycaAi+ -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:28 2025 by rpki-client