$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: ZP1Q++sRzU7jpJdrK3ARBx0ORIxvhyP6nLuF8hQnrNA= Subject key identifier: BE:6C:BC:05:89:68:7C:14:D2:0A:AE:50:AD:C3:F5:0F:FD:73:6D:4D Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: BB Signing time: Mon 03 Nov 2025 05:59:32 +0000 Manifest this update: Mon 03 Nov 2025 05:59:31 +0000 Manifest next update: Mon 10 Nov 2025 05:59:31 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: Q+qje5R+7BIyyfidnL1d3JgXH8SuCcEBUx+Q/C5tIQ8=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: vRtRviaQ6XNpWyRhEwggmiLTt0iFQyzvKucYtEN77kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Nov 3 05:59:31 2025 GMT Not After : Nov 10 05:59:31 2025 GMT Subject: CN=690844c3-fc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:cc:0d:5e:b9:62:eb:39:30:07:14:59:10: 5a:f4:7f:41:b1:7c:57:21:d4:6a:24:56:73:92:25: 7e:0e:cf:0a:c5:fd:ab:ee:e2:a8:02:3c:8e:69:93: 3e:ca:c0:1a:c7:11:a7:6f:c1:2e:3a:4b:29:68:27: b4:52:7d:10:93:02:63:6d:5e:a6:47:df:e8:bf:19: d1:1d:0b:52:fa:66:2e:50:f3:0b:81:22:50:4a:a2: 33:46:ce:bb:5a:83:7d:cb:ef:89:cf:03:93:48:8e: 08:f0:4c:ef:38:d6:d5:f1:26:d5:2a:ff:da:7a:42: 78:22:93:2a:af:02:a0:af:1b:04:0d:7a:be:dc:7e: c1:90:41:e8:56:7c:8c:23:25:32:1a:ee:c1:5f:a0: b0:e6:c3:6c:5f:56:ae:18:24:84:26:a2:77:63:bf: 6e:8b:24:3f:29:37:4b:6d:d0:1f:ad:ad:2a:f4:0d: f2:36:01:ad:26:0e:ab:81:ef:fc:b6:f2:a8:6c:7b: eb:fe:c6:0b:40:1c:f1:e5:22:91:47:a5:87:fd:46: 93:0c:24:58:1d:e0:fc:64:6a:76:cc:d1:fa:e8:d3: 64:5f:23:13:5a:e3:d1:58:5a:78:c6:e9:14:30:5d: 77:45:bf:25:9d:bd:8a:1f:5a:be:83:f7:e9:ca:4b: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6C:BC:05:89:68:7C:14:D2:0A:AE:50:AD:C3:F5:0F:FD:73:6D:4D X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:aa:ef:2f:fa:9a:c6:35:0a:8b:74:32:1b:77:11:ab:52:9a: e4:91:f5:59:c8:68:b8:78:1b:f1:4c:c8:37:8b:9a:f0:e1:64: 81:46:f7:26:c5:67:d3:70:cc:6f:0d:46:28:da:3f:f2:93:1f: 80:07:34:fa:18:d4:e8:30:30:0b:44:7d:51:b8:a7:60:8f:6a: 07:ee:fc:49:3d:b7:b0:54:a2:52:35:42:d6:f4:2f:a9:db:0f: d2:dc:8c:42:b8:0c:c8:6a:38:f1:32:e0:41:41:20:56:24:de: e9:71:4f:f5:c8:9d:6d:7b:b1:30:05:27:10:01:69:83:a0:b0: 0f:e7:44:56:9b:58:4e:22:a3:e4:2a:46:70:32:22:ca:dd:7f: ad:1e:e6:f9:2e:5c:58:36:b2:52:27:91:34:8e:6c:ed:be:ac: 65:3f:f6:99:62:91:01:66:b7:e9:f2:69:be:28:56:fc:90:6f: 3c:61:6b:0c:c3:c9:2c:e6:50:19:53:ac:c9:13:11:f9:97:75: 1d:b6:92:5f:65:94:37:14:be:87:46:8b:bf:07:d4:ec:58:00: ed:bf:de:54:d6:d9:41:63:62:e4:ba:95:3c:b4:b0:10:ce:bf: 0a:6c:16:4f:c4:9f:c7:e6:74:20:98:47:69:4d:a3:cd:e2:3f: 59:2d:94:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MzkxMTAvBgNVBAUTKDBDMUJDRTAyNEI0M0ZEREE4N0YzOTYxNUQ5OTRCQTM3 MDYyNDZDNTAwHhcNMjUxMTAzMDU1OTMxWhcNMjUxMTEwMDU1OTMxWjAYMRYwFAYD VQQDEw02OTA4NDRjMy1mYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jfMDV65Yus5MAcUWRBa9H9BsXxXIdRqJFZzkiV+Ds8Kxf2r7uKoAjyOaZM+ ysAaxxGnb8EuOkspaCe0Un0QkwJjbV6mR9/ovxnRHQtS+mYuUPMLgSJQSqIzRs67 WoN9y++JzwOTSI4I8EzvONbV8SbVKv/aekJ4IpMqrwKgrxsEDXq+3H7BkEHoVnyM IyUyGu7BX6Cw5sNsX1auGCSEJqJ3Y79uiyQ/KTdLbdAfra0q9A3yNgGtJg6rge/8 tvKobHvr/sYLQBzx5SKRR6WH/UaTDCRYHeD8ZGp2zNH66NNkXyMTWuPRWFp4xukU MF13Rb8lnb2KH1q+g/fpykuoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5svAWJ aHwU0gquUK3D9Q/9c21NMB8GA1UdIwQYMBaAFAwbzgJLQ/3ah/OWFdmUujcGJGxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTczOS9DOTVEMzk3QzlG NTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9kcUg4NVlWMlpTNk53WWti RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTczOS9DOTVEMzk3QzlGNTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9k cUg4NVlWMlpTNk53WWtiRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZqu8v+prGNQqLdDIbdxGrUprkkfVZyGi4eBvxTMg3i5rw4WSBRvcm xWfTcMxvDUYo2j/ykx+ABzT6GNToMDALRH1RuKdgj2oH7vxJPbewVKJSNULW9C+p 2w/S3IxCuAzIajjxMuBBQSBWJN7pcU/1yJ1te7EwBScQAWmDoLAP50RWm1hOIqPk KkZwMiLK3X+tHub5LlxYNrJSJ5E0jmztvqxlP/aZYpEBZrfp8mm+KFb8kG88YWsM w8ks5lAZU6zJExH5l3UdtpJfZZQ3FL6HRou/B9TsWADtv95U1tlBY2LkupU8tLAQ zr8KbBZPxJ/H5nQgmEdpTaPN4j9ZLZTG -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:04 2025 by rpki-client