$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: 6y+rx69Q+6ckUzS1yOZGyfzh9nhibO2507zIG7hMMMw= Subject key identifier: CF:3C:E7:7D:7F:AC:BA:B2:7B:FD:60:FA:BA:34:22:5A:30:6D:8B:41 Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 024C Signing time: Mon 03 Nov 2025 02:16:34 +0000 Manifest this update: Mon 03 Nov 2025 02:16:34 +0000 Manifest next update: Mon 10 Nov 2025 02:16:34 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: p9Aik3AEL4eyMZ6E3WVrAcl5MfOlFCauj3jQ/CFtOTg=) 2: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: G5FR8BCzP4HgDtorWui6emF4F8xCXxAPeWvmEJB9XFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Nov 3 02:16:34 2025 GMT Not After : Nov 10 02:16:34 2025 GMT Subject: CN=69081082-064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:0c:ae:aa:a6:ad:0e:8b:91:c2:17:19:3f: 7c:a7:e1:05:4c:1e:c0:d0:d8:ae:ce:f3:be:fc:50: cf:c7:34:91:c7:66:0f:26:a4:20:9f:ad:5a:1e:1f: 17:42:d4:6f:06:94:0d:41:b3:ae:85:65:d4:be:28: 4d:f6:a6:17:1c:0d:9c:ef:3f:4a:ef:00:42:3a:3c: c4:71:48:a5:ea:e5:3d:df:12:e3:51:66:b2:25:cb: 37:2f:60:9e:54:9a:9a:e5:1f:bd:e3:ca:74:33:56: 6f:df:a9:f0:3b:5f:b5:48:9d:77:53:63:a5:de:47: 89:de:a2:46:0b:1f:8a:f1:8e:1f:83:21:e1:25:cb: ab:28:08:80:10:32:21:6a:47:3f:2e:9c:22:e3:60: 94:e9:89:9a:bc:50:e2:81:78:a2:c7:ad:bd:29:1e: e5:8d:ef:59:7b:ee:44:7c:34:53:09:f0:84:d3:df: 22:b6:6b:c1:4b:98:a7:48:47:58:96:7a:dc:66:4b: 33:cd:a7:3e:40:dc:97:ab:64:50:bd:69:82:67:c2: d1:6b:3e:2f:02:4c:55:2c:b8:87:df:6e:44:73:7b: 9d:63:f0:ed:ac:1b:46:a1:ac:73:52:56:e1:c1:5a: 5f:8e:fa:b0:5f:fa:e7:48:83:52:84:d1:57:15:d2: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:E7:7D:7F:AC:BA:B2:7B:FD:60:FA:BA:34:22:5A:30:6D:8B:41 X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:ea:cd:03:c8:de:c3:23:c3:e0:8c:a5:f0:d4:5c:76:3e:80: 0e:e4:10:5a:9b:0e:90:77:ec:aa:de:a4:b3:df:ca:36:2f:e2: 14:36:af:b6:f0:be:0b:54:fd:49:f2:8e:0e:f0:e5:c8:0d:ff: 0b:3b:36:6c:d4:ea:f6:51:1d:e7:52:f0:84:fd:e4:8f:49:29: 9e:62:27:d1:7b:89:34:83:c5:87:87:2d:f7:93:19:00:db:cf: 6f:dd:f9:a4:77:7d:c7:4d:23:2c:5c:8e:98:0f:36:bd:94:57: 45:e6:dc:30:92:fa:e6:3d:6f:a0:5f:58:a9:12:08:7d:41:c3: 67:39:6b:e1:a2:0a:ad:55:3e:a9:98:2d:8e:7a:fb:c4:b5:47: f7:ba:ca:35:65:01:66:37:fb:94:db:53:d2:b0:fa:1e:52:c1: a1:74:cc:3b:32:54:04:27:79:a5:f8:96:0d:60:2e:4b:3e:86: 9e:a3:1d:0f:a1:89:8b:54:d0:da:b7:9a:da:29:d5:1e:38:74: 6a:a7:5d:6d:9f:fa:93:04:46:26:7d:9c:b7:3c:c2:6b:b5:2f: 04:a0:fd:39:d3:5d:eb:9d:c7:fd:71:59:56:aa:69:26:93:05: f2:b7:14:fc:8b:ae:83:1e:c5:0c:8c:40:4e:d3:1c:3c:63:8a: ba:b9:1a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjUxMTAzMDIxNjM0WhcNMjUxMTEwMDIxNjM0WjAYMRYwFAYD VQQDEw02OTA4MTA4Mi0wNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UsMrqqmrQ6LkcIXGT98p+EFTB7A0NiuzvO+/FDPxzSRx2YPJqQgn61aHh8X QtRvBpQNQbOuhWXUvihN9qYXHA2c7z9K7wBCOjzEcUil6uU93xLjUWayJcs3L2Ce VJqa5R+948p0M1Zv36nwO1+1SJ13U2Ol3keJ3qJGCx+K8Y4fgyHhJcurKAiAEDIh akc/Lpwi42CU6YmavFDigXiix629KR7lje9Ze+5EfDRTCfCE098itmvBS5inSEdY lnrcZkszzac+QNyXq2RQvWmCZ8LRaz4vAkxVLLiH325Ec3udY/DtrBtGoaxzUlbh wVpfjvqwX/rnSINShNFXFdKk7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM88531/ rLqye/1g+ro0IlowbYtBMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC46s0DyN7DI8PgjKXw1Fx2PoAO5BBamw6Qd+yq3qSz38o2L+IUNq+2 8L4LVP1J8o4O8OXIDf8LOzZs1Or2UR3nUvCE/eSPSSmeYifRe4k0g8WHhy33kxkA 289v3fmkd33HTSMsXI6YDza9lFdF5twwkvrmPW+gX1ipEgh9QcNnOWvhogqtVT6p mC2OevvEtUf3uso1ZQFmN/uU21PSsPoeUsGhdMw7MlQEJ3ml+JYNYC5LPoaeox0P oYmLVNDat5raKdUeOHRqp11tn/qTBEYmfZy3PMJrtS8EoP05013rncf9cVlWqmkm kwXytxT8i66DHsUMjEBO0xw8Y4q6uRqA -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:15 2025 by rpki-client