$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: tNnu5VXnUMTxETSzCeZsfGejk86ehM7T+/sbmKmeTOQ= Subject key identifier: 2A:88:BF:33:E0:91:57:0B:4F:F7:A0:DE:85:65:1D:41:4C:BA:28:B1 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 094E Signing time: Sun 02 Nov 2025 20:06:57 +0000 Manifest this update: Sun 02 Nov 2025 20:06:57 +0000 Manifest next update: Sun 09 Nov 2025 20:06:57 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: adrf06UZ48err7PKL0T38CDLFsydlvK7B+KofiYQDRY=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: 7uNxm88C6q373c2vK42wFuybMIcnq4cd4JiVYvjrIkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Nov 2 20:06:57 2025 GMT Not After : Nov 9 20:06:57 2025 GMT Subject: CN=6907b9e1-ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:d4:84:4e:6d:9b:d7:a8:e9:42:26:1c:e6: f9:70:11:02:ad:b0:f3:80:4b:a4:25:36:89:d8:07: 71:ec:6a:92:db:4d:a9:5b:88:63:c4:7f:37:f6:3f: 5b:8a:d8:ef:8e:cc:10:6b:bb:59:18:48:2f:ad:ed: a3:6e:25:66:a0:b2:76:0b:eb:dc:d0:f3:28:67:c0: 28:01:e5:17:5e:40:ad:9b:04:00:86:03:20:fa:bd: d2:8d:a9:f4:75:36:61:a8:70:dc:59:60:d5:f9:d5: 52:a3:7f:e9:d9:54:f1:80:3d:e3:36:5b:cd:88:9e: c9:8d:24:71:cc:d7:c3:7b:43:06:a9:b2:20:48:96: 75:7f:1f:e5:fb:e5:a6:fc:49:28:ae:d0:d5:e1:1d: 33:e6:e3:53:75:97:9c:72:ae:bb:75:b8:76:97:c6: ff:25:c4:0a:03:6a:a0:08:33:bb:58:67:26:33:19: 42:54:ab:f8:11:d2:5e:ad:bd:3d:bf:f5:bc:75:81: 61:8d:75:c0:10:13:b1:57:36:35:7a:a6:f0:08:f6: 05:32:dd:99:eb:c3:17:9c:ac:f5:19:00:e2:c9:ad: 74:1b:ad:aa:9f:76:8d:bb:f7:26:f9:48:3a:b4:58: 56:27:9d:dd:32:e2:de:24:02:6a:76:45:28:2b:7f: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:88:BF:33:E0:91:57:0B:4F:F7:A0:DE:85:65:1D:41:4C:BA:28:B1 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:be:f2:85:11:dc:dc:bc:c2:f8:c2:9d:72:31:e9:02:40: 74:e3:4e:23:54:63:85:ec:1c:80:44:4b:cb:68:4c:4e:f5:90: 66:22:26:ec:61:ca:17:d5:4f:37:9e:a6:51:69:ec:31:44:49: bb:c1:84:9a:8d:88:1a:0a:ac:ef:de:83:ec:b3:c7:dd:69:9d: f5:f3:c3:fe:21:cc:24:58:78:e7:83:63:bd:cf:84:2d:1c:5a: 53:61:a5:2d:3d:7b:32:8b:9c:79:a2:3b:fb:07:5b:80:4b:72: c6:f1:5b:a6:32:11:32:58:21:ce:fd:c7:25:a2:c5:52:e4:63: d0:59:66:34:8c:d3:e2:af:f4:07:10:e5:c5:57:2f:1c:dd:b8: 15:14:3e:28:08:79:fa:3a:a9:fb:eb:5f:57:95:24:99:17:6e: 98:01:c8:8e:9a:ca:bc:45:03:76:cc:a3:19:58:56:e4:72:4e: f3:24:26:18:74:a2:f0:5c:1a:c8:52:74:7f:c0:a4:0c:c2:2c: a0:84:65:d3:b2:af:d2:e3:b2:7e:b7:f1:6d:da:8e:3e:f3:1d: ad:3f:54:81:7b:b4:3c:bd:88:36:94:bd:38:68:5c:20:b3:c7: 5c:4b:08:b7:22:88:cd:39:fb:dc:ec:c7:91:30:09:1c:e4:fe: 42:14:e4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjUxMTAyMjAwNjU3WhcNMjUxMTA5MjAwNjU3WjAYMRYwFAYD VQQDEw02OTA3YjllMS1lZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6TUhE5tm9eo6UImHOb5cBECrbDzgEukJTaJ2Adx7GqS202pW4hjxH839j9b itjvjswQa7tZGEgvre2jbiVmoLJ2C+vc0PMoZ8AoAeUXXkCtmwQAhgMg+r3Sjan0 dTZhqHDcWWDV+dVSo3/p2VTxgD3jNlvNiJ7JjSRxzNfDe0MGqbIgSJZ1fx/l++Wm /EkortDV4R0z5uNTdZeccq67dbh2l8b/JcQKA2qgCDO7WGcmMxlCVKv4EdJerb09 v/W8dYFhjXXAEBOxVzY1eqbwCPYFMt2Z68MXnKz1GQDiya10G62qn3aNu/cm+Ug6 tFhWJ53dMuLeJAJqdkUoK393HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqIvzPg kVcLT/eg3oVlHUFMuiixMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcb7yhRHc3LzC+MKdcjHpAkB0404jVGOF7ByAREvLaExO9ZBmIibs YcoX1U83nqZRaewxREm7wYSajYgaCqzv3oPss8fdaZ3188P+IcwkWHjng2O9z4Qt HFpTYaUtPXsyi5x5ojv7B1uAS3LG8VumMhEyWCHO/cclosVS5GPQWWY0jNPir/QH EOXFVy8c3bgVFD4oCHn6Oqn7619XlSSZF26YAciOmsq8RQN2zKMZWFbkck7zJCYY dKLwXBrIUnR/wKQMwiyghGXTsq/S47J+t/Ft2o4+8x2tP1SBe7Q8vYg2lL04aFwg s8dcSwi3IojNOfvc7MeRMAkc5P5CFOQa -----END CERTIFICATE-----Generated at Tue Nov 4 01:11:58 2025 by rpki-client