$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: nAYuW4rxQAMcw7h5hdpq6YKcKMxgZUPal906BHFvAy4= Subject key identifier: 3F:2E:D9:FB:8E:CE:F1:11:3B:C6:8D:92:9D:AB:BA:D1:78:4A:C6:0A Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 015E Signing time: Mon 03 Nov 2025 04:04:06 +0000 Manifest this update: Mon 03 Nov 2025 04:04:06 +0000 Manifest next update: Mon 10 Nov 2025 04:04:06 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: ld/3LsIjhHEA7FyAwU8vmla6jHg5EfCpykQEoTddCkU=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Nov 3 04:04:06 2025 GMT Not After : Nov 10 04:04:06 2025 GMT Subject: CN=690829b6-ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:91:3e:c1:06:26:63:d7:b4:6d:3a:c5:2d: 3d:55:b5:b6:e5:b3:b7:cd:9c:15:ad:94:35:90:84: 94:12:1c:83:db:b4:e7:f0:c1:30:ad:1c:74:b4:b6: fd:c2:08:32:52:c2:d7:dc:d3:48:d8:58:d6:34:64: 0a:d2:36:c5:10:43:df:ba:93:85:11:db:18:30:36: b4:da:d7:5b:e0:24:20:53:dd:bb:6a:52:81:73:bd: 62:b1:54:63:1c:df:23:24:14:3e:06:f0:44:5f:89: d7:39:3b:55:eb:2a:64:63:68:0f:9f:60:95:20:50: 11:62:66:81:7a:df:53:b7:8f:d7:44:e2:0b:8f:dd: dc:e0:e7:6a:89:0d:3e:e8:a6:75:71:ab:3f:8f:ed: f6:dd:d7:8d:87:75:a3:64:d5:2f:8e:55:31:fe:0b: 0b:d9:86:03:59:3a:51:9f:c5:cd:4b:f2:2f:cd:de: b8:7f:f6:39:e1:37:58:c2:3e:83:82:17:d6:97:83: 5f:1d:0f:1d:b4:57:42:3d:28:6a:a0:92:bd:00:3d: ac:47:fb:03:e1:f8:df:31:ec:46:43:44:b0:1d:db: f7:26:1e:54:a2:66:d8:d6:5d:ae:c6:3a:9d:6c:aa: 17:88:0e:46:9a:b6:e7:ac:5c:d5:95:c5:29:4f:03: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2E:D9:FB:8E:CE:F1:11:3B:C6:8D:92:9D:AB:BA:D1:78:4A:C6:0A X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b3:4a:b3:06:ca:02:81:20:8e:3b:b6:0f:07:b8:bd:0c:f7: 9f:b1:4c:98:09:ef:13:bc:30:0c:59:67:4b:5e:06:e4:55:6e: 36:5c:b3:fe:e1:ef:a0:f6:07:94:a0:3d:51:c6:29:52:a5:ea: 15:2f:ab:9d:52:46:ec:f6:d5:89:84:b6:da:fe:5e:5b:77:81: 0b:a4:dd:20:2d:0b:ed:23:47:6a:f5:ff:e6:fe:ed:c6:42:c7: 23:f6:11:93:06:84:99:56:6e:a5:8f:20:b6:a1:1c:14:7f:16: 98:2b:ac:6a:39:29:cd:c0:e6:ae:3f:1f:36:04:8c:3e:47:07: cf:24:6c:69:1a:77:e5:47:6e:f9:5d:eb:3e:c8:af:24:1b:17: 45:03:43:2e:de:0c:06:14:02:72:97:b5:f0:4b:f6:fc:88:83: a7:d5:b8:d6:50:32:ba:b8:fa:94:32:87:f8:5d:62:67:d3:40: ef:08:e2:6c:a1:b6:b5:22:f2:e1:b7:cb:01:2f:12:0f:33:a2: 92:0a:95:34:36:de:51:18:d3:92:36:6e:04:04:80:aa:10:7e: 9b:31:11:75:52:78:1c:93:5e:ad:08:9d:19:8f:20:84:c5:28: c7:15:73:52:11:c2:74:3a:d9:ee:96:0a:57:b7:0f:a0:69:a8: 40:3b:23:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUxMTAzMDQwNDA2WhcNMjUxMTEwMDQwNDA2WjAYMRYwFAYD VQQDEw02OTA4MjliNi1iYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdKRPsEGJmPXtG06xS09VbW25bO3zZwVrZQ1kISUEhyD27Tn8MEwrRx0tLb9 wggyUsLX3NNI2FjWNGQK0jbFEEPfupOFEdsYMDa02tdb4CQgU927alKBc71isVRj HN8jJBQ+BvBEX4nXOTtV6ypkY2gPn2CVIFARYmaBet9Tt4/XROILj93c4OdqiQ0+ 6KZ1cas/j+323deNh3WjZNUvjlUx/gsL2YYDWTpRn8XNS/Ivzd64f/Y54TdYwj6D ghfWl4NfHQ8dtFdCPShqoJK9AD2sR/sD4fjfMexGQ0SwHdv3Jh5UombY1l2uxjqd bKoXiA5GmrbnrFzVlcUpTwP/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8u2fuO zvERO8aNkp2rutF4SsYKMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCos0qzBsoCgSCOO7YPB7i9DPefsUyYCe8TvDAMWWdLXgbkVW42XLP+ 4e+g9geUoD1RxilSpeoVL6udUkbs9tWJhLba/l5bd4ELpN0gLQvtI0dq9f/m/u3G Qscj9hGTBoSZVm6ljyC2oRwUfxaYK6xqOSnNwOauPx82BIw+RwfPJGxpGnflR275 Xes+yK8kGxdFA0Mu3gwGFAJyl7XwS/b8iIOn1bjWUDK6uPqUMof4XWJn00DvCOJs oba1IvLht8sBLxIPM6KSCpU0Nt5RGNOSNm4EBICqEH6bMRF1Ungck16tCJ0ZjyCE xSjHFXNSEcJ0OtnulgpXtw+gaahAOyNW -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:06 2025 by rpki-client