$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: J0RjyUARmcoWmwnnvxHQM4ikM8xWGGOxRkHo/6svoQo= Subject key identifier: 99:0D:EB:0C:64:38:38:B3:67:68:B5:B2:9E:1D:CB:29:C0:0A:3D:2E Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 34DC Signing time: Sun 26 Oct 2025 15:19:56 +0000 Manifest this update: Sun 26 Oct 2025 15:19:55 +0000 Manifest next update: Sun 02 Nov 2025 15:19:55 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: 3gdyDC+qfOVooHmItuE0tBjnnmIwB03schwe54mR/E8=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: Sw4ihe/uH6fmIDPdKoxmP7xAVXuq4ul6aZ2AD9s5AWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 15:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Oct 26 15:19:55 2025 GMT Not After : Nov 2 15:19:55 2025 GMT Subject: CN=68fe3c1b-623f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:6e:0a:aa:9f:67:e0:e7:f3:34:f2:d4:41: 8d:24:a6:b6:45:c7:e8:56:aa:1b:92:b4:f3:ed:64: ba:96:12:b0:f9:16:e6:2c:5c:db:bd:30:ae:7b:49: 7a:65:cd:86:c0:c3:11:8b:a8:3f:3f:e3:b3:c3:21: 9c:ad:82:69:df:4b:d1:18:57:d5:9c:1d:ca:e6:70: b7:2a:0d:c4:68:13:e8:9a:2e:c3:aa:b8:ae:6e:6a: 8d:9c:77:fe:99:a5:9a:8b:fd:cc:43:ca:21:56:e7: a0:51:66:13:59:87:a6:b0:9e:24:59:c7:0c:f9:12: 79:f3:ed:6e:c6:cd:62:96:be:3a:3d:8c:32:53:07: 59:ec:67:40:4b:85:68:5f:32:e2:3a:6b:fa:8f:34: 0d:65:dd:74:39:31:43:74:61:9c:0d:9e:16:70:fc: 94:07:e6:1e:8f:88:0b:5d:94:bf:0b:69:4f:76:96: 74:8a:c2:6c:8f:e0:32:1b:45:45:8b:33:96:c0:bb: 93:c0:74:65:85:1b:fc:0f:b9:ed:27:eb:73:e9:0b: 9e:58:87:28:bd:c0:06:bb:3f:8c:f8:8d:0e:27:09: ab:c3:07:ff:ea:2c:40:91:d5:cf:de:5f:ae:dd:5d: 9d:da:1e:b1:a6:36:72:32:a1:53:d6:1b:bb:b1:68: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:EB:0C:64:38:38:B3:67:68:B5:B2:9E:1D:CB:29:C0:0A:3D:2E X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:eb:71:8d:15:27:ba:6a:ef:99:93:09:36:eb:3e:ee:5f:de: 8a:a4:aa:91:29:d2:b4:71:27:4d:9a:51:a2:ba:3c:aa:65:2a: 9f:4c:4f:1a:b9:dc:2b:ad:fd:3b:e4:a7:eb:6b:70:f5:42:10: 9f:a7:ce:ed:ab:99:5d:cd:c5:51:3e:d7:40:1c:e5:cc:88:54: d7:9c:9e:04:d3:70:24:5e:de:58:fc:ac:b2:8f:c8:ed:e4:78: de:ea:ca:dc:d0:4d:04:71:9e:4e:f9:27:f9:e7:f7:f4:d8:e7: 76:02:79:65:0f:f1:1a:79:53:9f:30:1d:23:cd:ab:73:8c:5c: e3:0c:d3:8f:ad:f3:c2:ba:b7:10:f9:68:f7:9e:bf:ae:88:82: 69:af:b2:e1:eb:4e:7a:20:da:86:f6:3e:9a:4b:a8:7d:7a:64: e9:88:eb:8b:33:f5:a2:ad:d3:3c:17:93:e5:dd:c0:99:81:b5: bc:3b:f7:95:f2:81:12:85:22:34:7b:f2:d9:c4:75:1a:4f:9c: 37:31:04:9e:c7:2c:79:79:79:2b:9e:df:b8:d1:b8:6d:77:f5: 7e:a2:a1:4c:40:5d:c4:dd:82:85:7f:48:01:a1:a7:9f:80:0c: 7a:74:42:5a:49:1c:d6:43:27:b0:d6:e3:33:b1:00:96:fa:4a: 34:55:0e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjUxMDI2MTUxOTU1WhcNMjUxMTAyMTUxOTU1WjAYMRYwFAYD VQQDEw02OGZlM2MxYi02MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57luCqqfZ+Dn8zTy1EGNJKa2RcfoVqobkrTz7WS6lhKw+RbmLFzbvTCue0l6 Zc2GwMMRi6g/P+OzwyGcrYJp30vRGFfVnB3K5nC3Kg3EaBPomi7DqriubmqNnHf+ maWai/3MQ8ohVuegUWYTWYemsJ4kWccM+RJ58+1uxs1ilr46PYwyUwdZ7GdAS4Vo XzLiOmv6jzQNZd10OTFDdGGcDZ4WcPyUB+Yej4gLXZS/C2lPdpZ0isJsj+AyG0VF izOWwLuTwHRlhRv8D7ntJ+tz6QueWIcovcAGuz+M+I0OJwmrwwf/6ixAkdXP3l+u 3V2d2h6xpjZyMqFT1hu7sWhnhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkN6wxk ODizZ2i1sp4dyynACj0uMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR63GNFSe6au+Zkwk26z7uX96KpKqRKdK0cSdNmlGiujyqZSqfTE8a udwrrf075Kfra3D1QhCfp87tq5ldzcVRPtdAHOXMiFTXnJ4E03AkXt5Y/Kyyj8jt 5Hje6src0E0EcZ5O+Sf55/f02Od2AnllD/EaeVOfMB0jzatzjFzjDNOPrfPCurcQ +Wj3nr+uiIJpr7Lh6056INqG9j6aS6h9emTpiOuLM/WirdM8F5Pl3cCZgbW8O/eV 8oEShSI0e/LZxHUaT5w3MQSexyx5eXkrnt+40bhtd/V+oqFMQF3E3YKFf0gBoaef gAx6dEJaSRzWQyew1uMzsQCW+ko0VQ7b -----END CERTIFICATE-----Generated at Tue Oct 28 12:38:20 2025 by rpki-client