$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: lGEJJTz841IV7SrWQnc7Qy+HfU+fI45YE9L8AXjrWNA= Subject key identifier: F2:1E:E5:B7:43:81:EB:BE:FE:07:ED:2C:94:D6:9C:EF:B1:3B:63:4B Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 019A Signing time: Wed 05 Nov 2025 03:30:04 +0000 Manifest this update: Wed 05 Nov 2025 03:30:03 +0000 Manifest next update: Wed 12 Nov 2025 03:30:03 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: Fn7m+m+HnNaeJ8l/N9Ju+FgbSKBXKkhKNIti8Ls973g=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Nov 5 03:30:03 2025 GMT Not After : Nov 12 03:30:03 2025 GMT Subject: CN=690ac4bb-646c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:81:21:8d:9b:7b:81:ac:4e:ce:52:10:5c: ab:7c:56:10:9b:40:be:d3:74:01:e0:e3:11:79:28: 8e:cc:c2:fe:31:8a:94:b1:15:92:e8:3f:31:25:fe: 1f:5c:69:06:f8:c9:ea:d8:9d:63:96:e6:95:e1:94: 65:50:86:ce:5c:7a:df:f4:ed:d6:dc:a4:46:64:da: 84:16:55:a7:86:c5:dd:c6:57:fc:52:4f:d3:f9:e8: 65:03:55:ee:4d:36:d6:cc:43:cd:9a:91:5c:a0:7e: 20:7d:26:dd:07:d2:e0:4d:bf:ee:ba:02:86:56:be: e7:40:82:90:b2:7a:fa:e0:4c:fa:63:01:6d:3d:ab: 2b:3d:22:94:10:ec:76:c2:39:58:f4:4a:cf:37:dc: 56:6e:a7:70:c6:d2:7f:33:d5:e9:e0:6f:74:35:fe: 5c:6a:d8:cb:18:be:47:d0:12:78:92:2d:e6:fb:d6: 45:5f:a9:79:ce:a2:0c:d9:41:e7:83:0f:89:02:b8: 31:d9:91:30:7d:f7:e7:b6:da:b5:ee:ac:b7:ec:d2: 4f:00:a1:8b:61:57:b7:b1:2e:8c:7b:43:14:38:2d: 46:09:7d:f7:3a:3f:47:c1:a7:0a:67:69:de:c9:d3: 43:07:6c:73:36:61:b8:fc:5c:89:18:a0:c0:f6:41: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1E:E5:B7:43:81:EB:BE:FE:07:ED:2C:94:D6:9C:EF:B1:3B:63:4B X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:34:3d:f9:37:6b:5d:76:61:a7:44:4f:eb:8b:9f:ec:ed:dc: 8d:9b:fb:5e:46:5b:eb:a1:cf:45:bc:26:da:d7:f3:83:5d:dd: 5d:cd:98:f6:aa:ca:b5:db:d2:d3:32:49:41:89:2b:4f:f2:49: 44:83:91:af:fe:4d:17:c2:a6:28:f2:a8:ff:8e:d6:bc:07:a7: 5f:b1:47:84:8a:3c:45:5c:01:a5:29:d5:b6:90:ee:db:33:34: 81:1c:43:b0:d0:50:fb:12:8e:a9:d9:5d:86:07:9c:9e:1f:51: 72:7d:08:48:9f:67:d6:57:db:82:9f:e6:8b:bb:94:c2:a4:a0: 4a:62:7d:fc:6d:d7:e9:a8:31:c4:51:46:b8:84:2e:9f:ed:4e: 97:6a:63:18:88:6e:4b:32:ab:be:01:38:99:d0:68:8e:dd:3a: 1d:bc:21:ab:45:2f:53:90:e3:de:2c:a3:c5:f9:21:2d:57:1d: 33:27:65:97:97:5b:2b:73:69:de:3d:a6:4a:23:db:47:72:6d: 54:95:f6:af:a8:92:2f:8c:e2:7f:c0:e1:ba:d9:54:bd:d0:35: 2d:ad:aa:a3:ca:1b:23:7b:1f:60:be:6e:f5:22:13:90:e7:e6: 9d:ed:a9:8a:e7:79:12:37:3a:33:d6:ba:56:a3:9f:c9:3e:d6: f5:a5:1b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUxMTA1MDMzMDAzWhcNMjUxMTEyMDMzMDAzWjAYMRYwFAYD VQQDEw02OTBhYzRiYi02NDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFGBIY2be4GsTs5SEFyrfFYQm0C+03QB4OMReSiOzML+MYqUsRWS6D8xJf4f XGkG+Mnq2J1jluaV4ZRlUIbOXHrf9O3W3KRGZNqEFlWnhsXdxlf8Uk/T+ehlA1Xu TTbWzEPNmpFcoH4gfSbdB9LgTb/uugKGVr7nQIKQsnr64Ez6YwFtPasrPSKUEOx2 wjlY9ErPN9xWbqdwxtJ/M9Xp4G90Nf5catjLGL5H0BJ4ki3m+9ZFX6l5zqIM2UHn gw+JArgx2ZEwfffnttq17qy37NJPAKGLYVe3sS6Me0MUOC1GCX33Oj9HwacKZ2ne ydNDB2xzNmG4/FyJGKDA9kFpSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIe5bdD geu+/gftLJTWnO+xO2NLMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9ND35N2tddmGnRE/ri5/s7dyNm/teRlvroc9FvCba1/ODXd1dzZj2 qsq129LTMklBiStP8klEg5Gv/k0XwqYo8qj/jta8B6dfsUeEijxFXAGlKdW2kO7b MzSBHEOw0FD7Eo6p2V2GB5yeH1FyfQhIn2fWV9uCn+aLu5TCpKBKYn38bdfpqDHE UUa4hC6f7U6XamMYiG5LMqu+ATiZ0GiO3TodvCGrRS9TkOPeLKPF+SEtVx0zJ2WX l1src2nePaZKI9tHcm1UlfavqJIvjOJ/wOG62VS90DUtraqjyhsjex9gvm71IhOQ 5+ad7amK53kSNzoz1rpWo5/JPtb1pRsB -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:40 2025 by rpki-client