$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: BhmGwiZlG6ZmpWqE+a0EqIHot4G/soNAJllRlC85pS0= Subject key identifier: D3:27:84:76:BC:2E:30:8A:26:DF:F8:8D:A9:35:D4:B7:AF:F2:50:D7 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0C72 Signing time: Thu 18 Sep 2025 18:38:23 +0000 Manifest this update: Thu 18 Sep 2025 18:38:23 +0000 Manifest next update: Thu 25 Sep 2025 18:38:23 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: LK9ehu+hwHYp2KvHzNAbhX0c91WazNI5XmJeNQBaN68=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB, serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: Sep 18 18:38:23 2025 GMT Not After : Sep 25 18:38:23 2025 GMT Subject: CN=68cc519f-a0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:a7:80:d6:90:c4:53:15:50:07:2e:35:59: 18:a4:f8:c1:d4:eb:68:1e:82:31:c6:f6:3c:5c:c0: e0:7f:5c:a1:5d:7d:4f:08:19:f2:3d:b8:92:61:b5: 57:8a:91:4e:5a:3b:6d:c9:eb:da:0b:2a:74:b4:a9: 08:7d:57:76:4e:49:f3:cf:7c:d6:fe:48:0f:cc:6a: 95:e0:3f:f1:80:5d:2b:99:8a:9a:87:c2:33:58:2a: 08:28:87:d6:37:9f:3d:cc:f6:51:44:e0:0f:aa:f0: 8c:c5:09:36:79:e7:1b:d6:d6:47:3e:47:bf:83:8f: ae:27:24:1d:84:74:51:47:57:c9:a9:22:c4:f1:0d: 1a:9b:ba:3a:a6:02:68:16:e5:f6:bc:57:e1:62:d5: 06:d1:83:ae:13:a8:95:1e:6f:43:4f:7b:de:3a:b9: e5:7c:c5:ac:2d:43:6e:92:cf:db:d7:15:9f:54:9e: b0:ca:c1:bb:7f:3b:e7:3c:02:91:1f:ee:51:56:52: 93:a7:19:8f:1d:95:09:20:98:65:21:35:da:fb:c8: e5:01:4e:0e:16:62:45:49:ce:93:74:c7:ac:55:34: 6f:57:4a:18:b8:2c:ef:95:d9:a4:4a:f4:38:43:fd: e9:3b:f6:d9:a3:3b:0c:68:7f:fd:0f:88:89:09:cc: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:27:84:76:BC:2E:30:8A:26:DF:F8:8D:A9:35:D4:B7:AF:F2:50:D7 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:18:0d:81:d9:83:2f:4b:02:25:54:bd:dc:40:ea:0b:34: e3:ee:b3:c8:0f:74:9e:fd:10:35:3a:2c:77:97:f1:81:c4:28: ff:a6:41:0d:9c:5d:3b:d6:5d:b5:47:4d:7a:37:31:32:0a:d0: 43:b1:b0:9a:a7:24:eb:25:a7:c6:fd:4f:ad:7f:12:87:86:44: d7:ed:b9:d5:ca:a9:6d:27:45:42:94:44:42:61:7e:84:7c:36: 07:e3:ac:4a:fc:31:a3:ff:15:32:b0:8d:5e:22:e1:a5:c9:d4: 37:2d:2f:39:e6:26:56:7d:f1:79:94:9f:62:93:0b:a5:53:09: 7e:b4:6f:8f:27:35:73:18:b6:dd:3e:aa:63:e2:e7:ff:b6:d8: 57:61:44:a8:09:0c:b8:75:92:f6:05:06:57:2d:e4:84:02:d7: d1:f4:9c:c3:55:89:49:0c:bd:fd:c9:e6:7a:a6:40:16:cd:50: db:5f:51:4a:a3:91:f3:2c:9d:e1:c3:2f:ce:6f:f8:73:91:c2: a2:be:fb:89:4b:cb:9a:2f:14:cc:7d:39:13:b9:b4:5a:a1:f3: 9b:eb:d0:bc:25:97:26:ac:17:ce:5d:e2:d7:21:7b:71:d5:86: 98:c2:e8:eb:9b:d2:06:43:b0:05:6f:69:ec:31:28:ad:aa:08: e3:1d:c4:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjUwOTE4MTgzODIzWhcNMjUwOTI1MTgzODIzWjAYMRYwFAYD VQQDEw02OGNjNTE5Zi1hMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaangNaQxFMVUAcuNVkYpPjB1OtoHoIxxvY8XMDgf1yhXX1PCBnyPbiSYbVX ipFOWjttyevaCyp0tKkIfVd2Tknzz3zW/kgPzGqV4D/xgF0rmYqah8IzWCoIKIfW N589zPZRROAPqvCMxQk2eecb1tZHPke/g4+uJyQdhHRRR1fJqSLE8Q0am7o6pgJo FuX2vFfhYtUG0YOuE6iVHm9DT3veOrnlfMWsLUNuks/b1xWfVJ6wysG7fzvnPAKR H+5RVlKTpxmPHZUJIJhlITXa+8jlAU4OFmJFSc6TdMesVTRvV0oYuCzvldmkSvQ4 Q/3pO/bZozsMaH/9D4iJCcxM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMnhHa8 LjCKJt/4jak11Lev8lDXMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtVhgNgdmDL0sCJVS93EDqCzTj7rPID3Se/RA1Oix3l/GBxCj/pkEN nF071l21R016NzEyCtBDsbCapyTrJafG/U+tfxKHhkTX7bnVyqltJ0VClERCYX6E fDYH46xK/DGj/xUysI1eIuGlydQ3LS855iZWffF5lJ9ikwulUwl+tG+PJzVzGLbd Pqpj4uf/tthXYUSoCQy4dZL2BQZXLeSEAtfR9JzDVYlJDL39yeZ6pkAWzVDbX1FK o5HzLJ3hwy/Ob/hzkcKivvuJS8uaLxTMfTkTubRaofOb69C8JZcmrBfOXeLXIXtx 1YaYwujrm9IGQ7AFb2nsMSitqgjjHcQw -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:08 2025 by rpki-client