$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: p5Qlw/CON9FMkA7FY9qKAI3GmblKrwljRISlv+gbfSc= Subject key identifier: BF:04:F9:25:24:86:92:37:18:42:C0:D2:CB:2A:5F:98:4B:BA:BD:C1 Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 071C Signing time: Sun 02 Nov 2025 21:51:17 +0000 Manifest this update: Sun 02 Nov 2025 21:51:16 +0000 Manifest next update: Sun 09 Nov 2025 21:51:16 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: XaxqTmt9BaUl5zGLk0r5Wxah4EZ5NcMsLOGxZcSjc6s=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: nGQeEW39Od+vQgXs87Jbi/bqrVd4uaNCNXUbjbZuGDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: Nov 2 21:51:16 2025 GMT Not After : Nov 9 21:51:16 2025 GMT Subject: CN=6907d254-5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:fa:2d:59:61:9f:9e:e8:c6:b8:be:d4:7d: 93:5f:2c:39:f2:bf:1a:a4:03:19:ab:dd:5c:68:1a: cc:92:7f:a2:4d:bd:71:32:8f:5d:ad:fa:e8:60:be: b8:ae:09:84:b4:67:ff:9f:4e:f8:97:d3:fa:ee:28: 60:aa:55:4e:28:27:fa:e4:4c:33:56:b8:7d:55:a2: 9e:4d:69:b1:9b:98:95:bc:a5:00:a2:05:92:45:6f: d0:a1:f9:07:38:f5:d7:9b:3b:cb:0c:69:cb:70:27: a3:60:a3:b4:3d:7b:90:25:8f:ff:33:b8:9d:ff:69: be:ba:13:61:45:0f:9c:e8:bf:20:46:11:9b:15:ba: 8f:62:d2:4c:1e:8f:ac:92:fa:2b:70:83:75:d7:36: 3a:90:5d:61:34:39:b1:7a:98:38:74:20:81:e8:58: e4:3b:8a:26:7e:f3:e3:97:75:8f:76:9d:30:63:ea: df:f7:cf:ba:e0:51:d5:18:61:cd:53:62:70:c4:a3: 0c:24:fb:7d:aa:1f:93:fa:f0:c9:56:6f:fb:e2:24: 40:c9:2f:2f:4b:32:e8:fa:ee:e3:69:94:91:d0:66: f0:63:2e:b4:5a:d0:71:3f:cb:50:3b:f8:a2:53:5d: f5:ec:7e:9c:6f:6a:bd:6b:24:06:b5:6d:aa:2a:f6: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:04:F9:25:24:86:92:37:18:42:C0:D2:CB:2A:5F:98:4B:BA:BD:C1 X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:09:70:d7:28:68:9c:2c:03:b5:e1:68:3b:d9:33:a8:d6:50: 5d:06:2b:68:a7:88:66:e3:1b:1e:74:76:0f:23:d8:79:ee:b5: f9:d3:1f:2a:53:c8:3c:b8:ea:fb:45:55:a5:b8:fe:85:3d:d7: 4d:db:ca:57:e0:77:72:8d:23:ea:c6:47:3a:8c:8d:7e:10:ae: 17:4b:88:7f:89:1b:b1:88:96:ec:15:c0:f2:00:4b:34:d1:87: 3c:70:f2:58:51:4a:f3:fd:1a:5b:42:05:73:7c:9d:43:44:37: 26:7d:44:a3:f6:22:b0:fb:18:1f:bd:66:9a:6f:ea:ea:df:a8: bf:94:cb:09:fd:1b:7a:34:cc:60:f6:7f:94:82:3c:e0:a4:18: 68:b6:5d:42:a6:7f:3f:b7:50:94:78:42:68:eb:34:df:76:bd: a2:5e:42:9f:d3:9b:9c:44:66:ba:d7:d3:e3:67:10:15:8a:cb: 85:d8:d9:a3:ea:26:c1:07:3c:2e:a1:d9:e2:8f:36:2e:61:bd: 71:0b:5b:41:a0:3f:4e:4f:61:1d:59:76:d9:6a:c2:0f:01:3b: ad:4e:37:e5:24:05:ae:ee:fe:7c:46:25:1a:d9:2c:71:12:a6: 2d:64:63:10:9d:e7:a1:b3:5b:f0:11:66:33:ed:8a:c3:23:73: 42:cf:d5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjUxMTAyMjE1MTE2WhcNMjUxMTA5MjE1MTE2WjAYMRYwFAYD VQQDEw02OTA3ZDI1NC01ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEb6LVlhn57oxri+1H2TXyw58r8apAMZq91caBrMkn+iTb1xMo9drfroYL64 rgmEtGf/n074l9P67ihgqlVOKCf65EwzVrh9VaKeTWmxm5iVvKUAogWSRW/QofkH OPXXmzvLDGnLcCejYKO0PXuQJY//M7id/2m+uhNhRQ+c6L8gRhGbFbqPYtJMHo+s kvorcIN11zY6kF1hNDmxepg4dCCB6FjkO4omfvPjl3WPdp0wY+rf98+64FHVGGHN U2JwxKMMJPt9qh+T+vDJVm/74iRAyS8vSzLo+u7jaZSR0GbwYy60WtBxP8tQO/ii U1317H6cb2q9ayQGtW2qKvaq9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8E+SUk hpI3GELA0ssqX5hLur3BMB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0CXDXKGicLAO14Wg72TOo1lBdBitop4hm4xsedHYPI9h57rX50x8q U8g8uOr7RVWluP6FPddN28pX4HdyjSPqxkc6jI1+EK4XS4h/iRuxiJbsFcDyAEs0 0Yc8cPJYUUrz/RpbQgVzfJ1DRDcmfUSj9iKw+xgfvWaab+rq36i/lMsJ/Rt6NMxg 9n+UgjzgpBhotl1Cpn8/t1CUeEJo6zTfdr2iXkKf05ucRGa619PjZxAVisuF2Nmj 6ibBBzwuodnijzYuYb1xC1tBoD9OT2EdWXbZasIPATutTjflJAWu7v58RiUa2Sxx EqYtZGMQneehs1vwEWYz7YrDI3NCz9Vo -----END CERTIFICATE-----Generated at Tue Nov 4 04:29:38 2025 by rpki-client