$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: D/8j79KUvZ9DZS6G5j+Uwcj/gwOnK2l4GqExOti2V68= Subject key identifier: 02:AD:AB:1A:79:63:24:2B:5E:B5:BB:C7:25:49:E5:67:14:65:4A:14 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0EB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0E9F Signing time: Tue 04 Nov 2025 17:47:32 +0000 Manifest this update: Tue 04 Nov 2025 17:47:32 +0000 Manifest next update: Tue 11 Nov 2025 17:47:32 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: L1qi6u5v2pHsNF0THKqHM+EaHHo4kTyWeXSq4iZ1B/Y=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Nov 4 17:47:32 2025 GMT Not After : Nov 11 17:47:32 2025 GMT Subject: CN=690a3c34-b411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:c1:90:6d:fa:a1:6b:60:a2:e4:e4:bd:79: 5d:56:89:e2:5e:00:1d:ee:b2:37:1d:cd:c7:c9:46: ee:93:d5:0d:9a:84:fc:4b:63:a8:68:3b:0c:bd:be: 18:99:46:d4:d7:2b:07:26:df:7c:e5:16:a2:e4:eb: bc:24:5b:53:73:2f:f0:34:dc:e2:cb:a2:25:91:67: 9b:0d:70:10:06:c0:c6:f1:f1:01:2b:1b:34:bc:e2: e4:5d:15:8a:57:55:9c:2e:e9:05:88:2d:b6:cd:76: 86:96:ca:01:81:40:68:0f:79:d7:b3:b1:cd:62:0d: 3a:96:e4:af:61:64:71:f4:bb:a4:e7:fa:1f:91:72: d5:b9:e9:f6:f9:4f:a6:cb:02:6f:a6:49:e2:c0:0c: 98:cc:c1:9a:3c:88:5c:c2:6b:d4:29:12:e2:af:7f: 91:86:20:3c:fc:67:48:3f:d3:f7:e4:1a:8a:68:73: be:74:3a:f3:f2:dc:a9:f8:a7:b9:43:17:f8:ee:0b: d7:48:2c:88:27:c6:df:a6:af:71:5c:e3:42:22:be: b4:19:11:82:a7:73:19:b5:45:92:c8:ab:f4:e1:41: e9:50:c4:42:c3:da:cf:12:04:49:86:64:86:04:3d: 49:5d:f6:d2:70:f5:5d:33:6f:51:02:54:03:7f:3f: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:AB:1A:79:63:24:2B:5E:B5:BB:C7:25:49:E5:67:14:65:4A:14 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:42:ec:36:94:79:2a:9b:b4:38:10:01:2e:8d:17:f7:fd:06: dc:6f:6b:f3:89:ee:09:c7:24:b2:3c:80:50:c2:1a:88:79:af: 81:02:e4:74:6d:d1:ff:e8:0e:ab:67:51:46:3c:83:1d:0d:59: 90:09:b7:67:58:b8:ef:b6:f2:a3:6f:7d:65:90:e8:dc:bc:53: 2b:65:0c:08:e8:2f:a8:5a:ff:a5:0d:01:dc:ee:6c:86:08:21: e2:41:3b:f4:e7:81:a6:e4:79:8c:ae:59:94:05:b7:cb:b0:25: b7:83:52:2d:01:7e:d5:e5:04:ce:ad:0b:bc:8d:b1:dd:ee:c7: dc:2b:05:c9:06:9d:b4:01:a6:b7:ba:17:71:3e:06:aa:91:23: 82:a5:3c:2b:3b:83:4a:ad:35:63:20:ba:6d:93:13:51:d7:be: 3c:ca:88:c7:1b:f4:b1:64:de:e0:97:60:fe:30:fb:f4:3d:7f: 90:17:77:7a:61:fa:df:fb:cd:e7:89:c4:46:5b:90:0a:6c:31: 7c:ea:06:55:8a:72:48:bd:60:90:25:39:68:be:b0:e1:ad:26: f6:bf:1a:45:88:9f:83:8a:68:98:18:06:ca:9e:a9:71:c9:e0: 00:56:b4:ad:41:5e:f2:83:84:e2:e7:e1:67:23:e0:8c:5c:72: 34:0f:84:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjUxMTA0MTc0NzMyWhcNMjUxMTExMTc0NzMyWjAYMRYwFAYD VQQDEw02OTBhM2MzNC1iNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfXBkG36oWtgouTkvXldVoniXgAd7rI3Hc3HyUbuk9UNmoT8S2OoaDsMvb4Y mUbU1ysHJt985Rai5Ou8JFtTcy/wNNziy6IlkWebDXAQBsDG8fEBKxs0vOLkXRWK V1WcLukFiC22zXaGlsoBgUBoD3nXs7HNYg06luSvYWRx9Luk5/ofkXLVuen2+U+m ywJvpkniwAyYzMGaPIhcwmvUKRLir3+RhiA8/GdIP9P35BqKaHO+dDrz8typ+Ke5 Qxf47gvXSCyIJ8bfpq9xXONCIr60GRGCp3MZtUWSyKv04UHpUMRCw9rPEgRJhmSG BD1JXfbScPVdM29RAlQDfz9n2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKtqxp5 YyQrXrW7xyVJ5WcUZUoUMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Quw2lHkqm7Q4EAEujRf3/Qbcb2vzie4JxySyPIBQwhqIea+BAuR0 bdH/6A6rZ1FGPIMdDVmQCbdnWLjvtvKjb31lkOjcvFMrZQwI6C+oWv+lDQHc7myG CCHiQTv054Gm5HmMrlmUBbfLsCW3g1ItAX7V5QTOrQu8jbHd7sfcKwXJBp20Aaa3 uhdxPgaqkSOCpTwrO4NKrTVjILptkxNR1748yojHG/SxZN7gl2D+MPv0PX+QF3d6 Yfrf+83nicRGW5AKbDF86gZVinJIvWCQJTlovrDhrSb2vxpFiJ+DimiYGAbKnqlx yeAAVrStQV7yg4Ti5+FnI+CMXHI0D4Qz -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:00 2025 by rpki-client