$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: QNw6pvE9vBpOZzxO81zA9oswaAM5YQqflI9+7V+SUaY= Subject key identifier: 02:91:C0:D9:97:F2:DF:1F:21:F3:9C:52:2A:E6:1B:A6:18:13:2B:70 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 0424 Signing time: Wed 05 Nov 2025 00:26:06 +0000 Manifest this update: Wed 05 Nov 2025 00:26:06 +0000 Manifest next update: Wed 12 Nov 2025 00:26:06 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: fUXnL18QZXzBxRa2Im0R58+BJFkJ2FENkO/Az8FNn+o=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Nov 5 00:26:06 2025 GMT Not After : Nov 12 00:26:06 2025 GMT Subject: CN=690a999e-4b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:0c:80:d8:ee:41:37:5b:0d:ea:36:b4:4a: 64:ee:d7:7d:0d:34:69:1d:fa:11:96:3c:a6:7e:46: ab:a8:fd:0d:cf:a8:b5:9c:69:b7:4f:7e:7f:e2:08: 26:40:81:80:1e:6f:78:51:b6:d8:46:83:09:2f:f5: 16:b5:e1:a5:ac:3d:50:99:16:75:d9:8d:1f:fe:89: 3f:9f:86:b2:2f:91:34:88:15:c0:3c:a9:c6:73:e2: bf:22:7e:3e:82:9c:41:f4:32:17:bd:a7:52:2b:17: 48:65:74:02:bd:33:32:da:ba:34:ee:d1:5c:f1:f6: 13:68:66:a0:cf:15:67:5b:a5:ec:84:4a:9e:81:bd: c5:25:1c:b8:f9:b2:65:3a:41:37:93:76:c8:25:c4: f1:fc:17:45:26:95:d6:54:3c:af:6b:4f:03:44:71: 45:e4:53:ba:bd:f1:95:93:0c:0e:54:ca:03:a6:3a: 6e:89:32:cd:f7:a9:7d:ea:66:58:b4:4e:0b:0e:0c: c3:d8:89:fc:d9:ae:0c:c0:91:7d:bb:16:68:60:76: 45:6e:be:7f:f5:9c:fb:7c:8f:44:2c:fa:d3:17:59: 1d:45:f0:c3:7a:cc:55:c6:f2:70:f8:55:60:7c:55: f9:34:01:70:9e:61:0d:e3:2d:c1:5c:a3:8f:c4:67: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:C0:D9:97:F2:DF:1F:21:F3:9C:52:2A:E6:1B:A6:18:13:2B:70 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:de:71:97:c5:b2:f6:74:42:28:ba:62:a0:2f:4a:3e:c9:94: 6a:0b:2d:b4:47:d9:1d:9c:07:9e:3e:1a:04:c8:9e:7a:b8:b8: 31:8e:86:ac:1d:82:69:aa:89:6a:c0:f5:71:16:d7:d3:0a:58: 07:b1:c3:05:d9:16:81:4e:73:43:57:48:2f:ad:e5:2b:9c:41: 1f:25:14:64:f0:57:26:85:23:96:d0:bf:f9:4b:de:51:42:13: 94:9b:cd:10:98:e5:d0:e9:dd:e3:47:77:56:0f:70:85:90:a2: 3c:c4:05:54:f0:5c:a3:84:39:bf:d9:a9:fb:74:9d:83:8e:81: 3e:65:0a:60:88:4f:6c:1e:13:65:9f:39:f7:0f:13:98:85:1f: a4:34:d5:0e:f8:2b:a7:db:cb:1a:d9:ec:bc:77:49:d9:80:6c: e8:7c:2c:68:61:fc:24:d8:64:65:77:51:c8:50:b2:bf:64:98: c2:e0:10:d0:a3:30:1c:d1:73:e0:1b:a3:89:4e:f0:2f:78:7f: b7:33:99:62:99:d2:10:09:aa:0b:a2:d0:9e:c0:e6:7c:e1:1b: 6f:4d:c8:73:be:36:cb:ef:4c:19:5d:91:96:de:32:39:6e:fb: 28:0d:f1:c2:b0:35:07:ad:13:ee:90:f4:26:c0:c7:ae:be:45: bd:cd:20:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUxMTA1MDAyNjA2WhcNMjUxMTEyMDAyNjA2WjAYMRYwFAYD VQQDEw02OTBhOTk5ZS00Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp8MgNjuQTdbDeo2tEpk7td9DTRpHfoRljymfkarqP0Nz6i1nGm3T35/4ggm QIGAHm94UbbYRoMJL/UWteGlrD1QmRZ12Y0f/ok/n4ayL5E0iBXAPKnGc+K/In4+ gpxB9DIXvadSKxdIZXQCvTMy2ro07tFc8fYTaGagzxVnW6XshEqegb3FJRy4+bJl OkE3k3bIJcTx/BdFJpXWVDyva08DRHFF5FO6vfGVkwwOVMoDpjpuiTLN96l96mZY tE4LDgzD2In82a4MwJF9uxZoYHZFbr5/9Zz7fI9ELPrTF1kdRfDDesxVxvJw+FVg fFX5NAFwnmEN4y3BXKOPxGfjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKRwNmX 8t8fIfOcUirmG6YYEytwMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp3nGXxbL2dEIoumKgL0o+yZRqCy20R9kdnAeePhoEyJ56uLgxjoas HYJpqolqwPVxFtfTClgHscMF2RaBTnNDV0gvreUrnEEfJRRk8FcmhSOW0L/5S95R QhOUm80QmOXQ6d3jR3dWD3CFkKI8xAVU8FyjhDm/2an7dJ2DjoE+ZQpgiE9sHhNl nzn3DxOYhR+kNNUO+Cun28sa2ey8d0nZgGzofCxoYfwk2GRld1HIULK/ZJjC4BDQ ozAc0XPgG6OJTvAveH+3M5limdIQCaoLotCewOZ84RtvTchzvjbL70wZXZGW3jI5 bvsoDfHCsDUHrRPukPQmwMeuvkW9zSCa -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:19 2025 by rpki-client