$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: 4qav7qZCdkB98tHOzeaL9wmfvx0Q65x8Cm0kxrvGrWY= Subject key identifier: FB:1C:95:26:45:AA:64:01:04:4A:E6:8F:8A:DB:D3:29:33:D1:B0:72 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 10BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 10B1 Signing time: Sun 02 Nov 2025 17:20:52 +0000 Manifest this update: Sun 02 Nov 2025 17:20:52 +0000 Manifest next update: Sun 09 Nov 2025 17:20:52 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: lIr9lWYJvwD3N4yXJOyqTYAiAYbgNk4KuoyRDc0IXCM=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4285 (0x10bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Nov 2 17:20:52 2025 GMT Not After : Nov 9 17:20:52 2025 GMT Subject: CN=690792f4-5eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:7c:3a:58:d8:58:84:67:54:0f:7f:d9:88: d8:7a:78:1c:6c:55:fa:9d:45:4c:80:63:cf:62:f0: 18:88:15:10:c7:b8:6b:5e:be:0f:5f:ef:a5:7e:5b: fe:83:97:bf:a2:07:44:a8:e1:46:bf:4a:b0:48:dc: 92:16:3a:e8:32:a5:01:29:0c:3d:cd:f1:2e:83:11: be:ed:80:e3:02:a8:a3:4f:54:f3:bb:fc:79:0f:29: e1:ec:b0:e9:3f:e5:85:50:8f:1c:f6:47:25:90:7f: 85:12:28:cc:8a:38:88:ae:79:57:b1:12:9b:60:f7: e4:6e:b8:a6:a7:c5:e9:a2:62:d8:3d:7f:a2:c1:b6: dc:13:ac:4f:4b:14:84:0a:fa:bc:8d:22:ac:9e:12: 9b:78:e5:7d:28:04:fd:e0:0e:fe:fc:90:5b:a0:e0: 8e:1c:5a:3a:cc:4a:9c:5b:40:73:56:dd:2b:86:cc: a0:b8:60:39:2a:ff:63:58:66:07:89:6a:45:75:20: 58:45:8f:22:2f:cb:72:c4:ce:65:c5:4b:ab:41:91: 88:80:e5:4a:3f:11:8d:09:43:9f:f7:83:79:ea:04: 4c:c7:a5:4d:b7:97:13:68:cf:77:bd:f0:ab:8f:de: c9:ec:32:b8:bf:9f:9e:6b:c3:f1:b5:62:4f:2c:0d: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1C:95:26:45:AA:64:01:04:4A:E6:8F:8A:DB:D3:29:33:D1:B0:72 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:65:0d:19:5a:2a:42:8e:66:35:3d:53:58:a1:64:e5:eb:a2: bf:3f:38:98:14:49:c7:5f:7f:2e:0c:4e:1d:7a:71:87:bf:4d: dd:e1:8d:02:62:f5:97:6f:ff:44:7e:8e:9c:05:46:86:a7:d1: 88:cf:ea:a4:4f:55:e0:9a:b6:a5:bd:52:9d:d0:57:d2:24:63: 0c:4c:62:09:78:57:46:34:f3:d0:59:09:c8:2a:49:0f:9a:3f: 4a:6e:c5:0a:36:b2:45:6f:11:e2:70:67:d9:8f:50:f5:f6:72: 06:89:49:2f:18:44:db:78:a3:f8:13:d6:90:b4:9b:5b:aa:90: 26:1e:2d:7c:6b:48:18:44:72:c7:51:0c:da:6f:f2:27:60:30: 09:01:ac:9c:c0:45:1f:8b:f6:12:d1:07:5f:12:11:f1:e4:5b: aa:d0:72:98:3f:82:8f:91:37:0d:39:62:19:39:04:66:78:66: 98:5a:c1:b9:b8:82:43:73:6b:77:95:24:5f:a2:8e:15:8e:8a: c1:8e:0f:be:90:61:04:10:65:1e:3f:f5:31:0e:53:ef:1e:f8: ad:3d:55:a8:eb:6a:92:92:00:66:94:f0:08:74:d2:81:49:04: 34:f6:02:66:dd:5d:ff:70:6c:5b:4c:42:cb:3c:e3:de:81:68: bd:a9:a4:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUxMTAyMTcyMDUyWhcNMjUxMTA5MTcyMDUyWjAYMRYwFAYD VQQDEw02OTA3OTJmNC01ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl18OljYWIRnVA9/2YjYengcbFX6nUVMgGPPYvAYiBUQx7hrXr4PX++lflv+ g5e/ogdEqOFGv0qwSNySFjroMqUBKQw9zfEugxG+7YDjAqijT1Tzu/x5Dynh7LDp P+WFUI8c9kclkH+FEijMijiIrnlXsRKbYPfkbrimp8XpomLYPX+iwbbcE6xPSxSE Cvq8jSKsnhKbeOV9KAT94A7+/JBboOCOHFo6zEqcW0BzVt0rhsyguGA5Kv9jWGYH iWpFdSBYRY8iL8tyxM5lxUurQZGIgOVKPxGNCUOf94N56gRMx6VNt5cTaM93vfCr j97J7DK4v5+ea8PxtWJPLA0AYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsclSZF qmQBBErmj4rb0ykz0bByMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASZQ0ZWipCjmY1PVNYoWTl66K/PziYFEnHX38uDE4denGHv03d4Y0C YvWXb/9Efo6cBUaGp9GIz+qkT1XgmralvVKd0FfSJGMMTGIJeFdGNPPQWQnIKkkP mj9KbsUKNrJFbxHicGfZj1D19nIGiUkvGETbeKP4E9aQtJtbqpAmHi18a0gYRHLH UQzab/InYDAJAaycwEUfi/YS0QdfEhHx5Fuq0HKYP4KPkTcNOWIZOQRmeGaYWsG5 uIJDc2t3lSRfoo4VjorBjg++kGEEEGUeP/UxDlPvHvitPVWo62qSkgBmlPAIdNKB SQQ09gJm3V3/cGxbTELLPOPegWi9qaT6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:22 2025 by rpki-client