$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: sj/7LdAmI7/UNLu+wPmVzWBlHqP805QbgQUhtdQJTS0= Subject key identifier: 49:8A:06:73:5F:97:83:12:D0:22:27:F3:04:77:5A:E8:90:52:64:5F Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 354A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 3517 Signing time: Tue 04 Nov 2025 14:17:31 +0000 Manifest this update: Tue 04 Nov 2025 14:17:30 +0000 Manifest next update: Tue 11 Nov 2025 14:17:30 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: oljPITeUG/sPo7nUmKxliPAN74D+fUbECl8NzuHvIRU=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Nov 4 14:17:30 2025 GMT Not After : Nov 11 14:17:30 2025 GMT Subject: CN=690a0afa-a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:91:b6:1b:4b:46:63:58:df:ac:29:61:1f: 34:37:c6:c2:31:d0:15:1e:74:f4:8a:5d:93:eb:f8: c7:46:63:26:9a:49:59:53:02:31:58:4b:63:61:d0: d8:ab:fa:aa:cb:1b:7c:7a:9d:06:d3:b0:27:a4:db: aa:d6:8c:e7:1a:36:42:34:8a:cb:71:f8:fb:75:c7: b0:da:fb:ba:89:06:33:9c:a8:62:01:63:0a:54:35: 68:71:72:c5:59:7d:c0:07:11:4b:27:46:b1:79:be: 96:d6:8c:b8:78:d1:41:81:63:e4:7c:f3:40:69:cf: 14:62:de:d2:bb:47:84:4e:4f:99:8e:c1:a1:40:d4: e8:33:1e:ec:b2:77:d1:be:92:fe:64:fa:6c:00:21: ad:27:ef:c4:eb:8d:91:78:7f:37:57:04:63:2d:f8: 7b:d2:01:65:a4:96:23:ff:47:ba:6b:2f:9b:56:64: 65:25:ab:84:92:41:e3:a3:02:dc:ce:ae:ae:5f:01: cd:8d:54:65:60:80:b1:6e:d0:0a:ad:39:1a:b4:92: 75:87:79:5f:b8:84:4f:cb:cf:cf:49:1b:27:c1:2f: 2a:7d:f6:89:58:75:7f:94:97:bc:0f:21:32:d3:99: 03:9c:c8:55:47:7a:c2:82:33:40:f6:95:ef:2b:b2: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8A:06:73:5F:97:83:12:D0:22:27:F3:04:77:5A:E8:90:52:64:5F X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:51:e7:d7:59:03:70:ac:2d:e0:ad:6f:af:46:ba:db:45: 40:1f:df:4a:cb:6d:51:a8:73:ff:0a:59:a7:0d:0a:78:d3:fd: 37:43:e2:cf:20:aa:39:b1:77:b7:6d:46:92:0c:ff:6e:58:7c: dc:d8:bb:35:0f:a3:b2:0c:d9:d5:ba:4b:9b:63:7f:b9:22:73: 57:07:18:7c:e5:d1:4f:11:3f:99:63:16:ae:7c:fb:33:2b:20: 0e:f4:98:60:c1:6e:5b:7d:6f:f3:39:ee:e8:27:b1:7d:95:37: 8e:b5:20:2a:84:13:c1:b3:15:c9:4a:c8:1e:24:26:ef:bf:76: e2:e3:85:7c:fe:06:56:56:1e:47:84:c2:86:7e:8e:67:07:6f: 10:b2:87:f0:b9:8b:ed:96:55:8d:6d:3a:c6:29:fb:c2:f4:b4: 5f:d1:b7:f0:f3:78:80:67:fd:ad:66:79:48:f7:a5:94:71:e8: 34:c2:b4:d0:76:97:28:5f:20:9b:58:52:74:35:ad:22:ba:4e: dc:04:e8:02:d5:76:ff:31:89:e1:3a:e5:dc:f9:fb:60:ba:68: f3:d4:79:39:57:3c:92:61:0e:e9:cb:c2:e7:d7:72:9c:1f:ea: 56:f5:39:66:5e:7b:50:f4:70:38:4e:e0:6a:70:a8:8d:69:fe: cd:b7:7e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUxMTA0MTQxNzMwWhcNMjUxMTExMTQxNzMwWjAYMRYwFAYD VQQDEw02OTBhMGFmYS1hNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YGRthtLRmNY36wpYR80N8bCMdAVHnT0il2T6/jHRmMmmklZUwIxWEtjYdDY q/qqyxt8ep0G07AnpNuq1oznGjZCNIrLcfj7dcew2vu6iQYznKhiAWMKVDVocXLF WX3ABxFLJ0axeb6W1oy4eNFBgWPkfPNAac8UYt7Su0eETk+ZjsGhQNToMx7ssnfR vpL+ZPpsACGtJ+/E642ReH83VwRjLfh70gFlpJYj/0e6ay+bVmRlJauEkkHjowLc zq6uXwHNjVRlYICxbtAKrTkatJJ1h3lfuIRPy8/PSRsnwS8qffaJWHV/lJe8DyEy 05kDnMhVR3rCgjNA9pXvK7LfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmKBnNf l4MS0CIn8wR3WuiQUmRfMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjVHn11kDcKwt4K1vr0a620VAH99Ky21RqHP/ClmnDQp40/03Q+LP IKo5sXe3bUaSDP9uWHzc2Ls1D6OyDNnVukubY3+5InNXBxh85dFPET+ZYxaufPsz KyAO9JhgwW5bfW/zOe7oJ7F9lTeOtSAqhBPBsxXJSsgeJCbvv3bi44V8/gZWVh5H hMKGfo5nB28QsofwuYvtllWNbTrGKfvC9LRf0bfw83iAZ/2tZnlI96WUceg0wrTQ dpcoXyCbWFJ0Na0iuk7cBOgC1Xb/MYnhOuXc+ftgumjz1Hk5VzySYQ7py8Ln13Kc H+pW9TlmXntQ9HA4TuBqcKiNaf7Nt35U -----END CERTIFICATE-----Generated at Tue Nov 4 17:19:28 2025 by rpki-client