$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: HTs/YWlOy5lU9w2xHTJh5t1YF7iQ+T9738xKK1Lt9KY= Subject key identifier: 87:FC:EF:6E:4D:95:00:C5:B7:D8:8B:EA:97:9A:4F:D7:C6:B2:58:5A Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0C4B Signing time: Thu 30 Oct 2025 18:36:25 +0000 Manifest this update: Thu 30 Oct 2025 18:36:25 +0000 Manifest next update: Thu 06 Nov 2025 18:36:25 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: FpBD3bdkfYAWOEAnESrdD3xoPFqtQJV0VFuFtmHRVoI=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: wzXZlkexc5sjvRQO55tIhvKG7H8TjPJiYMXMwF75NaU=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: s9oCtHipBgMZ52edn5qYpaiYwsdO5HeOHXixZ4PKFRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Oct 30 18:36:25 2025 GMT Not After : Nov 6 18:36:25 2025 GMT Subject: CN=6903b029-7a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:76:56:e5:15:7f:3e:41:28:49:4d:6f:d7: 19:52:f3:b2:94:f0:38:14:a3:a6:2b:38:7c:87:97: 4b:cd:27:3c:c9:9d:b0:85:10:3d:2a:94:b6:b5:4d: 1d:a2:c9:f3:13:bc:1f:b8:0d:95:1d:b5:c3:b1:cb: 6f:d2:08:5c:83:ae:f0:3f:b0:f2:a3:4e:41:c0:d9: 87:ac:be:b9:34:e3:bb:90:c7:ad:66:08:b9:53:ad: e4:81:1a:51:31:3c:e5:3b:df:52:67:ac:cb:cc:71: e8:4c:9e:ea:c1:45:65:0c:4f:2d:85:6b:f5:a0:b7: d1:d6:6b:0c:51:15:69:5c:48:80:ad:2f:2f:98:25: ee:1a:91:ad:f2:96:f8:d4:5c:b2:0d:99:70:56:68: a2:68:f1:6e:c9:c9:cf:a8:c3:d8:84:6e:33:47:9b: 29:bf:fa:26:8e:bd:8d:99:05:75:73:f2:27:eb:79: 90:5e:5c:6c:92:6e:59:5c:d2:36:8d:b8:3e:1c:60: 0a:fc:d4:1d:97:56:c1:af:7d:73:e1:79:fa:0d:d8: 69:c3:71:94:25:14:41:a2:6b:1b:18:c8:00:0d:39: 22:65:21:2a:f6:a7:7b:68:38:95:53:a6:a7:b9:f6: 54:3f:1e:c0:fa:3b:bf:da:03:b8:6b:39:d1:88:31: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:EF:6E:4D:95:00:C5:B7:D8:8B:EA:97:9A:4F:D7:C6:B2:58:5A X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:68:a8:39:aa:03:4d:d7:c6:b6:15:61:4d:06:24:4b:46:0a: d2:9c:89:83:14:93:13:67:16:c1:04:c5:84:55:98:24:34:0d: 00:a6:8e:6d:d3:9e:48:87:d3:87:d8:4f:ca:cf:ca:45:59:9c: b5:26:48:05:98:98:86:1c:44:4a:69:59:6b:39:06:50:77:a6: 50:ce:c9:2a:01:eb:73:b8:3a:8c:8a:b1:e4:1c:7b:5a:2d:a7: 6b:a1:57:98:b7:bb:6a:9b:56:47:41:a7:af:3f:93:02:c0:d9: a7:f0:89:ac:b4:5d:02:da:70:ea:73:a6:66:ec:8a:78:71:5c: 40:9f:4a:81:f5:b3:c1:05:6a:24:31:05:41:07:27:b2:8b:3a: 60:43:59:9b:ce:db:3d:d6:3b:5c:c4:41:14:59:bd:60:7b:3a: e9:de:87:ff:5f:6f:f1:be:f6:cd:fa:ab:0e:3e:96:ab:01:31: e1:83:a5:f2:0f:5f:8d:00:77:bb:c5:ed:6f:5e:42:07:1c:6b: 6e:0d:f9:e2:3c:6d:85:7f:6b:da:38:6c:33:1a:20:19:0d:eb: ac:f2:41:21:78:9b:e0:30:fe:dc:e6:7f:41:c3:47:23:20:5f: e0:29:56:3f:88:19:4a:ff:00:ed:c2:12:f4:41:68:d6:0f:33: ad:83:63:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjUxMDMwMTgzNjI1WhcNMjUxMTA2MTgzNjI1WjAYMRYwFAYD VQQDEw02OTAzYjAyOS03YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH52VuUVfz5BKElNb9cZUvOylPA4FKOmKzh8h5dLzSc8yZ2whRA9KpS2tU0d osnzE7wfuA2VHbXDsctv0ghcg67wP7Dyo05BwNmHrL65NOO7kMetZgi5U63kgRpR MTzlO99SZ6zLzHHoTJ7qwUVlDE8thWv1oLfR1msMURVpXEiArS8vmCXuGpGt8pb4 1FyyDZlwVmiiaPFuycnPqMPYhG4zR5spv/omjr2NmQV1c/In63mQXlxskm5ZXNI2 jbg+HGAK/NQdl1bBr31z4Xn6Ddhpw3GUJRRBomsbGMgADTkiZSEq9qd7aDiVU6an ufZUPx7A+ju/2gO4aznRiDHrVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf8725N lQDFt9iL6peaT9fGslhaMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsaKg5qgNN18a2FWFNBiRLRgrSnImDFJMTZxbBBMWEVZgkNA0Apo5t 055Ih9OH2E/Kz8pFWZy1JkgFmJiGHERKaVlrOQZQd6ZQzskqAetzuDqMirHkHHta LadroVeYt7tqm1ZHQaevP5MCwNmn8ImstF0C2nDqc6Zm7Ip4cVxAn0qB9bPBBWok MQVBByeyizpgQ1mbzts91jtcxEEUWb1gezrp3of/X2/xvvbN+qsOPparATHhg6Xy D1+NAHe7xe1vXkIHHGtuDfniPG2Ff2vaOGwzGiAZDeus8kEheJvgMP7c5n9Bw0cj IF/gKVY/iBlK/wDtwhL0QWjWDzOtg2Pp -----END CERTIFICATE-----Generated at Thu Oct 30 21:48:30 2025 by rpki-client