$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: gbblz6h1NJmxC4fTRwGtGmSXsaGunRDfmevj46CzfbQ= Subject key identifier: 34:0A:C8:77:88:35:97:BB:E0:DA:17:19:E8:9F:95:92:D5:51:9D:46 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 148E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 146F Signing time: Sun 02 Nov 2025 16:54:03 +0000 Manifest this update: Sun 02 Nov 2025 16:54:02 +0000 Manifest next update: Sun 09 Nov 2025 16:54:02 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: VrT1DE4dZ15/fyWemhhJAuCpl5kpxRteJRH2oDan7RM=) 2: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (hash: WCnkm4p64RYQp11JjDyofIDJwHxjWdtrAu0u0nyqyzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5262 (0x148e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Nov 2 16:54:02 2025 GMT Not After : Nov 9 16:54:02 2025 GMT Subject: CN=69078cab-32f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4c:ed:1c:7b:a7:6d:1f:9c:5b:9b:1e:80:75: 1c:a0:5e:e1:d9:0c:93:37:b8:3f:ad:20:39:ee:aa: 35:32:df:56:35:99:ed:6a:fe:e9:e9:db:63:9e:38: 85:28:d0:1b:9f:68:ae:54:88:ac:9f:ed:7c:de:6b: 26:96:43:67:37:00:27:fa:b3:22:39:e6:7b:75:22: 76:a8:8a:3c:87:6e:ef:bf:0d:82:f1:fb:f6:21:5f: be:73:ab:09:9a:52:4a:26:14:d9:ae:14:cd:cd:14: ec:29:8f:b3:ad:f8:0d:31:58:7a:db:64:51:a5:a6: f6:59:c7:c8:82:fe:7f:15:76:73:f2:a8:b2:6e:64: 83:48:1c:21:49:6a:46:50:aa:3b:80:4a:0b:f6:fe: 05:fa:49:ce:d7:53:97:a0:58:93:8f:f1:ac:07:bc: e7:4a:85:11:ce:21:8e:e2:c8:aa:d5:32:c1:a4:f0: 5c:a3:65:03:42:70:fb:8a:5c:c2:ca:95:a1:fe:a4: 52:b1:3c:bc:ef:48:ad:f0:dc:91:dd:09:28:28:73: 08:3f:ee:e2:dd:66:63:dc:4f:97:c2:b8:99:bb:af: 11:82:72:9d:07:cd:6c:60:d0:9a:ba:6a:74:fc:21: a9:8c:7c:40:ab:0b:cb:df:e4:fa:cb:cd:0f:6b:63: 0d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:C8:77:88:35:97:BB:E0:DA:17:19:E8:9F:95:92:D5:51:9D:46 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a9:a2:4b:cc:b1:04:b4:bc:15:39:eb:4b:8e:b5:de:c4:c5: 90:21:b5:3f:ce:41:9b:4c:14:35:3b:aa:ee:67:c8:2a:4e:ce: e6:4f:3f:5c:65:dd:b5:59:3d:84:5f:a6:5b:27:a9:17:52:80: e5:25:a1:57:13:7b:1c:08:39:0c:86:39:42:e0:c8:ce:0a:01: 77:e5:9f:ff:83:7f:6c:ed:bf:5f:35:e5:6e:35:8f:b9:f9:d6: b1:56:7e:b6:20:68:d9:23:f6:a1:fb:13:23:81:e6:eb:3e:27: 97:ee:b3:12:7a:c2:02:bf:43:20:ff:a3:67:2d:5c:cb:b1:5f: 14:f9:9e:87:a1:17:6f:8c:51:fa:b0:62:ef:c7:e0:e5:03:37: e9:b2:e1:5e:dc:42:9a:c4:e4:03:e0:6c:a7:f5:fa:ce:ae:ef: 18:20:93:8b:fd:7f:41:d5:63:0a:98:6e:92:73:c7:92:b9:53: 98:02:58:64:c9:6f:9e:56:6b:41:3a:c1:2b:c3:04:29:f4:55: 3e:78:19:eb:b9:ba:90:73:a3:91:60:3d:57:c6:13:ae:af:cd: b3:98:cd:b7:73:ba:1c:8b:a5:6d:8e:1c:4f:81:a2:18:af:5b: e1:12:29:46:0b:6c:ab:fb:5f:fd:c6:9d:db:be:99:65:e9:8b: 4c:6e:79:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjUxMTAyMTY1NDAyWhcNMjUxMTA5MTY1NDAyWjAYMRYwFAYD VQQDEw02OTA3OGNhYi0zMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9EztHHunbR+cW5segHUcoF7h2QyTN7g/rSA57qo1Mt9WNZntav7p6dtjnjiF KNAbn2iuVIisn+183msmlkNnNwAn+rMiOeZ7dSJ2qIo8h27vvw2C8fv2IV++c6sJ mlJKJhTZrhTNzRTsKY+zrfgNMVh622RRpab2WcfIgv5/FXZz8qiybmSDSBwhSWpG UKo7gEoL9v4F+knO11OXoFiTj/GsB7znSoURziGO4siq1TLBpPBco2UDQnD7ilzC ypWh/qRSsTy870it8NyR3QkoKHMIP+7i3WZj3E+XwriZu68RgnKdB81sYNCaump0 /CGpjHxAqwvL3+T6y80Pa2MNxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQKyHeI NZe74NoXGeiflZLVUZ1GMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqaJLzLEEtLwVOetLjrXexMWQIbU/zkGbTBQ1O6ruZ8gqTs7mTz9c Zd21WT2EX6ZbJ6kXUoDlJaFXE3scCDkMhjlC4MjOCgF35Z//g39s7b9fNeVuNY+5 +daxVn62IGjZI/ah+xMjgebrPieX7rMSesICv0Mg/6NnLVzLsV8U+Z6HoRdvjFH6 sGLvx+DlAzfpsuFe3EKaxOQD4Gyn9frOru8YIJOL/X9B1WMKmG6Sc8eSuVOYAlhk yW+eVmtBOsErwwQp9FU+eBnrubqQc6ORYD1XxhOur82zmM23c7oci6VtjhxPgaIY r1vhEilGC2yr+1/9xp3bvpll6YtMbnl7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:17 2025 by rpki-client