$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: TcwieHnMaA+UGMqMylsXCc3M6UFsJ1dBBDV+bZuvOtY= Subject key identifier: 21:F0:80:6A:F6:FF:AE:5A:36:57:B2:E2:60:48:EB:28:53:CF:9C:84 Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 03C5 Signing time: Thu 23 Oct 2025 01:58:42 +0000 Manifest this update: Thu 23 Oct 2025 01:58:42 +0000 Manifest next update: Thu 30 Oct 2025 01:58:42 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: gFciowYh05o1vX9z2K8sFskXo1qbqoCdb9ZbF2a6OYQ=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: EyHs5y7oE17xIkYVPklIvc2ZONwGgz4agYPg5DpPAPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Oct 23 01:58:42 2025 GMT Not After : Oct 30 01:58:42 2025 GMT Subject: CN=68f98bd2-6a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:b7:95:65:ce:45:f2:cc:b0:1c:cc:54:48: d4:df:33:cc:8f:07:2e:bc:4c:8c:0f:b6:66:1c:d6: a5:f5:44:8e:ef:0c:55:35:a4:2d:57:e3:00:b5:bf: ef:cb:ef:95:3d:21:5f:c1:bd:bb:68:65:ba:8a:ae: 50:75:6a:aa:64:d2:86:42:bf:94:eb:e0:51:98:ce: 5b:76:e3:cc:d6:5d:8a:cf:17:5e:db:8b:16:9a:5c: 5e:39:1e:42:48:39:30:41:62:bd:c0:ab:8a:34:ef: 43:2d:9d:d9:81:5c:b8:65:ee:95:52:5f:98:61:f8: 83:64:68:9f:23:d0:7f:91:cf:3f:5d:87:56:40:e2: 55:5a:e5:73:61:47:32:1f:30:c2:84:41:ee:10:e2: bb:74:84:30:fd:14:de:7e:d1:38:fd:91:3a:14:ee: 55:05:81:38:9e:7f:45:64:b8:8b:fd:1a:e9:99:2d: d6:32:15:45:33:43:7d:9e:1c:7a:78:a2:2f:20:f5: 4f:27:95:eb:b5:44:70:46:1e:62:61:57:f5:bc:ac: fe:76:a0:dd:e9:58:d7:ce:bc:c7:bf:eb:64:1d:47: 9d:cf:05:52:83:e7:92:8a:ec:d1:87:05:7b:13:37: ee:ae:8e:e6:04:24:f5:74:f1:c8:6e:27:5f:35:7d: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:80:6A:F6:FF:AE:5A:36:57:B2:E2:60:48:EB:28:53:CF:9C:84 X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ab:16:6b:61:17:a5:01:ca:1d:f8:1a:b3:72:07:0f:e7:b1: 9e:d1:27:a8:73:eb:0e:1f:b4:e8:c8:87:ec:15:f6:a4:69:d5: f7:3a:60:f8:06:68:35:01:2d:78:06:7f:b2:4e:ed:42:9f:2a: e2:e0:3a:6e:00:b6:34:cf:7f:4b:91:ec:cf:ed:ea:46:a2:6c: 91:f8:7d:6b:ba:33:13:fc:af:53:3b:f4:19:79:11:5b:91:cc: a9:11:e8:a9:c5:09:63:45:dd:1f:bc:1b:66:75:e8:a3:b8:1b: 5d:d3:5f:3d:01:c1:be:95:3e:56:9a:99:40:c0:e1:5f:29:db: 64:f8:74:54:19:13:81:8e:f5:46:2c:10:0f:41:56:61:6b:71: 05:42:6a:df:86:ed:d1:79:6a:5a:28:d9:57:9b:5c:11:8b:43: 82:07:bf:63:6e:6a:0d:77:a9:ee:da:8e:6b:74:c8:22:02:da: b0:9a:3a:b7:4a:d9:1e:3a:a4:0d:13:e0:ab:48:c7:d5:11:86: 95:cc:5b:34:3d:c5:72:65:80:ff:18:f7:68:a8:52:66:19:91: 94:e6:38:78:d0:d7:f4:a2:3c:95:78:d9:64:44:14:90:c6:84: f4:31:f1:93:c9:4b:7a:b9:a5:e5:d3:d1:76:68:b9:0e:63:c2: ac:59:2a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUxMDIzMDE1ODQyWhcNMjUxMDMwMDE1ODQyWjAYMRYwFAYD VQQDEw02OGY5OGJkMi02YTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VK3lWXORfLMsBzMVEjU3zPMjwcuvEyMD7ZmHNal9USO7wxVNaQtV+MAtb/v y++VPSFfwb27aGW6iq5QdWqqZNKGQr+U6+BRmM5bduPM1l2Kzxde24sWmlxeOR5C SDkwQWK9wKuKNO9DLZ3ZgVy4Ze6VUl+YYfiDZGifI9B/kc8/XYdWQOJVWuVzYUcy HzDChEHuEOK7dIQw/RTeftE4/ZE6FO5VBYE4nn9FZLiL/RrpmS3WMhVFM0N9nhx6 eKIvIPVPJ5XrtURwRh5iYVf1vKz+dqDd6VjXzrzHv+tkHUedzwVSg+eSiuzRhwV7 Ezfuro7mBCT1dPHIbidfNX19GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHwgGr2 /65aNley4mBI6yhTz5yEMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqxZrYRelAcod+BqzcgcP57Ge0Seoc+sOH7ToyIfsFfakadX3OmD4 Bmg1AS14Bn+yTu1Cnyri4DpuALY0z39LkezP7epGomyR+H1rujMT/K9TO/QZeRFb kcypEeipxQljRd0fvBtmdeijuBtd0189AcG+lT5WmplAwOFfKdtk+HRUGROBjvVG LBAPQVZha3EFQmrfhu3ReWpaKNlXm1wRi0OCB79jbmoNd6nu2o5rdMgiAtqwmjq3 StkeOqQNE+CrSMfVEYaVzFs0PcVyZYD/GPdoqFJmGZGU5jh40Nf0ojyVeNlkRBSQ xoT0MfGTyUt6uaXl09F2aLkOY8KsWSqv -----END CERTIFICATE-----Generated at Fri Oct 24 09:11:43 2025 by rpki-client