$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json) Hash identifier: lZIOnOwhMtsCIjLsgY9pDlvlbS/0rDFZG2558tREC1w= Subject key identifier: EF:CA:21:E2:83:9A:01:80:F8:D0:BD:69:27:63:BF:D8:D7:14:E8:7E Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft Manifest number: 08B2 Signing time: Sun 02 Nov 2025 20:25:42 +0000 Manifest this update: Sun 02 Nov 2025 20:25:42 +0000 Manifest next update: Sun 09 Nov 2025 20:25:42 +0000 Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: Ds65KN5lQmIRjKZEu/EwLJK/Hedc4LaYNM07LgjOg9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1 Validity Not Before: Nov 2 20:25:42 2025 GMT Not After : Nov 9 20:25:42 2025 GMT Subject: CN=6907be46-21be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:d1:15:2c:09:2d:50:f4:05:28:f8:87:7e: 5c:06:93:02:29:65:6c:d9:a3:7e:9e:a2:4c:c6:73: 78:f3:41:39:d6:e4:7f:a7:0a:2e:6b:72:e7:93:15: ef:55:68:1a:19:a8:02:93:d8:7e:19:c5:a5:0e:aa: 11:c0:7e:9e:28:71:e6:74:34:1c:fe:25:9b:50:c4: e2:d3:cf:d0:c3:31:26:f1:93:53:ef:3d:c4:9c:35: 08:79:32:82:b9:c4:7a:b1:4e:0b:a3:c6:02:9f:f0: e8:41:ea:1c:40:45:18:4c:30:76:e8:cd:95:a1:cf: 2d:6a:77:54:5a:72:d8:14:d1:a3:81:48:0b:7d:2d: 8b:13:f6:03:5d:9e:08:26:11:1e:b0:41:f3:ff:87: 97:8c:e0:64:80:46:64:aa:72:83:9e:40:5a:3d:eb: 40:87:e1:13:c0:2e:e5:86:63:3b:b6:ee:36:45:3b: 5a:4e:98:6f:2b:dd:e0:34:95:77:05:60:1b:a2:b1: e3:9a:29:7f:6b:29:60:8c:d2:33:95:a6:8f:ac:6e: 23:63:a9:33:c1:e3:35:fa:e7:9a:d7:18:88:a7:6f: 67:33:ca:40:68:ee:45:c3:81:54:68:c7:1c:43:4d: 2c:4d:cc:d4:d8:1b:57:9f:39:0b:a2:73:ef:b9:fb: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:21:E2:83:9A:01:80:F8:D0:BD:69:27:63:BF:D8:D7:14:E8:7E X509v3 Authority Key Identifier: keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c2:6c:4c:7e:e5:52:6f:1f:74:f6:51:ae:38:8d:58:2b:19: db:50:8e:1a:92:e0:ef:9b:43:8b:c0:e0:99:09:70:b5:9e:6a: 93:05:4c:dd:7d:e4:35:6f:76:49:73:5c:df:d1:93:b9:a1:30: 9d:7d:08:3d:24:47:04:8e:4c:eb:f9:20:67:b2:32:b6:26:15: a3:6e:e6:bc:ea:c1:93:96:49:d6:6c:43:17:8d:76:9e:54:d4: 68:7e:8d:b0:3f:71:9c:02:94:ed:5b:b5:55:b8:d5:23:fc:b2: a5:0e:ec:85:b8:67:8d:74:0c:f2:03:d8:b5:3e:c3:eb:99:8c: ca:09:69:a4:52:26:ad:39:67:cd:3b:79:0d:b6:30:8e:b9:11: 50:5e:90:c9:3c:ba:f7:35:8f:e4:98:ee:0d:e8:18:9b:f0:90: 14:82:9f:bc:3c:f9:6b:d1:b7:2c:a2:e0:9f:34:92:e8:52:90: 69:33:bf:30:21:bc:e3:07:5b:ae:1e:40:fa:b3:2e:ff:43:fb: 5e:c2:4a:06:f0:4a:27:28:57:e2:2b:75:e1:4c:93:4d:96:f2: 91:fe:d1:18:db:4d:d2:86:cd:8f:ec:6e:ca:63:34:45:51:45: 3e:c2:b0:74:5c:5c:2b:4f:7f:c7:fe:ed:21:c2:00:f7:87:c0: 7a:6b:08:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF NkU5OUJDQzEwHhcNMjUxMTAyMjAyNTQyWhcNMjUxMTA5MjAyNTQyWjAYMRYwFAYD VQQDEw02OTA3YmU0Ni0yMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aLRFSwJLVD0BSj4h35cBpMCKWVs2aN+nqJMxnN480E51uR/pwoua3LnkxXv VWgaGagCk9h+GcWlDqoRwH6eKHHmdDQc/iWbUMTi08/QwzEm8ZNT7z3EnDUIeTKC ucR6sU4Lo8YCn/DoQeocQEUYTDB26M2Voc8tandUWnLYFNGjgUgLfS2LE/YDXZ4I JhEesEHz/4eXjOBkgEZkqnKDnkBaPetAh+ETwC7lhmM7tu42RTtaTphvK93gNJV3 BWAborHjmil/aylgjNIzlaaPrG4jY6kzweM1+uea1xiIp29nM8pAaO5Fw4FUaMcc Q00sTczU2BtXnzkLonPvufuk+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/KIeKD mgGA+NC9aSdjv9jXFOh+MB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0 RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6 QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfwmxMfuVSbx909lGuOI1YKxnbUI4akuDvm0OLwOCZCXC1nmqTBUzd feQ1b3ZJc1zf0ZO5oTCdfQg9JEcEjkzr+SBnsjK2JhWjbua86sGTlknWbEMXjXae VNRofo2wP3GcApTtW7VVuNUj/LKlDuyFuGeNdAzyA9i1PsPrmYzKCWmkUiatOWfN O3kNtjCOuRFQXpDJPLr3NY/kmO4N6Bib8JAUgp+8PPlr0bcsouCfNJLoUpBpM78w IbzjB1uuHkD6sy7/Q/tewkoG8EonKFfiK3XhTJNNlvKR/tEY203Shs2P7G7KYzRF UUU+wrB0XFwrT3/H/u0hwgD3h8B6awjN -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:16 2025 by rpki-client