$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft File: dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json) Hash identifier: gIjQGoCuP1Xobh0qfXKGFVFrwxSHVvOUHYsfbInMrrw= Subject key identifier: 17:D7:A9:93:5D:C0:0D:4A:E0:CA:D4:14:1E:5D:99:36:BB:F7:5F:CE Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft Manifest number: 028A Signing time: Mon 27 Oct 2025 03:15:46 +0000 Manifest this update: Mon 27 Oct 2025 03:15:46 +0000 Manifest next update: Mon 03 Nov 2025 03:15:46 +0000 Files and hashes: 1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: QqWsT/7MNYaPn8l+L0rLmxIk+JboGOrYhz1S7V8qGI4=) 2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: tB8QvSZbd7P3qeXdM5QXhG6BCWU4hUHOOoYEHYM8BvY=) 3: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: DfTEELTYbZSEDop0PhWnfQdtallPGnkFtyw4EV80WXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C Validity Not Before: Oct 27 03:15:46 2025 GMT Not After : Nov 3 03:15:46 2025 GMT Subject: CN=68fee3e2-e955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:7a:96:5e:22:3d:19:51:62:66:f4:c9:7f: f6:0d:da:d1:67:49:fa:71:47:6b:6a:59:bf:e8:58: 75:a9:35:e1:09:fb:11:8a:72:b2:7c:e2:41:34:3d: bf:a4:78:4e:17:ab:8a:8e:ca:b9:8b:3d:e5:cd:c1: e5:42:31:91:de:d6:9e:96:73:53:3f:04:b1:df:9d: 8d:a7:53:4d:58:04:17:a4:5e:0e:62:e3:f7:30:11: 11:9f:c9:e7:28:bb:f4:39:fe:40:dc:56:d9:90:3d: ab:3a:73:68:60:8b:3b:57:10:fc:58:a0:fc:53:47: e8:00:bb:07:36:54:54:5a:ed:98:6d:40:85:b8:b9: 95:32:d2:de:18:d5:ad:0a:17:60:79:fa:05:4f:63: 7b:a4:3c:0e:05:63:77:45:ef:1b:b6:00:e7:be:1c: 7a:3f:ab:0d:5b:be:2f:68:9e:8a:67:f7:bc:50:69: de:0c:66:88:bd:c2:c4:e3:54:bd:b6:04:7f:e7:cc: c1:99:b5:07:56:c4:0f:2b:7a:0d:ad:94:c9:64:34: 60:09:a6:93:b6:bf:e1:6e:fb:2e:d2:3a:59:f9:c1: ba:e2:12:54:1b:cd:41:04:ee:b6:c2:bd:e0:22:18: cc:c7:f2:a7:b1:2c:20:ef:43:f0:26:37:c3:4b:d4: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:A9:93:5D:C0:0D:4A:E0:CA:D4:14:1E:5D:99:36:BB:F7:5F:CE X509v3 Authority Key Identifier: keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9a:15:4f:eb:8e:cf:40:e1:ff:d9:d1:a1:a8:88:5e:83:b5: 74:0e:34:a1:7f:fa:0f:af:6f:c6:36:b6:1b:88:bf:32:18:c7: 1f:ce:82:17:c7:28:c7:f4:6e:2a:63:ed:34:98:d2:d2:9f:b0: 74:d3:14:52:2a:a5:2f:34:a0:2d:83:62:0a:65:e4:ec:c9:4f: cf:a6:98:33:f6:9d:8a:7a:5f:fe:63:02:98:3c:a9:af:33:65: 15:fc:fa:54:c4:5f:c4:f7:fa:d6:f0:8c:e2:d4:6b:80:f4:65: 64:d6:c5:45:64:0e:4b:4d:49:36:c4:d3:19:60:68:4b:28:63: da:3c:16:32:65:fb:2b:74:02:4f:25:b7:a4:d2:f2:de:d0:bb: 05:aa:88:b1:d5:cc:aa:9b:f9:d8:fb:9a:c8:92:f8:c7:a7:19: a9:57:71:7e:46:33:7e:53:b9:22:be:0e:cd:78:ed:af:c9:f8: 07:9f:04:01:9d:fa:0f:d3:6c:73:de:42:2a:5f:49:51:f1:03: cb:f3:4c:bd:fa:ff:04:43:12:81:57:8b:c3:0b:ba:8c:a5:5f: e0:fb:4a:2e:50:8e:1c:5f:81:8d:de:dd:d0:a1:c5:49:1d:5c: dd:8d:fb:24:81:86:c2:14:d3:b8:82:2f:7e:d0:24:b7:59:86: 08:02:80:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw RjU5MzgwMEMwHhcNMjUxMDI3MDMxNTQ2WhcNMjUxMTAzMDMxNTQ2WjAYMRYwFAYD VQQDEw02OGZlZTNlMi1lOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTh6ll4iPRlRYmb0yX/2DdrRZ0n6cUdralm/6Fh1qTXhCfsRinKyfOJBND2/ pHhOF6uKjsq5iz3lzcHlQjGR3taelnNTPwSx352Np1NNWAQXpF4OYuP3MBERn8nn KLv0Of5A3FbZkD2rOnNoYIs7VxD8WKD8U0foALsHNlRUWu2YbUCFuLmVMtLeGNWt ChdgefoFT2N7pDwOBWN3Re8btgDnvhx6P6sNW74vaJ6KZ/e8UGneDGaIvcLE41S9 tgR/58zBmbUHVsQPK3oNrZTJZDRgCaaTtr/hbvsu0jpZ+cG64hJUG81BBO62wr3g IhjMx/KnsSwg70PwJjfDS9R4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfXqZNd wA1K4MrUFB5dmTa791/OMB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2 QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjYxQy83NzBDQkUyNDM2QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFW ZldXQ0NXVF9lZDhQV1RnQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9mhVP647PQOH/2dGhqIheg7V0DjShf/oPr2/GNrYbiL8yGMcfzoIX xyjH9G4qY+00mNLSn7B00xRSKqUvNKAtg2IKZeTsyU/Pppgz9p2Kel/+YwKYPKmv M2UV/PpUxF/E9/rW8Izi1GuA9GVk1sVFZA5LTUk2xNMZYGhLKGPaPBYyZfsrdAJP Jbek0vLe0LsFqoix1cyqm/nY+5rIkvjHpxmpV3F+RjN+U7kivg7NeO2vyfgHnwQB nfoP02xz3kIqX0lR8QPL80y9+v8EQxKBV4vDC7qMpV/g+0ouUI4cX4GN3t3QocVJ HVzdjfskgYbCFNO4gi9+0CS3WYYIAoCu -----END CERTIFICATE-----Generated at Mon Oct 27 15:06:02 2025 by rpki-client