$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: i8t9azeAz3loz0Ax6qpSGq1N52bHw5JYvmkttsr26eQ= Subject key identifier: BD:DF:8F:1D:77:F0:B8:A7:A1:73:59:69:05:7F:38:A0:86:F0:B1:86 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 34E1 Signing time: Tue 04 Nov 2025 14:17:06 +0000 Manifest this update: Tue 04 Nov 2025 14:17:06 +0000 Manifest next update: Tue 11 Nov 2025 14:17:06 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: rgbPZbttv/PwNQFokgrchgWmVRPs9QAwNVfc2s4KgHY=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Nov 4 14:17:06 2025 GMT Not After : Nov 11 14:17:06 2025 GMT Subject: CN=690a0ae2-f167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:87:3f:c4:6c:83:b6:ea:46:94:84:83:62: d7:35:0b:cd:a4:e5:54:5e:19:88:f9:2a:6e:e2:60: 3e:f9:e0:fd:ed:56:0c:55:51:de:dd:ea:10:58:6b: ed:f6:7b:f0:e0:9c:3d:2c:4c:17:1f:d9:1a:a5:88: 55:61:14:8d:15:ec:a2:e9:4f:bc:0a:1e:6d:64:1e: 72:23:57:d5:ed:f1:03:2a:ad:17:80:c4:77:74:16: 3f:ab:25:32:88:e1:7e:76:46:7c:a0:ce:84:82:28: 5a:67:60:14:b1:d8:89:eb:21:98:e6:26:7a:91:2d: 88:31:e3:85:fc:ab:0d:a1:73:78:76:d2:4e:68:67: af:a7:dc:28:a0:88:fc:fe:5b:28:15:72:7b:79:d2: 16:2f:fc:2b:30:6a:4d:02:bd:6b:1a:4b:44:a8:f8: bc:86:32:37:0c:9b:bd:e9:88:ad:93:7d:3b:be:5a: 98:7f:e2:29:23:1b:39:99:69:9d:c6:01:7c:ec:67: 24:99:07:f8:02:55:ef:14:2b:50:3d:1d:5e:ed:a5: 35:23:01:fc:e3:11:50:30:86:2a:48:41:9e:a9:56: bf:9a:98:e3:7e:4b:ce:d5:67:af:f8:ef:17:b9:12: 95:f3:7a:14:fa:7d:e9:be:36:44:c8:74:61:c4:dd: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DF:8F:1D:77:F0:B8:A7:A1:73:59:69:05:7F:38:A0:86:F0:B1:86 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:65:cb:71:27:f9:da:a0:87:f9:36:74:dd:1b:c5:f8:5e:4b: 97:2a:85:f7:b6:dc:d2:90:44:64:e8:84:4b:9c:d4:53:22:6e: dd:62:4c:90:41:ec:0c:60:48:81:87:3e:b9:36:9a:2d:f0:bb: e9:32:ea:ae:8b:56:87:35:d9:98:b8:17:2d:be:a1:62:fa:cd: b4:49:de:e5:25:42:16:11:4b:ba:14:5b:49:69:34:d9:6e:6b: 42:00:5c:f8:8c:f7:3a:a1:11:8b:dc:44:c7:2a:25:aa:bd:bc: 3e:35:2f:5a:e8:40:95:80:96:1b:54:70:1d:39:dc:8b:9a:c3: 02:62:92:88:2f:8e:7a:85:bb:d7:29:f5:92:53:ff:ee:6a:e4: bc:a4:41:1d:33:e4:b0:2d:78:99:d2:05:59:24:b6:6c:96:2c: b0:3d:bf:36:79:eb:d7:47:9c:6e:2f:04:3c:81:5e:68:d2:0a: 64:ec:c9:a2:ad:63:ea:8a:ef:53:03:a3:95:6e:a0:de:3d:01: 2f:3e:1d:d9:0d:35:77:b9:11:25:ac:fd:e9:47:f1:6d:16:9f: 2e:63:79:bf:4c:94:8a:46:3c:66:ff:39:ad:e0:a4:82:b9:08: 8e:57:05:35:dc:9f:ae:b1:aa:63:92:3d:49:cf:1c:48:d0:d6: 9e:87:a9:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjUxMTA0MTQxNzA2WhcNMjUxMTExMTQxNzA2WjAYMRYwFAYD VQQDEw02OTBhMGFlMi1mMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfeHP8Rsg7bqRpSEg2LXNQvNpOVUXhmI+Spu4mA++eD97VYMVVHe3eoQWGvt 9nvw4Jw9LEwXH9kapYhVYRSNFeyi6U+8Ch5tZB5yI1fV7fEDKq0XgMR3dBY/qyUy iOF+dkZ8oM6EgihaZ2AUsdiJ6yGY5iZ6kS2IMeOF/KsNoXN4dtJOaGevp9wooIj8 /lsoFXJ7edIWL/wrMGpNAr1rGktEqPi8hjI3DJu96Yitk307vlqYf+IpIxs5mWmd xgF87GckmQf4AlXvFCtQPR1e7aU1IwH84xFQMIYqSEGeqVa/mpjjfkvO1Wev+O8X uRKV83oU+n3pvjZEyHRhxN2Y0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3fjx13 8LinoXNZaQV/OKCG8LGGMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEZctxJ/naoIf5NnTdG8X4XkuXKoX3ttzSkERk6IRLnNRTIm7dYkyQ QewMYEiBhz65Npot8LvpMuqui1aHNdmYuBctvqFi+s20Sd7lJUIWEUu6FFtJaTTZ bmtCAFz4jPc6oRGL3ETHKiWqvbw+NS9a6ECVgJYbVHAdOdyLmsMCYpKIL456hbvX KfWSU//uauS8pEEdM+SwLXiZ0gVZJLZsliywPb82eevXR5xuLwQ8gV5o0gpk7Mmi rWPqiu9TA6OVbqDePQEvPh3ZDTV3uRElrP3pR/FtFp8uY3m/TJSKRjxm/zmt4KSC uQiOVwU13J+usapjkj1JzxxI0Naeh6k6 -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:38 2025 by rpki-client