$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft File: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json) Hash identifier: e0of+UKVeueVs7ITDsCKyfvTlryApb8a9vqZLye0/NU= Subject key identifier: 2A:10:11:ED:C9:EF:01:B1:EE:43:22:55:A1:7C:8B:06:A2:00:EA:15 Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft Manifest number: 0D2B Signing time: Tue 04 Nov 2025 19:10:39 +0000 Manifest this update: Tue 04 Nov 2025 19:10:38 +0000 Manifest next update: Tue 11 Nov 2025 19:10:38 +0000 Files and hashes: 1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: rG+1B6fKEP5/iabpqndfC2JMpF3TgwVagGx2zPlFd5Q=) 2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Validity Not Before: Nov 4 19:10:38 2025 GMT Not After : Nov 11 19:10:38 2025 GMT Subject: CN=690a4fae-1d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:cb:ff:bc:90:d3:66:a2:f9:03:a2:ce:65: 3c:68:b1:13:33:4b:92:77:34:24:e7:26:8c:6e:fe: ee:04:e5:3e:78:e3:3c:0b:6f:7f:1e:99:11:59:5b: 56:25:74:ef:54:19:9c:71:87:dd:23:54:f2:f3:9d: 7d:11:41:5d:3d:83:fa:e9:40:be:55:80:6a:f0:69: 82:8f:69:ea:d2:6c:58:78:ed:5d:89:6b:17:cc:8a: 53:11:f3:08:3a:eb:f7:86:ca:75:e4:3b:cc:e9:38: 71:5c:e1:0a:b7:a9:45:15:76:11:17:e6:dc:37:80: 69:1a:89:65:e8:2f:86:bc:a3:a4:a7:c1:d2:e6:6c: 85:c3:ec:79:bf:9a:84:88:37:c3:3f:40:25:18:b1: 6b:26:10:64:0a:f3:7a:e4:ba:cf:e6:f9:3f:77:80: 69:ee:3d:9e:dc:66:99:0c:23:15:41:7c:76:18:f5: 89:5f:ed:c1:1e:6c:50:24:46:cc:17:1b:53:57:14: b7:6c:36:fd:01:ef:94:e8:c2:66:6b:f7:40:58:81: b4:eb:34:74:04:b3:0b:66:95:01:9f:9f:db:76:ce: 26:8b:66:1c:4f:6b:b5:73:fc:5b:a6:09:a5:83:ae: 73:2d:c9:0f:f0:e2:2c:d6:1e:9a:5d:c2:1e:a2:26: 2d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:10:11:ED:C9:EF:01:B1:EE:43:22:55:A1:7C:8B:06:A2:00:EA:15 X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c0:fe:2d:eb:93:54:75:3e:9b:e9:50:ec:d7:f6:67:91:73: bc:f7:48:7c:e6:85:22:91:29:60:89:75:0e:db:43:78:76:48: ef:53:01:e9:62:19:15:59:40:d7:f7:c1:eb:d2:0e:f0:69:05: 6c:c0:5c:2a:bf:f7:8c:f2:08:e9:30:e9:d0:c9:a6:aa:fd:2d: 05:bf:6b:58:16:fd:27:b0:23:49:83:fa:9a:6d:07:05:1e:90: f3:ea:52:74:b9:cb:b5:b5:11:a1:77:56:10:64:0f:ea:70:3a: a8:3c:4d:21:ed:93:9c:4f:5a:28:c9:9b:61:ab:fc:8d:eb:26: 28:cd:97:7f:4a:f5:e7:88:f7:e5:31:0d:9a:b2:e3:c9:a7:33: a3:97:64:78:f7:2c:0c:6b:5e:e2:63:43:27:ae:57:fb:c8:af: 28:dd:af:73:17:f8:55:81:5c:fc:c1:10:a5:a8:76:a7:5b:fe: f2:ca:d2:63:23:20:74:d5:c6:3b:e9:db:e1:7d:19:c0:94:be: 68:a5:46:bc:91:af:49:49:18:c3:e7:0d:f1:5b:a9:a8:31:12: b0:79:2e:fa:be:f2:36:ed:54:aa:51:cf:52:63:15:da:5d:8f: f1:2f:7c:5c:cb:8f:d5:18:ae:ab:69:7d:3e:61:cc:98:f4:39: b9:42:18:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUxMTA0MTkxMDM4WhcNMjUxMTExMTkxMDM4WjAYMRYwFAYD VQQDEw02OTBhNGZhZS0xZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZbL/7yQ02ai+QOizmU8aLETM0uSdzQk5yaMbv7uBOU+eOM8C29/HpkRWVtW JXTvVBmccYfdI1Ty8519EUFdPYP66UC+VYBq8GmCj2nq0mxYeO1diWsXzIpTEfMI Ouv3hsp15DvM6ThxXOEKt6lFFXYRF+bcN4BpGoll6C+GvKOkp8HS5myFw+x5v5qE iDfDP0AlGLFrJhBkCvN65LrP5vk/d4Bp7j2e3GaZDCMVQXx2GPWJX+3BHmxQJEbM FxtTVxS3bDb9Ae+U6MJma/dAWIG06zR0BLMLZpUBn5/bds4mi2YcT2u1c/xbpgml g65zLckP8OIs1h6aXcIeoiYtMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoQEe3J 7wGx7kMiVaF8iwaiAOoVMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4 X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwP4t65NUdT6b6VDs1/ZnkXO890h85oUikSlgiXUO20N4dkjvUwHp YhkVWUDX98Hr0g7waQVswFwqv/eM8gjpMOnQyaaq/S0Fv2tYFv0nsCNJg/qabQcF HpDz6lJ0ucu1tRGhd1YQZA/qcDqoPE0h7ZOcT1ooyZthq/yN6yYozZd/SvXniPfl MQ2asuPJpzOjl2R49ywMa17iY0Mnrlf7yK8o3a9zF/hVgVz8wRClqHanW/7yytJj IyB01cY76dvhfRnAlL5opUa8ka9JSRjD5w3xW6moMRKweS76vvI27VSqUc9SYxXa XY/xL3xcy4/VGK6raX0+YcyY9Dm5QhjG -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:16 2025 by rpki-client