$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: cWUjOb1EktomYO+9dmtBo5wrkhYrnJKFXJTnI9n+d5E= Subject key identifier: D6:D7:45:B6:13:0F:BF:C6:2B:56:5D:58:06:84:8F:DD:1E:11:7E:FA Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 04:33:49 +0000 Manifest this update: Mon 03 Nov 2025 04:33:48 +0000 Manifest next update: Mon 10 Nov 2025 04:33:48 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: efFPRLtjMelJzkFlmMPGeKmFDgf1sNHCOF5iQxDSCoU=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Nov 3 04:33:48 2025 GMT Not After : Nov 10 04:33:48 2025 GMT Subject: CN=690830ad-5574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:ae:21:47:99:1e:c2:e8:c5:11:ef:07:d7: 93:07:a6:2a:c9:c6:b9:13:2a:0a:cb:b3:1c:e5:52: 9c:e7:b6:5e:83:31:ca:64:aa:e8:c2:2d:c2:63:e4: 91:62:59:ac:fc:c7:cf:4f:fc:4b:05:42:51:02:51: d8:b5:73:45:ab:0f:58:97:a9:e2:a7:2e:f0:2f:f2: 22:bd:df:78:bf:b8:11:9d:a6:87:68:0b:15:fb:1e: 93:ad:b8:ea:7c:b3:7a:77:67:2f:94:03:cd:b8:01: 0b:db:3d:6e:54:39:3d:0a:6a:f4:2a:6d:75:05:80: 31:eb:53:a6:27:3f:1c:a9:6d:33:6f:42:a0:4c:e1: 28:73:bc:e1:19:14:24:18:3c:ac:14:cb:80:fe:3e: a4:31:37:d7:33:f0:15:87:29:cd:57:ea:c6:e6:31: e5:6d:24:6a:34:c1:f2:3c:a0:7c:66:18:aa:8e:31: ea:63:0a:0a:4b:9f:b9:de:7d:dc:0f:ea:50:fa:b9: dc:ee:63:6a:55:9f:1f:fd:93:94:f9:c7:ed:2d:83: 42:85:99:e0:9b:85:bd:6f:cc:dc:e4:04:97:96:02: f0:ec:25:17:be:1d:18:98:ae:e5:0c:d8:81:39:84: 91:a9:af:b0:b7:aa:9c:98:0e:ec:ee:8a:95:01:7e: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D7:45:B6:13:0F:BF:C6:2B:56:5D:58:06:84:8F:DD:1E:11:7E:FA X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:89:ae:67:99:a8:c8:47:0c:02:ad:26:5f:b6:bc:ad:87:91: a9:9e:6b:3c:68:a4:fc:32:93:a8:9d:d0:06:5e:07:f1:a1:97: d7:b2:80:f3:5e:00:74:1f:de:f4:a9:51:e7:0a:4b:6d:62:a4: a7:b9:1b:77:c8:99:60:33:15:4c:1a:af:50:dc:e4:4a:fd:18: f4:56:88:f5:98:2d:f5:33:b0:e2:d2:94:d8:e6:e8:08:40:5c: 14:f9:17:f2:66:27:09:cc:d7:f2:78:9e:8f:b6:66:10:3c:1d: 6c:65:15:b1:91:9e:95:12:5e:2a:23:e2:2d:17:cc:2b:0c:e5: 42:de:4d:03:5c:c8:69:ea:9c:a4:4b:99:a0:51:49:94:04:fe: f4:42:c9:95:57:f0:5d:4a:38:17:5b:60:5e:5f:9f:53:25:c6: 9f:fe:53:e6:cc:d4:8c:2e:38:df:90:e8:97:cc:24:8e:af:4c: b4:a3:41:a0:d6:0c:82:4a:78:a3:ba:77:79:5f:75:86:5a:76: ff:4a:a3:64:41:37:14:6d:1e:c8:cd:02:27:e3:70:3f:e5:e3: dc:a9:02:fe:88:7b:85:51:3c:64:5f:18:46:79:6b:94:ad:73: 43:39:80:13:96:70:12:bb:9b:8c:97:de:a3:a1:f2:14:ec:38: aa:0b:dd:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUxMTAzMDQzMzQ4WhcNMjUxMTEwMDQzMzQ4WjAYMRYwFAYD VQQDEw02OTA4MzBhZC01NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JiuIUeZHsLoxRHvB9eTB6Yqyca5EyoKy7Mc5VKc57ZegzHKZKrowi3CY+SR Ylms/MfPT/xLBUJRAlHYtXNFqw9Yl6nipy7wL/Iivd94v7gRnaaHaAsV+x6Trbjq fLN6d2cvlAPNuAEL2z1uVDk9Cmr0Km11BYAx61OmJz8cqW0zb0KgTOEoc7zhGRQk GDysFMuA/j6kMTfXM/AVhynNV+rG5jHlbSRqNMHyPKB8ZhiqjjHqYwoKS5+53n3c D+pQ+rnc7mNqVZ8f/ZOU+cftLYNChZngm4W9b8zc5ASXlgLw7CUXvh0YmK7lDNiB OYSRqa+wt6qcmA7s7oqVAX7zfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbXRbYT D7/GK1ZdWAaEj90eEX76MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNia5nmajIRwwCrSZftryth5Gpnms8aKT8MpOondAGXgfxoZfXsoDz XgB0H970qVHnCkttYqSnuRt3yJlgMxVMGq9Q3ORK/Rj0Voj1mC31M7Di0pTY5ugI QFwU+RfyZicJzNfyeJ6PtmYQPB1sZRWxkZ6VEl4qI+ItF8wrDOVC3k0DXMhp6pyk S5mgUUmUBP70QsmVV/BdSjgXW2BeX59TJcaf/lPmzNSMLjjfkOiXzCSOr0y0o0Gg 1gyCSnijund5X3WGWnb/SqNkQTcUbR7IzQIn43A/5ePcqQL+iHuFUTxkXxhGeWuU rXNDOYATlnASu5uMl96jofIU7DiqC92g -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:46 2025 by rpki-client