$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: f7hv/BlydcL/AD/HNgMpk0w33QBQ3CfzDLnNl1Oz8gA= Subject key identifier: 5F:14:B9:F7:11:5E:55:98:1A:A5:0E:34:C8:2E:93:65:10:76:CF:5D Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 1099 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1084 Signing time: Sun 02 Nov 2025 17:23:50 +0000 Manifest this update: Sun 02 Nov 2025 17:23:49 +0000 Manifest next update: Sun 09 Nov 2025 17:23:49 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: /A5/oGohFnE1V1y3vaUV86z8qRw3oJHIAYbeHXVjSJA=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4249 (0x1099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Nov 2 17:23:49 2025 GMT Not After : Nov 9 17:23:49 2025 GMT Subject: CN=690793a5-dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:6b:a1:5a:fc:12:04:cb:da:a9:aa:59:27: 9d:28:d0:4f:a8:63:36:cf:ca:7a:75:c9:c3:b6:61: 0f:6f:ae:9c:08:a5:ce:3d:47:19:57:1e:94:07:b7: b2:1b:bf:83:42:f7:8e:92:53:0c:a8:a2:97:ca:1c: 29:30:90:9a:5d:33:9d:ad:04:35:47:1c:29:f4:43: be:70:64:51:e1:50:eb:93:66:68:24:62:c0:18:f9: 1c:c0:1e:62:e5:0b:ac:47:40:9c:cb:a0:a1:f9:f4: 20:c7:75:32:03:d7:c7:4b:5e:91:df:93:8a:6f:8a: 05:b1:a1:28:9a:86:de:1e:bc:55:75:18:43:01:50: b4:50:99:38:04:d4:e4:9f:d2:3f:44:ff:7f:f0:d8: 38:f2:a2:6c:bd:14:40:34:91:16:b1:45:d0:04:29: 0d:dc:2d:92:1c:58:06:15:88:64:54:1a:5e:32:03: 1c:09:76:6c:0c:57:b8:3f:14:9b:2c:06:c7:a1:df: 1a:5e:91:3f:19:59:bb:b3:88:55:a1:0b:4b:bf:c1: bc:73:89:f9:9a:a5:77:8d:09:84:b1:cf:9d:a6:6f: 00:ba:38:f5:42:95:20:0e:20:0a:b4:57:fb:41:10: 71:fa:67:56:99:6e:01:49:76:70:31:4d:87:97:66: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:14:B9:F7:11:5E:55:98:1A:A5:0E:34:C8:2E:93:65:10:76:CF:5D X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2c:62:33:3a:ad:93:d2:09:07:f2:8e:dd:61:c5:42:d3:05: 6b:fd:43:c5:59:18:04:d8:00:b7:ce:34:fd:d9:fa:05:04:aa: be:75:62:c1:b3:8b:d4:e4:82:ec:c1:8f:a9:e0:25:15:89:6a: e7:90:cb:b6:52:4b:55:2e:7e:8d:78:13:b4:b4:a6:fc:cd:e0: a8:81:06:82:a1:6c:ee:6b:6c:9f:46:e7:92:f0:8a:5f:97:91: 90:29:86:18:4c:fb:47:e5:14:78:3f:e4:5e:32:00:4e:b4:10: 40:9e:c1:5a:3d:73:75:04:67:84:ce:23:e2:1d:d1:71:e7:b3: 85:5d:cc:1f:ca:e3:60:30:aa:3d:e2:c6:08:fd:42:d7:9a:cc: 82:e1:9e:e0:83:00:04:0e:f0:ec:32:d9:6e:f5:60:07:e5:29: 19:6c:e2:ea:2d:44:fd:31:df:68:a5:ef:34:c6:1e:87:77:92: bc:e3:0a:af:41:9a:75:53:5a:b1:12:a5:ff:3e:5f:5c:09:96: 48:e9:9f:1d:5c:c4:d6:df:7e:f7:45:c6:87:1a:98:57:17:64: 0d:6e:c3:31:d0:d7:ed:81:21:c7:ca:4a:7c:96:d4:3f:d1:23: 71:70:e0:e5:87:6e:65:8a:cb:99:4e:10:26:40:73:c1:f1:47: f0:67:f3:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjUxMTAyMTcyMzQ5WhcNMjUxMTA5MTcyMzQ5WjAYMRYwFAYD VQQDEw02OTA3OTNhNS1kY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/droVr8EgTL2qmqWSedKNBPqGM2z8p6dcnDtmEPb66cCKXOPUcZVx6UB7ey G7+DQveOklMMqKKXyhwpMJCaXTOdrQQ1Rxwp9EO+cGRR4VDrk2ZoJGLAGPkcwB5i 5QusR0Ccy6Ch+fQgx3UyA9fHS16R35OKb4oFsaEomobeHrxVdRhDAVC0UJk4BNTk n9I/RP9/8Ng48qJsvRRANJEWsUXQBCkN3C2SHFgGFYhkVBpeMgMcCXZsDFe4PxSb LAbHod8aXpE/GVm7s4hVoQtLv8G8c4n5mqV3jQmEsc+dpm8Aujj1QpUgDiAKtFf7 QRBx+mdWmW4BSXZwMU2Hl2aMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8UufcR XlWYGqUONMguk2UQds9dMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOLGIzOq2T0gkH8o7dYcVC0wVr/UPFWRgE2AC3zjT92foFBKq+dWLB s4vU5ILswY+p4CUViWrnkMu2UktVLn6NeBO0tKb8zeCogQaCoWzua2yfRueS8Ipf l5GQKYYYTPtH5RR4P+ReMgBOtBBAnsFaPXN1BGeEziPiHdFx57OFXcwfyuNgMKo9 4sYI/ULXmsyC4Z7ggwAEDvDsMtlu9WAH5SkZbOLqLUT9Md9ope80xh6Hd5K84wqv QZp1U1qxEqX/Pl9cCZZI6Z8dXMTW3373RcaHGphXF2QNbsMx0NftgSHHykp8ltQ/ 0SNxcODlh25lisuZThAmQHPB8UfwZ/PV -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:44 2025 by rpki-client