$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: bv1202G+67VkQ9t+7+SB/AueCwkAYxaKFevDGDDbdTs= Subject key identifier: 81:B3:80:C1:D9:4C:C5:6A:13:AB:ED:7F:8D:27:4E:85:BA:3C:2A:98 Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 0385 Signing time: Mon 03 Nov 2025 00:46:01 +0000 Manifest this update: Mon 03 Nov 2025 00:46:00 +0000 Manifest next update: Mon 10 Nov 2025 00:46:00 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: WVTp6oQYOgFUzvTGCd9BhnJ+uvcv1Y5hqq1E+wFqe1U=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Nov 3 00:46:00 2025 GMT Not After : Nov 10 00:46:00 2025 GMT Subject: CN=6907fb48-8850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:f3:8d:78:8b:20:1a:35:b5:0d:5a:0a:ae: fe:9f:c4:cd:b9:94:41:f9:ce:5a:08:93:44:58:f4: 19:0c:51:01:2a:fa:05:d5:54:a2:06:21:52:bb:37: 46:61:58:e4:7a:b8:78:de:2c:7b:7c:b3:82:34:89: 9a:cd:52:f1:9b:29:35:13:34:47:a9:bf:0c:fe:81: 77:2c:c9:a6:8e:39:36:d9:65:3f:0a:20:c1:5c:e1: 7f:ce:2c:68:47:7d:7c:db:bd:3f:45:ec:cf:19:db: 56:e9:d5:f0:aa:e0:da:f1:a3:2e:16:d5:13:a4:62: e1:eb:0c:50:c0:a6:bf:5c:ee:e7:9c:0b:1c:8e:5f: a2:3a:31:f8:fe:7e:5c:4e:77:ef:95:27:8d:7a:c9: e5:08:8e:c0:3a:a9:b1:73:47:8f:12:18:5f:90:61: aa:e2:14:b9:cc:8a:31:37:c4:f9:23:80:0c:39:d3: ec:1d:5f:65:2d:92:49:6c:b9:c1:bc:ea:03:f4:75: 89:da:4d:81:97:13:81:02:0c:b6:c0:e1:02:7e:14: 87:fa:ac:9d:24:a2:02:2e:59:b7:1f:c4:5f:c4:61: dd:2d:3c:0b:52:19:f1:70:a1:a4:e6:d2:16:18:ac: 32:7c:c0:e3:3f:67:a3:eb:d0:d4:22:a7:97:55:5d: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B3:80:C1:D9:4C:C5:6A:13:AB:ED:7F:8D:27:4E:85:BA:3C:2A:98 X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4f:b9:b3:5f:de:1f:0e:92:8b:66:c3:e7:64:39:e3:21:02: d0:47:66:b0:eb:51:83:f0:c7:e6:35:70:cf:3a:17:cf:ed:72: 58:5b:56:90:d8:31:e5:cc:88:3f:1f:f0:be:ea:4d:c0:9d:42: 63:fe:19:79:38:bd:73:6c:38:a9:97:4b:fc:86:92:eb:65:35: 37:1c:6c:6f:4a:67:12:aa:28:55:9f:4e:e2:a5:0a:1a:a0:4b: 8d:3d:09:e5:58:b1:4e:9d:2c:89:a8:f8:05:0d:e8:39:a3:5f: 17:a2:91:29:ac:4a:61:8b:70:42:48:03:0e:e2:a5:dd:61:b1: 09:67:03:6c:2b:cc:f3:c1:28:05:47:86:26:bb:33:98:24:fc: fa:ad:9b:24:ae:b3:1d:16:0a:ef:70:2f:ca:1e:6a:fd:4c:de: 06:6f:83:b9:6f:08:79:a3:69:47:d3:84:9a:ed:f1:8f:fc:5e: ae:62:cc:70:03:ca:d9:b8:8b:a5:de:68:01:f4:7a:97:cd:6d: 10:34:7e:47:de:bc:f5:27:8b:64:0f:a2:96:9c:08:85:c7:57: e2:92:32:63:0b:93:ff:de:56:fb:e3:72:ad:a7:70:9e:59:31: b5:bd:1e:78:75:f2:f6:a2:62:fc:43:16:03:16:34:84:a3:92: 0a:ec:25:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjUxMTAzMDA0NjAwWhcNMjUxMTEwMDA0NjAwWjAYMRYwFAYD VQQDEw02OTA3ZmI0OC04ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58rzjXiLIBo1tQ1aCq7+n8TNuZRB+c5aCJNEWPQZDFEBKvoF1VSiBiFSuzdG YVjkerh43ix7fLOCNImazVLxmyk1EzRHqb8M/oF3LMmmjjk22WU/CiDBXOF/zixo R318270/RezPGdtW6dXwquDa8aMuFtUTpGLh6wxQwKa/XO7nnAscjl+iOjH4/n5c TnfvlSeNesnlCI7AOqmxc0ePEhhfkGGq4hS5zIoxN8T5I4AMOdPsHV9lLZJJbLnB vOoD9HWJ2k2BlxOBAgy2wOECfhSH+qydJKICLlm3H8RfxGHdLTwLUhnxcKGk5tIW GKwyfMDjP2ej69DUIqeXVV2xSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGzgMHZ TMVqE6vtf40nToW6PCqYMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbT7mzX94fDpKLZsPnZDnjIQLQR2aw61GD8MfmNXDPOhfP7XJYW1aQ 2DHlzIg/H/C+6k3AnUJj/hl5OL1zbDipl0v8hpLrZTU3HGxvSmcSqihVn07ipQoa oEuNPQnlWLFOnSyJqPgFDeg5o18XopEprEphi3BCSAMO4qXdYbEJZwNsK8zzwSgF R4YmuzOYJPz6rZskrrMdFgrvcC/KHmr9TN4Gb4O5bwh5o2lH04Sa7fGP/F6uYsxw A8rZuIul3mgB9HqXzW0QNH5H3rz1J4tkD6KWnAiFx1fikjJjC5P/3lb743Ktp3Ce WTG1vR54dfL2omL8QxYDFjSEo5IK7CWR -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:32 2025 by rpki-client