$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: Zc9oNJOj599ryobd8CfA4p7hEzy0PEDktKEMrAIsjtI= Subject key identifier: 7D:4D:12:CB:1B:A4:76:51:0B:B2:B4:54:71:A7:B7:97:F5:85:D5:B0 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 01AF Signing time: Mon 27 Oct 2025 04:59:01 +0000 Manifest this update: Mon 27 Oct 2025 04:59:00 +0000 Manifest next update: Mon 03 Nov 2025 04:59:00 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: blQN5AoVI0bq1EQxS0KYzz2S49x+gGrElfxXS/cxRAA=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: 0v/buppkF/DfpCpfVlA0Y6wo8IqosGS/hcXir1bpF1E=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: 4HA85tehk5/AiNaVc0PdrtNvf1FpOWqjUJ6QboHlbHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Oct 27 04:59:00 2025 GMT Not After : Nov 3 04:59:00 2025 GMT Subject: CN=68fefc15-f628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:f0:d6:e5:9b:a8:bc:1a:5b:a8:5d:5f:75: d5:13:d7:16:ff:47:69:b9:b9:63:eb:f4:9f:b3:32: b9:86:fb:94:1b:1a:99:ac:67:47:03:cf:a4:bc:02: 51:2c:f7:c3:2c:c8:61:7a:cb:a8:7d:81:89:53:3f: ea:e2:0c:ee:ef:e3:3a:65:8b:72:d4:bc:8e:a7:5d: c9:f6:1e:02:4c:50:0e:9f:c5:c7:bd:82:9e:88:f1: 87:e5:b0:6e:c1:08:c7:1a:07:0b:30:09:c8:92:ea: 71:a3:08:74:31:26:e3:1e:28:a7:99:a2:ac:7c:0d: 9b:51:89:76:de:c6:1a:d8:09:41:17:70:e7:b5:54: ed:f8:5f:d9:27:e1:4c:ff:55:98:39:a9:6d:c7:5b: 34:3c:7b:4b:37:72:9d:bd:cd:be:47:cb:64:d4:05: 94:52:83:d4:6e:ea:c0:e3:cf:d2:5c:66:7b:aa:1f: d4:59:a4:fd:b1:91:ae:43:6f:ca:aa:5b:6c:8e:24: 06:45:97:f4:2f:eb:59:de:65:7e:8c:0d:5b:da:9e: df:58:63:46:36:98:6e:d2:1a:55:6b:78:5c:6e:3d: 70:35:dd:b1:fe:88:87:26:24:ea:41:81:58:2b:84: 89:a4:a5:f8:70:68:e6:52:74:58:6f:6a:3d:2f:48: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4D:12:CB:1B:A4:76:51:0B:B2:B4:54:71:A7:B7:97:F5:85:D5:B0 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1f:bc:33:80:34:bf:8e:bf:99:a6:05:62:07:74:b2:24:3d: ad:58:65:23:6b:cf:a3:98:ad:ed:93:96:84:de:47:5e:42:c2: 42:ac:10:a0:e0:e9:8f:da:c4:59:ed:03:2d:b9:ca:02:f2:48: 19:01:92:1f:12:3d:05:d4:e0:2f:af:9f:33:a2:23:68:95:31: ca:f2:a0:2b:a8:84:50:e3:f4:6b:f9:9e:43:94:5b:5b:a2:10: 2b:1b:59:39:ac:60:8b:51:92:78:e9:c2:2e:91:49:ab:c9:d1: 8e:72:d8:55:f1:59:5d:17:fc:1a:eb:a4:c8:10:89:8d:cf:de: 11:aa:3f:e9:6a:08:c2:eb:b7:6d:76:57:a6:ce:83:86:2e:58: 8e:ad:66:b2:43:2b:d3:a8:95:24:3a:c9:b3:b6:cb:bd:8b:f1: 54:3c:fe:37:4f:f0:7a:0c:85:a6:61:71:b5:ca:44:33:5a:a5: 42:c2:0c:4e:e3:82:e5:21:c5:df:3b:63:7c:99:ea:44:c8:b3: 7b:db:df:9b:8e:c6:c5:d8:50:f7:8e:41:3b:21:82:d4:f7:01: c3:ee:a6:01:8f:71:41:a8:89:b9:fe:60:ea:e7:9a:d3:35:7c: d5:31:b7:45:ea:78:19:d2:93:b0:c0:db:32:15:0c:53:56:61: b1:05:f7:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUxMDI3MDQ1OTAwWhcNMjUxMTAzMDQ1OTAwWjAYMRYwFAYD VQQDEw02OGZlZmMxNS1mNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsobw1uWbqLwaW6hdX3XVE9cW/0dpublj6/SfszK5hvuUGxqZrGdHA8+kvAJR LPfDLMhhesuofYGJUz/q4gzu7+M6ZYty1LyOp13J9h4CTFAOn8XHvYKeiPGH5bBu wQjHGgcLMAnIkupxowh0MSbjHiinmaKsfA2bUYl23sYa2AlBF3DntVTt+F/ZJ+FM /1WYOaltx1s0PHtLN3Kdvc2+R8tk1AWUUoPUburA48/SXGZ7qh/UWaT9sZGuQ2/K qltsjiQGRZf0L+tZ3mV+jA1b2p7fWGNGNphu0hpVa3hcbj1wNd2x/oiHJiTqQYFY K4SJpKX4cGjmUnRYb2o9L0gnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1NEssb pHZRC7K0VHGnt5f1hdWwMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwH7wzgDS/jr+ZpgViB3SyJD2tWGUja8+jmK3tk5aE3kdeQsJCrBCg 4OmP2sRZ7QMtucoC8kgZAZIfEj0F1OAvr58zoiNolTHK8qArqIRQ4/Rr+Z5DlFtb ohArG1k5rGCLUZJ46cIukUmrydGOcthV8VldF/wa66TIEImNz94Rqj/pagjC67dt dlemzoOGLliOrWayQyvTqJUkOsmztsu9i/FUPP43T/B6DIWmYXG1ykQzWqVCwgxO 44LlIcXfO2N8mepEyLN729+bjsbF2FD3jkE7IYLU9wHD7qYBj3FBqIm5/mDq55rT NXzVMbdF6ngZ0pOwwNsyFQxTVmGxBfcj -----END CERTIFICATE-----Generated at Mon Oct 27 15:00:46 2025 by rpki-client