$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json) Hash identifier: wNXlLGKu6D4vywL3IVwxe33Qn2u6slrrHynUCM3G/Dw= Subject key identifier: 04:F0:88:9C:B1:69:CF:DA:23:4C:F4:90:BF:1A:67:1B:20:71:E3:84 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft Manifest number: 0C4B Signing time: Tue 04 Nov 2025 18:44:06 +0000 Manifest this update: Tue 04 Nov 2025 18:44:06 +0000 Manifest next update: Tue 11 Nov 2025 18:44:06 +0000 Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: 3c1XdT6XSJTEYS6196D7HbjRJ6kX0Ea7tXDZ/CbpaVA=) 2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Nov 4 18:44:06 2025 GMT Not After : Nov 11 18:44:06 2025 GMT Subject: CN=690a4976-57a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:3d:36:e4:28:18:9f:56:02:ed:e7:22:cd: 8d:1e:64:3b:83:af:d1:73:bf:7a:be:60:6d:50:63: 10:65:4e:6e:f3:40:38:e4:71:14:a3:2a:4a:8d:cc: 99:5a:76:08:17:65:73:ce:94:49:01:55:e6:d6:6d: 18:ab:c5:ae:a2:e6:fc:8d:c2:8c:f9:d6:6f:34:aa: 57:af:7d:df:ab:03:e0:65:a4:c8:59:51:65:2b:72: 25:a6:50:e1:c9:f9:9d:47:55:ba:91:13:d5:cc:df: a9:99:0f:f8:92:01:34:50:bd:bd:d8:68:9a:9c:7a: 3a:a2:62:9c:5d:8c:5a:57:44:e9:fd:b6:2a:aa:35: e2:03:b5:2a:bc:42:eb:ff:4a:8b:24:82:07:e2:21: fb:67:03:64:d8:98:37:d3:f4:28:56:ee:c2:27:b3: c5:9e:e5:12:c0:2b:af:ca:57:9c:26:1a:13:96:79: 59:dd:2a:92:53:cb:90:9c:66:33:3e:b0:0e:0c:3c: 98:9f:88:45:12:c7:b9:ed:a1:2a:7e:1e:83:11:5f: 09:f2:47:8f:3a:a7:ab:08:1f:94:30:8b:13:a7:f0: d3:6e:20:e6:5d:a9:cd:15:db:2a:85:4e:e5:a0:7d: 15:1e:af:60:1c:95:ac:e2:94:b1:3b:7a:7d:1f:d5: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F0:88:9C:B1:69:CF:DA:23:4C:F4:90:BF:1A:67:1B:20:71:E3:84 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6c:21:2b:f9:6b:e4:f1:2b:ef:84:84:5d:9f:88:f6:87:99: 39:ce:f6:ff:a7:2d:53:68:57:08:9c:f4:5c:4c:0c:bc:6b:d9: 2f:1c:bd:a9:0a:c6:c7:4e:a5:b3:c6:66:22:d1:16:ae:eb:3d: ac:84:ff:67:74:0c:3f:64:5e:53:be:56:0f:47:6d:12:35:9c: c1:45:5e:c5:8c:95:08:0d:05:9f:c4:04:33:25:6d:da:72:6a: 04:ec:30:8e:41:3d:2d:98:6d:f2:c1:b7:55:06:61:17:39:54: c0:48:6c:02:91:c8:65:0a:f5:2d:65:42:d4:7d:0c:63:77:0e: cd:b7:49:c1:aa:09:83:a8:6e:b9:c6:44:2f:cd:0b:fb:aa:11: 6c:5f:00:7c:96:b8:c5:f2:b0:56:14:b2:39:40:be:db:13:b3: 4b:5a:81:ab:9a:f4:a6:1c:9c:6a:eb:59:47:a6:8c:bb:9d:56: 17:0c:6e:1e:fa:3f:1e:b1:30:f5:49:eb:81:c4:cc:39:d6:97: 18:d1:f1:7c:80:ae:dd:57:17:bd:51:e2:49:6b:a6:ff:a4:7b: ee:0b:4a:8e:64:8b:70:a7:db:ad:92:4f:b6:6f:14:93:28:2a: a3:65:c0:c4:80:2f:41:30:3e:2e:32:21:97:69:9f:1c:1a:2a: 59:5e:4b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUxMTA0MTg0NDA2WhcNMjUxMTExMTg0NDA2WjAYMRYwFAYD VQQDEw02OTBhNDk3Ni01N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tg9NuQoGJ9WAu3nIs2NHmQ7g6/Rc796vmBtUGMQZU5u80A45HEUoypKjcyZ WnYIF2VzzpRJAVXm1m0Yq8Wuoub8jcKM+dZvNKpXr33fqwPgZaTIWVFlK3IlplDh yfmdR1W6kRPVzN+pmQ/4kgE0UL292GianHo6omKcXYxaV0Tp/bYqqjXiA7UqvELr /0qLJIIH4iH7ZwNk2Jg30/QoVu7CJ7PFnuUSwCuvylecJhoTlnlZ3SqSU8uQnGYz PrAODDyYn4hFEse57aEqfh6DEV8J8kePOqerCB+UMIsTp/DTbiDmXanNFdsqhU7l oH0VHq9gHJWs4pSxO3p9H9XamQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATwiJyx ac/aI0z0kL8aZxsgceOEMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzI4NS9GRTdGNjM3QzE0MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQz OU1KMEZUOTFOdlBmaWZsSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwbCEr+Wvk8SvvhIRdn4j2h5k5zvb/py1TaFcInPRcTAy8a9kvHL2p CsbHTqWzxmYi0Rau6z2shP9ndAw/ZF5TvlYPR20SNZzBRV7FjJUIDQWfxAQzJW3a cmoE7DCOQT0tmG3ywbdVBmEXOVTASGwCkchlCvUtZULUfQxjdw7Nt0nBqgmDqG65 xkQvzQv7qhFsXwB8lrjF8rBWFLI5QL7bE7NLWoGrmvSmHJxq61lHpoy7nVYXDG4e +j8esTD1SeuBxMw51pcY0fF8gK7dVxe9UeJJa6b/pHvuC0qOZItwp9utkk+2bxST KCqjZcDEgC9BMD4uMiGXaZ8cGipZXksR -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:34 2025 by rpki-client