$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: LqyQsC9YVZtkEZ8w1MPxA7yrbrlWvkwFvzU2bzTrW7g= Subject key identifier: C9:78:0A:6E:C8:D9:27:C7:52:CB:A8:30:EF:0F:3A:E9:C3:9D:7D:07 Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 1F Signing time: Mon 03 Nov 2025 07:45:41 +0000 Manifest this update: Mon 03 Nov 2025 07:45:41 +0000 Manifest next update: Mon 10 Nov 2025 07:45:41 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: Dw4Bm+CzHb3lmTnv0gWfR6EQOPtjDCf9GAllvlAj8Q8=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: llPDQC2jO2w/FvD6c8zrwk1KVoD3gjXSKUJ2H5qo9rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Nov 3 07:45:41 2025 GMT Not After : Nov 10 07:45:41 2025 GMT Subject: CN=69085da5-1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:3a:83:bd:e5:c0:0d:aa:a2:47:f5:ac:f4: 97:da:c2:43:35:de:92:6a:80:40:d7:39:14:14:ea: 9f:ff:d3:55:ec:f5:96:c7:19:ba:7d:d3:8e:c9:9c: 89:a1:1b:5f:61:cf:fe:c3:5c:04:f6:c7:a2:82:ea: db:35:1c:9f:9e:e7:69:33:a9:75:6a:0a:a6:08:61: 2d:28:2f:e8:8a:56:0d:a8:02:25:0e:3f:f5:21:d9: 61:61:3b:89:55:06:36:0e:ce:cf:d7:5f:b9:d7:76: 97:36:83:eb:4e:4e:29:3e:f8:9b:2f:b6:8b:c2:75: 6a:5c:6c:8c:9d:76:b9:72:48:ef:36:23:b2:2c:89: 4a:5c:0a:5b:52:41:c9:56:ee:8c:26:db:61:db:7b: aa:c2:b3:d6:3e:1e:a3:1b:64:2e:7f:83:37:be:1c: 2c:a7:eb:7d:67:84:b0:b4:a4:42:35:c6:a2:c8:84: fa:dc:e0:41:41:7a:51:0a:d8:16:dd:2b:41:3a:be: 63:41:e7:b5:87:6e:1e:3c:2d:21:7f:5a:05:d3:c8: 5c:5f:0c:88:06:a0:37:7f:cb:12:97:3a:e1:6b:79: 8e:30:72:8d:ea:b4:ac:88:b8:3d:f8:9c:95:a7:11: da:c3:0b:0a:ff:9c:b3:cd:0f:c5:10:83:26:6a:1c: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:0A:6E:C8:D9:27:C7:52:CB:A8:30:EF:0F:3A:E9:C3:9D:7D:07 X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b4:4a:4c:12:a1:4d:85:f4:07:48:a0:2d:68:d3:fa:93:f6: 86:67:61:05:1a:4c:41:cf:f6:e3:34:8f:9d:fa:69:95:46:65: 50:82:e5:67:b9:b4:ad:5d:69:95:52:1c:67:93:de:08:0e:6d: 8a:d9:b8:e4:75:c9:9e:c5:02:b1:32:ef:0f:e8:ff:cb:a8:31: 7a:56:bf:dc:b8:92:52:6f:89:aa:a8:57:aa:9a:52:7f:4e:6e: e3:c4:ed:bb:21:3a:db:02:29:e5:31:a1:68:bc:76:6a:4b:fe: ac:50:24:17:81:76:df:04:83:72:37:8c:a5:10:56:e6:30:a1: 61:e6:29:be:39:aa:e8:0b:9a:59:4f:23:a9:4b:23:06:07:cc: 93:4a:22:01:6d:a3:b9:6a:8b:92:43:c1:6b:5c:01:1f:14:d9: 76:8a:e7:37:37:d0:85:14:79:d7:97:3d:fc:f9:97:30:97:cf: 29:a6:7d:2b:08:ef:af:8c:6e:14:89:7b:0f:df:62:40:a6:70: ef:49:f8:d8:ea:28:bd:76:0f:0c:54:5d:ef:4d:b9:8e:63:cd: 5d:67:7f:2c:d6:f4:95:a4:b5:9c:e8:bb:9f:0e:d1:cb:9d:6a: ce:cd:98:ad:6f:0f:98:3d:6c:0c:7d:ab:6d:d6:96:97:18:60: e5:aa:b1:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNTExMDMwNzQ1NDFaFw0yNTExMTAwNzQ1NDFaMBgxFjAUBgNV BAMTDTY5MDg1ZGE1LTFlMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsMjqDveXADaqiR/Ws9JfawkM13pJqgEDXORQU6p//01Xs9ZbHGbp9047JnImh G19hz/7DXAT2x6KC6ts1HJ+e52kzqXVqCqYIYS0oL+iKVg2oAiUOP/Uh2WFhO4lV BjYOzs/XX7nXdpc2g+tOTik++JsvtovCdWpcbIyddrlySO82I7IsiUpcCltSQclW 7owm22Hbe6rCs9Y+HqMbZC5/gze+HCyn631nhLC0pEI1xqLIhPrc4EFBelEK2Bbd K0E6vmNB57WHbh48LSF/WgXTyFxfDIgGoDd/yxKXOuFreY4wco3qtKyIuD34nJWn EdrDCwr/nLPND8UQgyZqHAnTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyXgKbsjZ J8dSy6gw7w866cOdfQcwHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEO0SkwSoU2F9AdIoC1o0/qT9oZnYQUaTEHP9uM0j536aZVGZVCC5We5 tK1daZVSHGeT3ggObYrZuOR1yZ7FArEy7w/o/8uoMXpWv9y4klJviaqoV6qaUn9O buPE7bshOtsCKeUxoWi8dmpL/qxQJBeBdt8Eg3I3jKUQVuYwoWHmKb45qugLmllP I6lLIwYHzJNKIgFto7lqi5JDwWtcAR8U2XaK5zc30IUUedeXPfz5lzCXzymmfSsI 76+MbhSJew/fYkCmcO9J+NjqKL12DwxUXe9NuY5jzV1nfyzW9JWktZzou58O0cud as7NmK1vD5g9bAx9q23WlpcYYOWqsX0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:19 2025 by rpki-client