$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json) Hash identifier: HhjCTD0ylHh3ItodgriIMOl9hpwCHwbd/n0mWcD/CJ4= Subject key identifier: 43:CD:41:BC:C0:90:C5:63:2B:42:38:9A:78:81:8C:76:27:43:1D:7E Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft Manifest number: 0C93 Signing time: Sun 02 Nov 2025 18:24:47 +0000 Manifest this update: Sun 02 Nov 2025 18:24:46 +0000 Manifest next update: Sun 09 Nov 2025 18:24:46 +0000 Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: 8cCHQHMQCQTvadOsTiaNiTKO4SBU+xXbQr+3oXZz1rI=) 2: 9591475A4F6011EFAF26AF63C4F9AE02.roa (hash: d4nANGkii06xzWV6dpPGz0VvWqxPgVRXdrnJY6WmtmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Validity Not Before: Nov 2 18:24:46 2025 GMT Not After : Nov 9 18:24:46 2025 GMT Subject: CN=6907a1ee-2d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:32:67:7d:3c:4a:06:15:58:41:bd:84:ca: ac:9e:4f:9b:ea:79:77:d3:41:d4:6a:ef:d2:67:8d: a2:24:50:89:b1:73:1a:ea:23:73:34:82:ec:19:22: c9:ee:ed:b0:d9:cc:64:ef:13:d5:56:ba:fe:77:bf: 9f:49:e3:ed:56:19:58:13:d8:f9:d4:7d:d0:df:af: 3c:f8:7a:18:17:1c:87:f8:73:86:8a:0d:db:e7:99: 21:f9:db:71:90:23:d9:ec:70:cf:3d:dc:07:be:e5: 43:22:18:1b:c2:bb:1b:d3:0f:e6:3d:72:ed:49:ca: 31:16:0c:a8:30:b9:cc:0c:d7:c3:03:81:8b:dc:62: 74:4e:fd:3b:4c:be:4c:cd:c4:49:9e:9d:fc:09:ad: e2:46:43:4b:63:d4:88:71:9c:3c:94:e3:af:c1:55: 30:ad:04:25:e7:8d:54:1b:f7:fc:60:93:c7:87:6b: ec:22:3b:db:f9:58:a6:2c:2b:4c:52:d1:d5:b5:93: 69:46:32:6b:f0:b0:f3:d8:2e:d4:0e:f1:1d:50:e2: 01:57:62:d8:de:8e:a7:cb:35:b6:97:6b:ce:3e:50: 17:56:6b:b5:54:c1:3c:70:22:e0:88:77:a2:b9:5b: 79:c7:61:91:17:06:30:5e:ce:05:de:2d:a0:2b:fa: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CD:41:BC:C0:90:C5:63:2B:42:38:9A:78:81:8C:76:27:43:1D:7E X509v3 Authority Key Identifier: keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:81:9a:1b:32:e0:a7:24:79:f5:3f:91:20:5c:e5:0b:42:bd: c7:d6:73:f5:8d:d0:fd:6f:56:64:cf:45:e1:86:65:f3:b1:7e: 09:3b:be:b2:09:ab:7b:bd:53:68:ca:34:25:cf:9a:6c:76:f3: 12:86:d3:3d:c9:02:74:cc:de:0b:cf:88:bc:96:7f:9d:e7:0b: 3c:00:e9:c9:df:a0:04:00:2a:23:8d:57:50:14:96:e2:ac:05: 06:88:f8:36:75:93:42:67:96:6f:5c:88:49:05:5a:59:26:66: 61:b0:3d:a9:4c:69:c4:23:00:6e:52:8c:73:88:bb:68:dc:46: fa:b6:be:39:46:2b:d5:92:d3:2e:7b:b1:5c:94:95:96:4b:67: 20:1f:f9:a4:d7:f9:c7:73:65:71:a7:f0:c4:5a:11:7e:bc:92: 65:79:85:54:70:18:46:be:3f:49:bf:41:45:c1:74:62:95:e8: a5:78:de:d6:0b:71:a2:a4:48:63:cb:58:42:6e:42:62:b7:98: 42:40:4f:eb:f1:65:43:1d:44:e7:a3:7b:a9:95:aa:84:d3:9e: 50:56:cd:1e:08:bf:f8:48:9d:8a:ec:0b:2a:c5:73:8d:31:a4: 7b:cc:69:fc:a3:86:28:c9:a8:4a:1b:31:af:41:81:b7:3e:4d: 23:22:6e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF MUZEQjg2RTYwHhcNMjUxMTAyMTgyNDQ2WhcNMjUxMTA5MTgyNDQ2WjAYMRYwFAYD VQQDEw02OTA3YTFlZS0yZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKoyZ308SgYVWEG9hMqsnk+b6nl300HUau/SZ42iJFCJsXMa6iNzNILsGSLJ 7u2w2cxk7xPVVrr+d7+fSePtVhlYE9j51H3Q3688+HoYFxyH+HOGig3b55kh+dtx kCPZ7HDPPdwHvuVDIhgbwrsb0w/mPXLtScoxFgyoMLnMDNfDA4GL3GJ0Tv07TL5M zcRJnp38Ca3iRkNLY9SIcZw8lOOvwVUwrQQl541UG/f8YJPHh2vsIjvb+VimLCtM UtHVtZNpRjJr8LDz2C7UDvEdUOIBV2LY3o6nyzW2l2vOPlAXVmu1VME8cCLgiHei uVt5x2GRFwYwXs4F3i2gK/rrtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPNQbzA kMVjK0I4mniBjHYnQx1+MB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4 NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU2OS9GRTg5OUQ1RTA4NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnpp ajNzdm1aTkM5UnpoX2JodVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDgZobMuCnJHn1P5EgXOULQr3H1nP1jdD9b1Zkz0XhhmXzsX4JO76y Cat7vVNoyjQlz5psdvMShtM9yQJ0zN4Lz4i8ln+d5ws8AOnJ36AEACojjVdQFJbi rAUGiPg2dZNCZ5ZvXIhJBVpZJmZhsD2pTGnEIwBuUoxziLto3Eb6tr45RivVktMu e7FclJWWS2cgH/mk1/nHc2Vxp/DEWhF+vJJleYVUcBhGvj9Jv0FFwXRileileN7W C3GipEhjy1hCbkJit5hCQE/r8WVDHUTno3uplaqE055QVs0eCL/4SJ2K7AsqxXON MaR7zGn8o4YoyahKGzGvQYG3Pk0jIm7m -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:06 2025 by rpki-client