$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: 3lfyyUpCBYtz1jCSJF+1sEfFfTJNFm3dLffA2feLXmI= Subject key identifier: DB:85:A8:95:FE:0D:35:46:BC:48:35:EA:82:BC:35:CC:B7:75:C6:5F Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 0B Signing time: Fri 17 Oct 2025 11:51:40 +0000 Manifest this update: Fri 17 Oct 2025 11:51:39 +0000 Manifest next update: Fri 24 Oct 2025 11:51:39 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: /siZrbzPsPt+c3+BzbDOKRHKGMIyWJ+nAsV4xmb+YFo=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Oct 17 11:51:39 2025 GMT Not After : Oct 24 11:51:39 2025 GMT Subject: CN=68f22dcb-6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:16:91:5b:22:1a:46:23:8c:5a:5d:3b:1c: 67:03:96:27:19:4c:b1:7a:dc:bc:ae:aa:55:ac:23: 35:16:96:4f:ae:ba:bf:53:f2:a3:9b:8f:c8:c0:cb: 45:0c:7b:bd:1e:07:31:35:be:dc:8e:fb:ec:82:b8: 07:18:05:91:46:ab:6c:30:d5:50:8c:15:b2:b4:db: 08:0b:1c:20:53:62:e1:0d:73:db:a4:df:aa:26:70: b1:69:98:c6:9e:22:3e:30:6a:58:f4:d9:37:c3:c2: c1:aa:94:64:c7:cc:67:4c:8c:d5:d7:08:de:2a:81: 49:fc:ba:b7:29:97:6a:9f:b5:9c:24:f5:df:76:27: a4:93:9b:50:7c:bc:35:b2:8e:04:43:c2:85:db:f3: cc:65:04:a8:72:99:9b:fe:28:0c:80:0d:40:07:18: 68:41:a2:92:d0:91:ee:c9:19:c5:fc:6e:86:ab:ec: e5:82:61:5d:88:d8:d5:7f:23:ee:d2:1f:27:3a:b1: 8e:7b:9d:ba:c1:ea:94:fd:f4:d1:80:6e:4c:2b:c3: 0e:79:37:b9:f5:29:a3:c0:5f:2b:39:55:40:1d:ab: a7:52:c0:19:b5:ff:0f:7e:0d:4e:86:51:a9:7f:18: 21:41:33:63:64:65:be:a7:1f:ae:09:8f:cb:ae:36: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:85:A8:95:FE:0D:35:46:BC:48:35:EA:82:BC:35:CC:B7:75:C6:5F X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:73:4a:3d:63:23:20:3d:a8:df:cc:09:8c:8f:66:ce:9a:ec: bd:2c:a7:a4:a0:93:18:90:fc:9d:a3:97:59:40:77:d2:0d:3b: 77:ec:47:a0:69:69:03:56:25:ad:3a:0e:b4:ce:f3:bd:c1:07: 48:ba:33:c3:f5:f1:d8:bf:9f:12:53:49:24:18:15:ac:c4:bd: 14:c0:26:8d:e0:96:4d:a1:f2:bb:58:21:d4:49:b7:9c:f0:9c: 55:bd:bf:1e:f5:df:47:da:48:8a:b4:26:f8:9a:f3:de:07:00: 70:f6:89:07:c1:2d:e0:66:b6:d0:80:f7:26:41:f7:19:8b:8c: 4a:e3:b4:1d:dd:ac:ce:82:a2:98:2d:e7:7f:e4:71:b0:1e:e1: bc:20:ee:f5:97:e1:12:37:3e:33:96:29:a1:60:96:ad:08:54: 92:b5:a9:cd:eb:ae:3a:da:02:35:cf:d9:96:ab:f7:ee:b8:83: be:f0:4b:3a:39:da:90:30:93:3d:a2:65:90:9d:45:f4:65:2f: 12:d1:4b:d9:78:2d:ae:be:e8:0e:db:c6:11:4c:b8:fb:77:2d: bd:09:88:6f:82:73:42:96:1e:18:11:b8:91:32:a7:b5:70:94: 94:2d:55:ac:d0:90:39:77:ef:7d:c6:48:f9:34:90:45:2c:73: 45:01:be:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNTEwMTcxMTUxMzlaFw0yNTEwMjQxMTUxMzlaMBgxFjAUBgNV BAMTDTY4ZjIyZGNiLTY1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbYRaRWyIaRiOMWl07HGcDlicZTLF63LyuqlWsIzUWlk+uur9T8qObj8jAy0UM e70eBzE1vtyO++yCuAcYBZFGq2ww1VCMFbK02wgLHCBTYuENc9uk36omcLFpmMae Ij4walj02TfDwsGqlGTHzGdMjNXXCN4qgUn8urcpl2qftZwk9d92J6STm1B8vDWy jgRDwoXb88xlBKhymZv+KAyADUAHGGhBopLQke7JGcX8boar7OWCYV2I2NV/I+7S Hyc6sY57nbrB6pT99NGAbkwrww55N7n1KaPAXys5VUAdq6dSwBm1/w9+DU6GUal/ GCFBM2NkZb6nH64Jj8uuNhdTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU24Wolf4N NUa8SDXqgrw1zLd1xl8wHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxzSj1jIyA9qN/MCYyPZs6a7L0sp6SgkxiQ/J2jl1lAd9INO3fsR6Bp aQNWJa06DrTO873BB0i6M8P18di/nxJTSSQYFazEvRTAJo3glk2h8rtYIdRJt5zw nFW9vx7130faSIq0Jvia894HAHD2iQfBLeBmttCA9yZB9xmLjErjtB3drM6Copgt 53/kcbAe4bwg7vWX4RI3PjOWKaFglq0IVJK1qc3rrjraAjXP2Zar9+64g77wSzo5 2pAwkz2iZZCdRfRlLxLRS9l4La6+6A7bxhFMuPt3Lb0JiG+Cc0KWHhgRuJEyp7Vw lJQtVazQkDl3733GSPk0kEUsc0UBviw= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:07 2025 by rpki-client