$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: esvxWXKYsTSGGaGuMj665uYSZtI1cUeDIHCYtlWqCus= Subject key identifier: DD:23:32:AE:AC:75:4C:28:88:77:CE:7C:C5:01:26:1C:A2:BC:6D:9E Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 0804 Signing time: Tue 04 Nov 2025 21:02:46 +0000 Manifest this update: Tue 04 Nov 2025 21:02:45 +0000 Manifest next update: Tue 11 Nov 2025 21:02:45 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: 0+s2IgIWyBGbR3CTuLyz4Pfuk0V7HGTIeMsfBDjnPi8=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Nov 4 21:02:45 2025 GMT Not After : Nov 11 21:02:45 2025 GMT Subject: CN=690a69f6-8b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:47:5d:93:73:76:49:6f:e3:a3:a0:15:a7: 04:e1:a1:ee:78:aa:fa:a2:16:bc:7a:c0:74:22:29: 4e:b9:72:43:02:d9:7b:b7:f7:c8:03:17:ee:bb:65: d7:68:38:ec:12:49:6e:f2:d4:df:83:8e:12:d3:b3: 1a:db:59:d7:24:8b:9e:b2:80:6b:bf:99:6c:2e:26: dc:de:73:61:39:14:2f:e4:c3:82:1a:1c:11:0f:40: cd:10:26:c3:9c:61:8b:a4:c7:ed:81:fb:87:a2:f7: 1d:68:ba:f6:80:3c:10:c5:a2:b0:4a:66:e8:3c:27: c9:b5:4c:9d:73:7b:6a:61:15:fe:3e:37:f1:18:ac: 04:e6:aa:19:16:45:31:1a:8f:b9:f3:03:e3:1c:dd: 07:5d:c2:03:d1:25:b5:f1:67:58:2a:b3:a6:3d:12: ab:f8:2f:b8:b0:92:86:2f:2c:db:7d:cd:68:9e:50: 66:73:0a:34:f7:5a:ca:fe:dc:cf:ab:aa:28:7a:7c: 13:b8:f5:94:d2:77:34:bf:a5:e9:0d:70:ef:6b:15: 41:9a:22:8b:f6:d8:89:56:5f:18:f2:51:a3:cc:67: eb:11:50:70:5a:f0:69:ed:b6:01:8a:a9:6e:52:f7: d6:0f:89:6a:9d:a2:9c:0e:e1:1b:c7:6e:ea:2d:2d: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:23:32:AE:AC:75:4C:28:88:77:CE:7C:C5:01:26:1C:A2:BC:6D:9E X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:80:46:b3:2c:78:13:ba:b3:cf:23:61:d6:fd:5b:bb:56:ee: a0:57:cf:90:9d:6b:ef:6b:63:36:03:31:db:da:ca:a6:46:b7: f1:be:e8:30:35:70:2e:55:6b:e6:8c:6b:54:80:a1:d8:a0:a0: 5d:c1:02:bb:e4:7f:60:27:32:32:06:43:66:ff:35:57:be:76: fd:df:46:e0:a4:82:f6:00:63:d4:1e:0f:3e:c8:85:7a:51:d6: af:b0:d7:5a:52:e0:bc:89:3d:35:f8:9e:ae:58:0f:d7:f4:46: 6e:3c:7a:82:e3:8b:1a:1f:50:d8:f2:9e:db:91:d3:45:80:e8: c2:dc:48:74:90:8b:01:1e:9e:af:13:44:89:4a:a1:d9:38:f9: 38:69:f8:b1:5e:22:99:e4:90:cd:d2:3a:a1:99:da:b7:8e:1a: cc:8a:73:77:28:7d:1c:0f:d9:4b:b5:b9:4e:60:47:81:6b:d2: 88:f5:a7:3c:1f:b9:e1:a8:fa:ae:3c:aa:f1:3c:dd:05:43:a6: 32:dc:c0:11:5d:0a:88:92:5b:b0:e2:ec:c0:85:2d:bf:67:85: bd:65:5f:e2:9e:cc:15:b0:59:d5:8c:9d:a8:77:34:ae:f5:6f: 4f:96:2f:ba:2c:8b:20:e1:96:cc:b5:a3:86:98:f5:0d:d0:50: 8b:4f:a3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUxMTA0MjEwMjQ1WhcNMjUxMTExMjEwMjQ1WjAYMRYwFAYD VQQDEw02OTBhNjlmNi04YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30BHXZNzdklv46OgFacE4aHueKr6oha8esB0IilOuXJDAtl7t/fIAxfuu2XX aDjsEklu8tTfg44S07Ma21nXJIuesoBrv5lsLibc3nNhORQv5MOCGhwRD0DNECbD nGGLpMftgfuHovcdaLr2gDwQxaKwSmboPCfJtUydc3tqYRX+PjfxGKwE5qoZFkUx Go+58wPjHN0HXcID0SW18WdYKrOmPRKr+C+4sJKGLyzbfc1onlBmcwo091rK/tzP q6ooenwTuPWU0nc0v6XpDXDvaxVBmiKL9tiJVl8Y8lGjzGfrEVBwWvBp7bYBiqlu UvfWD4lqnaKcDuEbx27qLS0rSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0jMq6s dUwoiHfOfMUBJhyivG2eMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTgEazLHgTurPPI2HW/Vu7Vu6gV8+QnWvva2M2AzHb2sqmRrfxvugw NXAuVWvmjGtUgKHYoKBdwQK75H9gJzIyBkNm/zVXvnb930bgpIL2AGPUHg8+yIV6 UdavsNdaUuC8iT01+J6uWA/X9EZuPHqC44saH1DY8p7bkdNFgOjC3Eh0kIsBHp6v E0SJSqHZOPk4afixXiKZ5JDN0jqhmdq3jhrMinN3KH0cD9lLtblOYEeBa9KI9ac8 H7nhqPquPKrxPN0FQ6Yy3MARXQqIkluw4uzAhS2/Z4W9ZV/inswVsFnVjJ2odzSu 9W9Pli+6LIsg4ZbMtaOGmPUN0FCLT6OK -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:23 2025 by rpki-client