$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json) Hash identifier: 2V97D62LmcIJDY9QUmgWaHUgrBTadNHqxvuumwYB83Y= Subject key identifier: 31:DC:BB:01:8D:71:E0:70:B0:98:00:33:BB:E3:58:90:19:F1:88:A7 Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft Manifest number: 7B Signing time: Mon 03 Nov 2025 06:45:42 +0000 Manifest this update: Mon 03 Nov 2025 06:45:42 +0000 Manifest next update: Mon 10 Nov 2025 06:45:42 +0000 Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: ccPLXaj9HmrGDMfuz0ULaEXN0u2ITUty+Rpp6BfoVr4=) 2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: JCV9BgemXhUBaAgBPhl6UiNH0ukdvH/wrcQapOQQK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C Validity Not Before: Nov 3 06:45:42 2025 GMT Not After : Nov 10 06:45:42 2025 GMT Subject: CN=69084f96-56ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:af:6f:0a:6a:0e:ba:cc:20:e6:aa:57:3c: f2:54:ea:15:ce:ae:01:cc:43:b3:7c:3f:63:6e:b9: 0e:66:4a:b3:a4:91:5d:7c:ee:c2:db:54:b1:b4:ac: 45:78:56:a1:79:bc:d9:bf:a6:33:90:44:e3:b3:bd: de:18:a3:07:1f:47:cd:51:3f:b8:b3:b1:32:26:1c: c8:cc:58:26:f5:9b:84:a5:ba:58:1e:cc:69:c9:df: 77:ee:17:92:63:b7:74:7a:05:a5:7c:51:a6:39:10: 7b:1e:bb:76:7d:b8:ee:4e:1d:90:46:ba:96:09:1f: 11:f1:94:b6:01:b0:16:3f:16:cc:19:41:09:89:89: 68:72:94:60:34:5e:b8:07:76:6f:4c:d5:a8:c7:76: cb:c6:50:ac:5a:2a:fe:22:b6:69:db:36:c6:54:ea: d3:40:f6:44:d3:73:87:ee:9f:ef:b6:c6:dc:4d:a2: 6d:bc:e0:f0:4c:5b:48:e1:d1:85:13:71:8f:22:22: 68:6b:72:71:5b:00:3d:3e:b0:f8:a3:2f:da:3d:6d: 6d:0a:0b:bf:be:57:f8:64:82:30:9f:a4:f5:8d:ff: 53:33:ae:84:91:31:92:39:f3:aa:e6:db:15:bd:f8: c5:f7:41:ff:1d:7f:fb:ff:c1:ce:bc:42:6d:1a:1c: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:BB:01:8D:71:E0:70:B0:98:00:33:BB:E3:58:90:19:F1:88:A7 X509v3 Authority Key Identifier: keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c7:af:3a:b4:d6:ed:f6:01:65:a4:07:08:10:2f:06:c1:c7: b2:ba:9d:1d:7b:22:85:07:b2:07:b9:48:32:b7:03:ea:df:fb: 59:95:db:fa:20:11:19:0d:b7:9b:1e:63:46:23:9e:e9:85:07: 01:06:a1:b8:4b:06:56:cd:92:05:c2:98:ed:66:e3:55:b9:e2: 7b:1f:57:fb:8c:8e:b5:ca:9a:f9:4e:91:8b:db:e3:78:56:10: c5:8e:55:bf:61:13:a7:2b:19:5f:d2:0e:14:2b:d2:bd:d2:58: 78:ee:2e:31:8e:a9:f9:58:46:5c:34:46:c5:aa:72:4c:58:2e: 72:70:59:a6:d2:9b:0b:97:61:4f:40:99:16:25:27:05:10:1e: 66:5c:ce:f7:f8:a0:6a:73:93:b9:e5:f2:16:70:cf:bd:3c:2a: d9:05:78:f7:36:fe:a2:03:e4:f2:e4:e3:55:3e:65:2f:5d:37: 87:ad:fb:a3:cc:d3:7c:b8:ac:f3:15:39:e0:25:36:2f:fe:62: 19:b7:4f:c6:da:39:b2:85:11:1d:e2:4c:9e:9f:c5:13:de:33: 25:44:26:e6:53:c8:19:b5:99:4b:01:b0:79:1a:4f:ec:d9:63: 37:49:22:c1:d1:47:55:12:3e:c5:2f:13:a4:8f:92:9d:b0:90: 50:52:8b:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzlDRjExMC8GA1UEBRMoMEU2QzRBQjY3N0JERTFBRDQ0NjAzRkQ3MzdEQTI1QzA2 MDFDNDU5QzAeFw0yNTExMDMwNjQ1NDJaFw0yNTExMTAwNjQ1NDJaMBgxFjAUBgNV BAMTDTY5MDg0Zjk2LTU2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTEK9vCmoOuswg5qpXPPJU6hXOrgHMQ7N8P2NuuQ5mSrOkkV187sLbVLG0rEV4 VqF5vNm/pjOQROOzvd4YowcfR81RP7izsTImHMjMWCb1m4SlulgezGnJ33fuF5Jj t3R6BaV8UaY5EHseu3Z9uO5OHZBGupYJHxHxlLYBsBY/FswZQQmJiWhylGA0XrgH dm9M1ajHdsvGUKxaKv4itmnbNsZU6tNA9kTTc4fun++2xtxNom284PBMW0jh0YUT cY8iImhrcnFbAD0+sPijL9o9bW0KC7++V/hkgjCfpPWN/1MzroSRMZI586rm2xW9 +MX3Qf8df/v/wc68Qm0aHIgfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMdy7AY1x 4HCwmAAzu+NYkBnxiKcwHwYDVR0jBBgwFoAUDmxKtne94a1EYD/XN9olwGAcRZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzOUNGLzU2RjMxRkI0RkI1 OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGExRVlEX1hOOW9sd0dBY1Ja dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG14S3RuZTk0YTFFWURfWE45b2x3R0FjUlp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz OUNGLzU2RjMxRkI0RkI1OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGEx RVlEX1hOOW9sd0dBY1Jady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALTHrzq01u32AWWkBwgQLwbBx7K6nR17IoUHsge5SDK3A+rf+1mV2/og ERkNt5seY0YjnumFBwEGobhLBlbNkgXCmO1m41W54nsfV/uMjrXKmvlOkYvb43hW EMWOVb9hE6crGV/SDhQr0r3SWHjuLjGOqflYRlw0RsWqckxYLnJwWabSmwuXYU9A mRYlJwUQHmZczvf4oGpzk7nl8hZwz708KtkFePc2/qID5PLk41U+ZS9dN4et+6PM 03y4rPMVOeAlNi/+Yhm3T8baObKFER3iTJ6fxRPeMyVEJuZTyBm1mUsBsHkaT+zZ YzdJIsHRR1USPsUvE6SPkp2wkFBSi8w= -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:22 2025 by rpki-client