$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: Om8AugOZJiV1c9098/SEK/rxEJwBVHF0GyB+rPAnrMk= Subject key identifier: 84:99:56:40:07:3E:B7:CA:18:98:B5:41:D4:FF:18:28:7B:6F:E9:DA Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 34DB Signing time: Sun 02 Nov 2025 14:47:34 +0000 Manifest this update: Sun 02 Nov 2025 14:47:33 +0000 Manifest next update: Sun 09 Nov 2025 14:47:33 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: ptAen1Ln5+O/i3DxQbiB3uvDYbREu3LrnY6Ur3l07Eg=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: r3JWgar+Qi2GIwJz7gdsqO3bZMMx2m4iwFJF3cbd3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990, serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Nov 2 14:47:33 2025 GMT Not After : Nov 9 14:47:33 2025 GMT Subject: CN=69076f06-29a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:36:34:ef:bb:22:71:d4:23:0d:41:b8:27: c0:db:47:ee:8f:5b:3f:7a:9d:51:62:79:2e:51:d3: 16:f4:7a:2f:bc:0d:5e:4a:82:28:df:c0:69:de:18: d1:1f:e1:72:43:2e:2f:22:77:e0:3f:6e:d6:c9:f4: c1:c0:b5:64:54:70:31:30:3c:a1:2d:1b:45:c4:14: 21:9e:e9:d8:c6:7f:9a:50:a0:5d:c9:7b:16:83:8a: 13:db:c3:18:47:6b:88:55:d5:91:38:df:32:3b:cc: 94:38:b3:e2:3a:33:a3:a8:bb:a8:8e:5c:6f:3b:08: 02:14:40:a9:2b:03:45:35:1e:ba:dd:75:ba:b4:58: a1:c7:09:9b:5e:8f:95:62:b8:b5:7c:53:05:de:f4: e0:3b:48:a1:cb:bd:5c:0a:37:7f:c0:77:8b:9b:c2: 57:c5:d6:e2:d2:67:b9:e2:8c:77:ad:56:eb:d3:13: d4:f5:92:ba:54:cb:71:b6:e8:a7:62:75:9e:84:5a: 24:73:fd:2d:7d:48:de:08:e8:82:7a:c6:d8:d2:df: fe:b8:c1:b2:9e:68:d0:5a:73:03:37:27:34:c6:74: b3:0e:32:c1:0e:37:a2:02:34:d2:ad:e4:3b:1d:a1: e3:1f:2c:53:9c:2e:4c:04:73:d5:e4:f0:e0:c4:bd: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:56:40:07:3E:B7:CA:18:98:B5:41:D4:FF:18:28:7B:6F:E9:DA X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:a5:a5:b9:79:64:50:9a:38:74:1f:30:ee:2a:c2:dd:b7: 63:1f:ad:76:5a:b3:bb:56:34:1a:13:d4:71:43:f5:54:fa:8f: a1:0f:4c:fc:b5:a2:ab:28:d2:db:fd:62:62:56:e0:33:60:3b: cc:ca:9d:61:0c:e8:52:de:c5:aa:51:33:36:d9:10:8c:20:42: 94:68:2d:9c:94:cf:75:f3:40:ac:df:89:61:83:58:18:56:4c: be:1b:72:da:a9:92:24:c0:cb:d2:0c:10:62:5d:fb:8e:d4:df: 20:67:c9:c8:3b:69:8d:78:8e:1e:3e:1e:46:15:7f:8e:8e:48: b7:da:f8:c6:41:2d:08:0a:16:3a:73:a5:30:83:0e:4b:c1:52: 15:64:ef:56:a3:b1:64:6d:c7:6d:03:a5:51:8e:e3:4b:e2:5a: f5:e3:f4:2d:3f:31:bb:c1:da:7e:a8:00:20:29:01:ff:9e:c0: 20:7e:f0:05:ca:13:7d:68:54:3a:18:42:84:cf:64:39:73:b1: f4:12:6c:20:b1:6b:2b:d8:94:e8:dd:3e:b5:86:19:b2:7c:0d: 48:6b:e1:21:c6:f1:aa:97:7f:ed:d4:cb:fb:26:72:d1:0d:29: 33:c3:3b:d8:29:a6:6e:e4:7b:4a:b1:de:3e:e6:6f:29:0d:de: 0e:44:15:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjUxMTAyMTQ0NzMzWhcNMjUxMTA5MTQ0NzMzWjAYMRYwFAYD VQQDEw02OTA3NmYwNi0yOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy442NO+7InHUIw1BuCfA20fuj1s/ep1RYnkuUdMW9HovvA1eSoIo38Bp3hjR H+FyQy4vInfgP27WyfTBwLVkVHAxMDyhLRtFxBQhnunYxn+aUKBdyXsWg4oT28MY R2uIVdWRON8yO8yUOLPiOjOjqLuojlxvOwgCFECpKwNFNR663XW6tFihxwmbXo+V Yri1fFMF3vTgO0ihy71cCjd/wHeLm8JXxdbi0me54ox3rVbr0xPU9ZK6VMtxtuin YnWehFokc/0tfUjeCOiCesbY0t/+uMGynmjQWnMDNyc0xnSzDjLBDjeiAjTSreQ7 HaHjHyxTnC5MBHPV5PDgxL34awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISZVkAH PrfKGJi1QdT/GCh7b+naMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4VqWluXlkUJo4dB8w7irC3bdjH612WrO7VjQaE9RxQ/VU+o+hD0z8 taKrKNLb/WJiVuAzYDvMyp1hDOhS3sWqUTM22RCMIEKUaC2clM9180Cs34lhg1gY Vky+G3LaqZIkwMvSDBBiXfuO1N8gZ8nIO2mNeI4ePh5GFX+Ojki32vjGQS0IChY6 c6Uwgw5LwVIVZO9Wo7FkbcdtA6VRjuNL4lr14/QtPzG7wdp+qAAgKQH/nsAgfvAF yhN9aFQ6GEKEz2Q5c7H0EmwgsWsr2JTo3T61hhmyfA1Ia+EhxvGql3/t1Mv7JnLR DSkzwzvYKaZu5HtKsd4+5m8pDd4ORBXf -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:25 2025 by rpki-client