$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: LYrEhN1hdD2WZfy3m013+IUlrSChNPQZHdPxbNT/Fh4= Subject key identifier: 2D:1A:E3:FA:F2:7B:2C:3B:EF:83:1F:FF:CC:4C:4A:80:56:6F:B5:EF Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: F9 Signing time: Wed 05 Nov 2025 05:19:52 +0000 Manifest this update: Wed 05 Nov 2025 05:19:51 +0000 Manifest next update: Wed 12 Nov 2025 05:19:51 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: xXQfyXeWUUyQGBIYjKkjRXdKfWSaSXKnnhXBH6UIcfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Nov 5 05:19:51 2025 GMT Not After : Nov 12 05:19:51 2025 GMT Subject: CN=690ade77-31dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:ae:fb:e8:39:3a:7a:a8:49:73:fe:48:7d: 1e:a7:54:45:2a:18:2f:08:0b:99:72:30:41:2f:40: 94:52:e9:cf:14:e3:2e:c1:29:90:ca:b6:69:a3:9b: da:3a:e2:89:21:33:5e:7a:d5:e6:69:38:90:e9:24: 55:5c:fa:6d:19:21:67:ed:d4:a3:22:5f:3a:86:55: d4:9b:7a:74:39:f1:ec:41:2b:f4:53:46:69:84:65: 14:9f:d7:a0:0c:4c:f9:6d:92:41:be:59:35:3e:6c: 30:33:79:71:bd:cd:66:a6:d8:9a:e9:c8:37:6c:60: d5:ee:58:1d:78:0f:ed:7f:dd:37:c2:1d:8f:b1:1e: fb:fb:d9:7a:21:d2:1a:a2:e3:ce:87:cc:7d:ba:57: d0:1a:a0:0b:04:16:cc:f7:13:7c:27:35:fe:07:fa: ee:9a:9b:5d:7e:3b:b2:c5:77:7d:5b:22:86:36:ee: 8a:1d:e9:93:2d:b5:f5:7d:5b:ff:bb:b3:66:7e:68: 95:87:a3:4d:7d:8c:7a:70:1d:9f:9f:7e:bb:07:fd: 9f:e0:6a:f3:3c:1a:d6:45:0b:83:69:9f:93:d8:3a: f0:66:29:fa:c6:85:4d:cf:38:6f:b9:f9:c9:5f:55: e9:15:1c:9c:7e:00:c2:50:8e:7e:c9:e4:8d:0e:49: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:E3:FA:F2:7B:2C:3B:EF:83:1F:FF:CC:4C:4A:80:56:6F:B5:EF X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ae:6c:fb:3c:0e:e8:78:39:90:88:92:4c:d6:5a:da:d8:21: 5a:3e:be:fa:7e:26:97:3c:3c:3e:6c:79:62:dd:46:13:22:e5: d6:7e:70:07:e4:36:a3:a4:a4:62:fe:12:34:92:0a:91:f6:89: 85:b5:62:c0:6d:a4:46:07:21:d1:c5:9c:02:ef:71:82:e0:14: 32:41:1c:2f:8b:4b:94:8b:c8:3f:70:d2:47:98:e6:12:1f:9b: 3f:bb:3a:ee:f0:5b:2c:31:75:44:63:78:04:b3:53:73:e8:eb: 1f:d2:51:c1:1e:e0:3b:03:b7:d9:f2:a2:ca:c6:ba:75:42:c1: 01:dc:fb:56:a2:3b:37:2b:97:47:90:55:1c:e0:2e:92:0d:05: 48:7d:91:5d:99:8f:b1:2f:c1:39:5b:d9:d7:66:8d:a7:3b:ee: 75:8a:dd:a5:c1:3f:2f:ce:f9:e5:06:96:5b:bf:f3:07:9c:84: 33:49:20:00:dc:13:49:0f:ea:ee:de:1f:a8:d7:fd:4f:7a:06: 66:08:9e:30:65:57:e9:35:c6:6b:cc:0f:d5:0e:cc:a7:74:bf: 64:cb:1a:fa:49:5a:02:13:a1:44:9e:c2:31:da:26:03:7c:ca: 3b:28:ea:df:8f:0c:d0:21:f2:29:8c:bb:bf:58:d6:fc:35:11: 5f:0a:d0:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFEMTExMTAvBgNVBAUTKDc1QjcxRjU0NkY0N0IyMUVFM0VBOUE4NjUxMTQ2QzFF QzVFQzk1QTYwHhcNMjUxMTA1MDUxOTUxWhcNMjUxMTEyMDUxOTUxWjAYMRYwFAYD VQQDEw02OTBhZGU3Ny0zMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX+u++g5OnqoSXP+SH0ep1RFKhgvCAuZcjBBL0CUUunPFOMuwSmQyrZpo5va OuKJITNeetXmaTiQ6SRVXPptGSFn7dSjIl86hlXUm3p0OfHsQSv0U0ZphGUUn9eg DEz5bZJBvlk1PmwwM3lxvc1mptia6cg3bGDV7lgdeA/tf903wh2PsR77+9l6IdIa ouPOh8x9ulfQGqALBBbM9xN8JzX+B/rumptdfjuyxXd9WyKGNu6KHemTLbX1fVv/ u7NmfmiVh6NNfYx6cB2fn367B/2f4GrzPBrWRQuDaZ+T2DrwZin6xoVNzzhvufnJ X1XpFRycfgDCUI5+yeSNDkkknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0a4/ry eyw774Mf/8xMSoBWb7XvMB8GA1UdIwQYMBaAFHW3H1RvR7Ie4+qahlEUbB7F7JWm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQxMS8wNEQ0NzIwNDNB OEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNoN2o2cHFHVVJSc0hzWHNs YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUQxMS8wNEQ0NzIwNDNBOEExMUVGOTgxN0IyNkFDNEY5QUUwMi9kYmNmVkc5SHNo N2o2cHFHVVJSc0hzWHNsYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBirmz7PA7oeDmQiJJM1lra2CFaPr76fiaXPDw+bHli3UYTIuXWfnAH 5DajpKRi/hI0kgqR9omFtWLAbaRGByHRxZwC73GC4BQyQRwvi0uUi8g/cNJHmOYS H5s/uzru8FssMXVEY3gEs1Nz6Osf0lHBHuA7A7fZ8qLKxrp1QsEB3PtWojs3K5dH kFUc4C6SDQVIfZFdmY+xL8E5W9nXZo2nO+51it2lwT8vzvnlBpZbv/MHnIQzSSAA 3BNJD+ru3h+o1/1PegZmCJ4wZVfpNcZrzA/VDsyndL9kyxr6SVoCE6FEnsIx2iYD fMo7KOrfjwzQIfIpjLu/WNb8NRFfCtDa -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:25 2025 by rpki-client