$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: yJS5fM1w84rr9ARcjRubDoSvAIUAsFjRgXLJtl0AgD4= Subject key identifier: 13:50:46:27:30:2E:08:A0:2B:87:B4:1A:18:08:94:9F:6D:D1:56:68 Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0BF1 Signing time: Sun 02 Nov 2025 18:51:16 +0000 Manifest this update: Sun 02 Nov 2025 18:51:16 +0000 Manifest next update: Sun 09 Nov 2025 18:51:16 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: HU3hQ+dbfHT6plss/eE+La4W6Bs60lpWv35EteNir9w=) 2: 7AC6992E655411F088401528C4F9AE02.roa (hash: uIcNx9LJmFIiFy1R//MYnp48SjiCyMS3BH2WDp6mT4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Nov 2 18:51:16 2025 GMT Not After : Nov 9 18:51:16 2025 GMT Subject: CN=6907a824-535a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:0a:bc:9f:0e:37:4d:47:ba:1e:94:53:22: c8:02:d5:9b:72:60:01:ca:e5:7d:b4:89:15:41:ef: 1c:50:70:c6:97:00:db:08:b5:87:dc:da:16:bc:6a: a9:c5:0b:01:c1:51:f0:64:37:1b:5a:0f:1e:ce:de: b2:f2:80:87:6f:00:8c:b0:e0:62:3d:dd:c7:b8:9d: 50:86:f5:d5:a2:ff:a0:4a:0a:14:98:02:e6:66:2f: fa:9a:85:af:9f:e2:df:ad:ff:b7:a3:73:be:eb:07: 50:97:39:17:60:1e:0d:eb:08:be:fa:e3:41:ca:a0: ad:04:de:b0:87:1c:65:72:b7:01:22:c4:c7:67:90: 03:7e:2d:e8:39:b3:31:b2:6b:1e:51:7d:63:68:08: 4b:fa:e1:d8:49:8c:09:6d:8b:34:77:a4:07:0b:7c: 4d:ae:74:b1:b5:70:2c:59:92:d9:2c:33:13:7e:f3: e7:fc:cf:e3:52:1b:96:d9:c1:51:8f:3c:82:b6:85: 74:e6:ae:d7:44:a5:4c:c2:c5:1a:5d:21:74:51:dd: 1c:2e:39:a8:e9:02:e7:07:88:23:0d:eb:ca:58:6b: 66:54:6e:4e:46:41:80:c8:c6:8f:0a:56:68:7b:03: 2e:26:43:c8:5d:45:b9:07:37:0e:b8:4f:b4:10:55: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:46:27:30:2E:08:A0:2B:87:B4:1A:18:08:94:9F:6D:D1:56:68 X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:ac:84:02:bf:30:01:4b:34:fc:78:ba:88:fd:b2:87:2e: 05:bb:e3:62:b0:55:80:c4:be:11:9a:24:96:63:0f:8b:aa:42: fd:7c:3c:0b:a3:b0:39:54:ed:4c:a5:3c:84:44:7b:76:e2:db: 4f:03:f4:f6:3c:2c:59:3b:72:5e:9b:a1:ce:dc:9e:69:e4:f6: 5d:8e:33:3c:d3:85:a1:91:4e:21:ba:76:f0:45:b5:47:89:01: d0:a5:e5:5f:ac:11:b8:1f:23:cd:ee:b3:6a:45:82:26:51:c8: e2:4e:0c:9c:ac:22:a4:be:d4:1e:40:e0:a8:72:88:bf:4b:c3: ec:be:4c:e8:33:0a:df:32:df:a3:0c:1b:1c:1a:bc:30:cc:62: d6:60:5b:77:09:e0:00:c2:d2:78:19:c2:27:0a:b8:aa:ce:1f: 00:23:d0:ea:9e:98:f9:dc:70:8a:73:23:22:0c:20:93:a4:14: 9a:b5:51:3e:09:7d:f8:b2:57:e1:be:fc:8e:ea:61:35:76:ab: 8e:ee:56:2b:ca:01:e7:f2:c8:6c:4f:ac:cb:12:bb:2a:6c:1a: f0:92:53:f0:14:ac:f9:a2:e6:2f:7d:27:49:b1:5e:5b:93:c2: 0a:4a:0d:99:e6:a3:81:a3:e3:e5:4a:84:7a:c3:fb:88:5f:4b: ec:ac:27:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUxMTAyMTg1MTE2WhcNMjUxMTA5MTg1MTE2WjAYMRYwFAYD VQQDEw02OTA3YTgyNC01MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhQKvJ8ON01Huh6UUyLIAtWbcmAByuV9tIkVQe8cUHDGlwDbCLWH3NoWvGqp xQsBwVHwZDcbWg8ezt6y8oCHbwCMsOBiPd3HuJ1QhvXVov+gSgoUmALmZi/6moWv n+Lfrf+3o3O+6wdQlzkXYB4N6wi++uNByqCtBN6whxxlcrcBIsTHZ5ADfi3oObMx smseUX1jaAhL+uHYSYwJbYs0d6QHC3xNrnSxtXAsWZLZLDMTfvPn/M/jUhuW2cFR jzyCtoV05q7XRKVMwsUaXSF0Ud0cLjmo6QLnB4gjDevKWGtmVG5ORkGAyMaPClZo ewMuJkPIXUW5BzcOuE+0EFUrUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNQRicw LgigK4e0GhgIlJ9t0VZoMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTV6yEAr8wAUs0/Hi6iP2yhy4Fu+NisFWAxL4RmiSWYw+LqkL9fDwL o7A5VO1MpTyERHt24ttPA/T2PCxZO3Jem6HO3J5p5PZdjjM804WhkU4hunbwRbVH iQHQpeVfrBG4HyPN7rNqRYImUcjiTgycrCKkvtQeQOCocoi/S8PsvkzoMwrfMt+j DBscGrwwzGLWYFt3CeAAwtJ4GcInCriqzh8AI9Dqnpj53HCKcyMiDCCTpBSatVE+ CX34slfhvvyO6mE1dquO7lYrygHn8shsT6zLErsqbBrwklPwFKz5ouYvfSdJsV5b k8IKSg2Z5qOBo+PlSoR6w/uIX0vsrCcM -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:07 2025 by rpki-client