$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json) Hash identifier: UlYN76AviacR+FHuLGs8WD9yZeLyPvfaFgfY6+pZAek= Subject key identifier: 39:92:A2:0E:7F:D6:CF:D6:01:B7:81:9C:A0:BD:8F:EB:5B:18:92:7F Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft Manifest number: 23 Signing time: Wed 05 Nov 2025 07:55:43 +0000 Manifest this update: Wed 05 Nov 2025 07:55:43 +0000 Manifest next update: Wed 12 Nov 2025 07:55:43 +0000 Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: 3HqivPOPQcAeD5oxw20+xMwX5pw1wfDVkfa93SZ1amc=) 2: 30A0F15C844211F08D5EDC71C4F9AE02.roa (hash: InIaj/oLsOP7BoW0eQNCHw7tjMCZzbrG21iu4aAkWXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Nov 5 07:55:43 2025 GMT Not After : Nov 12 07:55:43 2025 GMT Subject: CN=690b02ff-59d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:06:d4:8f:47:f4:0b:b1:3a:91:92:96:f9: c8:6c:dd:1e:67:7c:6d:6f:89:25:13:9a:45:62:0d: 01:bb:45:ee:98:d1:13:8f:4a:f5:b6:ed:b2:4a:0d: 70:c1:6f:b1:aa:72:21:c1:9d:92:2e:b8:9b:a5:8f: 7c:6a:63:49:6f:29:95:98:50:90:0c:47:1f:db:3f: eb:0b:3a:15:d0:b9:a0:43:80:46:38:4c:3a:b5:e0: 2c:3f:9f:1a:bf:da:c4:da:d7:f2:74:6c:58:31:06: 66:f1:96:b1:6d:a8:90:9d:6f:bd:d6:28:17:28:f5: 7e:ae:d3:2b:83:4e:88:7f:26:ad:3e:bb:90:da:03: 6b:c9:53:ba:10:6a:7f:4d:3c:4e:19:2c:1c:56:01: 9c:21:30:ef:b9:9c:e7:c7:ea:3c:47:6f:94:52:ef: 7a:27:d6:bd:8b:7c:fa:e1:6a:22:af:b2:8b:c5:27: 61:e7:5a:54:22:91:75:f0:23:a9:ef:04:f2:6e:8c: a8:9d:05:df:41:f1:13:4e:85:36:17:d3:a7:56:e4: e0:ca:83:58:f9:fa:32:c2:b6:d1:73:91:b9:ee:46: d6:0a:87:56:44:35:2b:a9:85:f5:7c:8d:f1:21:43: 7f:eb:75:3e:da:91:dd:0d:53:9f:13:9a:60:d0:0c: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:A2:0E:7F:D6:CF:D6:01:B7:81:9C:A0:BD:8F:EB:5B:18:92:7F X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7c:52:9a:cd:c1:0a:0c:12:ea:19:32:21:22:a4:49:93:01: 98:24:1d:78:90:a8:de:f6:45:15:10:a4:f2:56:36:49:60:8e: 99:34:5a:27:c5:be:33:46:aa:59:fb:a5:29:42:12:14:d2:5f: 49:67:4d:02:34:84:8f:d4:44:ba:2d:6b:bf:66:96:9f:18:ee: 90:f3:d1:83:33:a4:ed:fd:e0:70:ba:04:29:9b:66:59:bb:b3: 31:74:35:24:d2:10:1d:f2:89:c3:a9:59:3c:fb:81:68:24:89: 14:b5:64:af:55:47:9d:7a:e7:fe:b2:7c:66:0d:74:74:a0:ec: 24:87:6b:f6:f5:61:a0:c2:a4:2a:c0:ef:2e:d7:26:f0:69:f0: 40:55:72:a5:f3:46:0d:b6:fa:bd:1e:ab:48:ba:19:89:a3:2e: 58:7e:72:4b:ee:14:04:dd:c9:fd:6e:8b:31:6e:cd:88:76:72: 81:51:14:59:8f:f8:a6:2a:32:dd:43:09:cd:55:4e:75:f2:32: 98:e7:c0:14:6f:3c:43:b1:bc:24:58:0a:db:0f:89:fa:39:0a: 0a:71:25:ee:1e:69:54:88:17:38:ad:9e:42:94:69:01:85:f3: a5:d1:eb:44:ec:ff:e1:2e:12:5b:f2:ac:a7:87:a4:6d:3d:e9: 13:ca:f0:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNTExMDUwNzU1NDNaFw0yNTExMTIwNzU1NDNaMBgxFjAUBgNV BAMTDTY5MGIwMmZmLTU5ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXtAbUj0f0C7E6kZKW+chs3R5nfG1viSUTmkViDQG7Re6Y0ROPSvW27bJKDXDB b7GqciHBnZIuuJulj3xqY0lvKZWYUJAMRx/bP+sLOhXQuaBDgEY4TDq14Cw/nxq/ 2sTa1/J0bFgxBmbxlrFtqJCdb73WKBco9X6u0yuDToh/Jq0+u5DaA2vJU7oQan9N PE4ZLBxWAZwhMO+5nOfH6jxHb5RS73on1r2LfPrhaiKvsovFJ2HnWlQikXXwI6nv BPJujKidBd9B8RNOhTYX06dW5ODKg1j5+jLCttFzkbnuRtYKh1ZENSuphfV8jfEh Q3/rdT7akd0NU58TmmDQDLwXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOZKiDn/W z9YBt4GcoL2P61sYkn8wHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdL V1FfOHA2ekVRY3RrU2hUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFx8UprNwQoMEuoZMiEipEmTAZgkHXiQqN72RRUQpPJWNklgjpk0WifF vjNGqln7pSlCEhTSX0lnTQI0hI/URLota79mlp8Y7pDz0YMzpO394HC6BCmbZlm7 szF0NSTSEB3yicOpWTz7gWgkiRS1ZK9VR5165/6yfGYNdHSg7CSHa/b1YaDCpCrA 7y7XJvBp8EBVcqXzRg22+r0eq0i6GYmjLlh+ckvuFATdyf1uizFuzYh2coFRFFmP +KYqMt1DCc1VTnXyMpjnwBRvPEOxvCRYCtsPifo5CgpxJe4eaVSIFzitnkKUaQGF 86XR60Ts/+EuElvyrKeHpG096RPK8K8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:54 2025 by rpki-client