$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft File: DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json) Hash identifier: X0J5fRv4R86c2aclUgLALIXAjN+d+9MP0O/WzXxX7xQ= Subject key identifier: F2:A2:D6:0B:19:82:F8:36:7E:4E:63:45:DC:89:87:9D:FF:BA:46:CE Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft Manifest number: 0C Signing time: Wed 17 Sep 2025 08:50:39 +0000 Manifest this update: Wed 17 Sep 2025 08:50:38 +0000 Manifest next update: Wed 24 Sep 2025 08:50:38 +0000 Files and hashes: 1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: mqGks1moOTXOAr4Ar/UL3EV0kbW1bgiC7UqkLvpJ7H8=) 2: 30A0F15C844211F08D5EDC71C4F9AE02.roa (hash: InIaj/oLsOP7BoW0eQNCHw7tjMCZzbrG21iu4aAkWXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Sep 17 08:50:38 2025 GMT Not After : Sep 24 08:50:38 2025 GMT Subject: CN=68ca765e-ee13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:03:73:03:19:4c:8e:2b:57:0e:06:f4:e6: bc:80:ab:87:6e:7c:18:6a:e8:e0:8e:c8:78:3b:e6: 2f:f0:33:76:e7:1c:2b:30:f7:2f:2d:10:cc:ab:d1: 57:6f:da:ed:93:ec:72:fe:5c:35:76:b2:a9:b7:30: 41:26:10:a0:50:f5:c6:90:76:52:b1:76:42:48:f3: e5:e7:d5:ab:ad:45:dc:67:8f:87:2c:3c:72:02:0f: cc:01:24:03:94:a8:c2:c8:e2:64:a4:1f:57:80:aa: 1b:66:59:20:90:83:13:96:97:61:46:f2:b0:86:c9: 2f:83:6c:f2:79:0b:3f:2a:d4:cd:c8:43:15:42:da: 11:e3:d1:f5:53:fe:50:8f:c7:ac:3e:a1:08:a3:3a: 45:89:9b:5d:91:56:33:bf:0d:47:fc:d4:40:04:36: a3:10:12:da:90:9c:b8:15:c2:5b:f9:fb:16:4f:9f: b7:8a:4e:0c:d0:71:7b:4e:e0:d2:35:e0:41:00:6b: 40:18:78:67:2e:87:18:20:ca:34:8b:7e:67:43:ec: c9:2a:bf:4b:35:15:79:fa:30:f3:25:a9:d4:53:9b: 8d:9b:90:17:6c:0a:d6:b0:83:b7:02:08:9a:02:96: 18:1f:fe:b2:44:83:ae:f5:d9:98:fa:0b:df:08:f2: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:D6:0B:19:82:F8:36:7E:4E:63:45:DC:89:87:9D:FF:BA:46:CE X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:31:e7:00:68:a8:70:c6:12:8d:96:8e:93:6e:b3:31:b6:8d: 80:be:33:7b:19:35:f4:0b:de:f3:6a:1c:bc:17:74:0f:59:9f: 62:0a:18:f1:87:85:24:52:7b:32:6d:17:98:f4:62:76:df:2a: 50:d7:4a:43:29:58:bb:3d:a0:d9:85:bf:94:79:87:15:83:44: 04:9a:d5:18:d9:56:84:45:3c:3b:62:d7:d9:98:0d:21:40:e1: 2c:7c:e9:b3:79:8b:67:08:72:c9:9e:0c:62:ef:fc:0a:db:30: d5:0c:68:b6:e7:f8:e4:66:e1:36:83:8c:5e:68:6a:d8:f8:34: 9d:af:81:0b:e5:42:b5:3c:c4:e5:c8:61:ea:88:7d:b6:e3:54: 0c:03:6c:24:b0:e9:8c:6d:96:97:73:dc:0d:51:a8:78:06:5b: 65:37:72:c0:52:14:6a:31:50:a0:6f:e8:20:1b:b7:c0:dd:e9: ee:d6:21:1e:a1:cc:ad:c9:23:16:7f:07:9b:bd:a9:17:92:5f: d2:c9:aa:86:50:43:57:6d:5d:40:24:ae:8b:61:24:9f:45:98: de:12:1c:ae:39:ef:fb:0f:20:78:94:fc:88:25:0b:ab:05:6f: 64:3c:f2:32:6b:5b:54:6e:c6:4d:32:7f:07:c0:ae:14:12:b4: 11:0f:c1:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNTA5MTcwODUwMzhaFw0yNTA5MjQwODUwMzhaMBgxFjAUBgNV BAMTDTY4Y2E3NjVlLWVlMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIIANzAxlMjitXDgb05ryAq4dufBhq6OCOyHg75i/wM3bnHCsw9y8tEMyr0Vdv 2u2T7HL+XDV2sqm3MEEmEKBQ9caQdlKxdkJI8+Xn1autRdxnj4csPHICD8wBJAOU qMLI4mSkH1eAqhtmWSCQgxOWl2FG8rCGyS+DbPJ5Cz8q1M3IQxVC2hHj0fVT/lCP x6w+oQijOkWJm12RVjO/DUf81EAENqMQEtqQnLgVwlv5+xZPn7eKTgzQcXtO4NI1 4EEAa0AYeGcuhxggyjSLfmdD7Mkqv0s1FXn6MPMlqdRTm42bkBdsCtawg7cCCJoC lhgf/rJEg6712Zj6C98I8hGXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8qLWCxmC +DZ+TmNF3ImHnf+6Rs4wHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdL V1FfOHA2ekVRY3RrU2hUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsx5wBoqHDGEo2WjpNuszG2jYC+M3sZNfQL3vNqHLwXdA9Zn2IKGPGH hSRSezJtF5j0YnbfKlDXSkMpWLs9oNmFv5R5hxWDRASa1RjZVoRFPDti19mYDSFA 4Sx86bN5i2cIcsmeDGLv/ArbMNUMaLbn+ORm4TaDjF5oatj4NJ2vgQvlQrU8xOXI YeqIfbbjVAwDbCSw6Yxtlpdz3A1RqHgGW2U3csBSFGoxUKBv6CAbt8Dd6e7WIR6h zK3JIxZ/B5u9qReSX9LJqoZQQ1dtXUAkrothJJ9FmN4SHK457/sPIHiU/IglC6sF b2Q88jJrW1Ruxk0yfwfArhQStBEPwSI= -----END CERTIFICATE-----Generated at Fri Sep 19 08:51:08 2025 by rpki-client