$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: bTO20KQqNDPVqo8gLi+y0ePmCIqPSA9n0idBs3JAIDg= Subject key identifier: 67:80:26:52:D3:4C:6E:14:29:50:E8:78:56:E7:38:E9:22:B7:2D:1E Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D05 Signing time: Fri 24 Oct 2025 18:38:14 +0000 Manifest this update: Fri 24 Oct 2025 18:38:13 +0000 Manifest next update: Fri 31 Oct 2025 18:38:13 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: VWZMRDGYyQtfhvmvo5QHW1XlBm8SRsTn84Jb977Rta4=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 18:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Oct 24 18:38:13 2025 GMT Not After : Oct 31 18:38:13 2025 GMT Subject: CN=68fbc796-12ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:71:ee:1c:9a:2c:fb:80:ef:2c:85:7c:97: a3:87:ea:4c:6c:68:4e:1f:29:d6:a2:61:d8:c0:24: 77:ad:5a:fb:2a:c9:d8:4a:7f:0a:ec:2b:73:98:09: 4b:74:10:ed:0a:5f:5f:df:73:bf:c2:85:37:61:ef: 42:a1:69:11:d3:f9:f9:65:8d:3c:81:ff:08:1c:22: d1:1a:fc:bb:a4:a1:4a:18:51:a1:58:3d:3f:24:d4: 98:cd:b5:6a:e6:9e:83:48:a6:c2:ff:af:3e:3a:8e: 96:cc:5a:fe:a8:28:ce:df:0b:ab:b2:d7:55:f1:e5: a1:59:5d:7e:e3:1d:2c:0a:4e:f7:c6:70:20:dd:ba: c4:35:9a:3f:4e:61:ea:c8:57:39:8f:bf:88:2d:47: 4d:73:ca:74:c4:b9:75:fa:d5:80:bf:be:93:d3:f9: ae:de:6f:47:a4:24:de:1b:36:60:81:36:00:12:67: 36:39:2a:13:86:17:56:91:f8:a5:b2:62:24:42:fb: 26:b8:6b:1b:fc:57:07:b5:3f:2b:15:f2:f5:27:bd: d3:7a:93:43:e1:29:4b:72:2a:26:8a:9f:b7:16:1d: 55:d4:47:4a:5f:da:cb:e0:81:e2:f1:3a:c9:51:14: 1e:d5:1c:43:03:2c:6d:78:37:f9:c6:d5:38:eb:39: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:26:52:D3:4C:6E:14:29:50:E8:78:56:E7:38:E9:22:B7:2D:1E X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6c:ba:94:73:52:5c:f9:1e:57:13:57:c9:12:99:dd:3c:f1: cc:c9:bd:eb:db:e2:c1:ec:2a:e8:ac:1c:99:e8:e1:86:02:56: 0d:d0:f7:e0:59:b9:fb:08:4a:f6:65:fd:a2:dc:24:71:be:f2: e2:c8:58:76:b1:22:fc:a8:95:8a:e1:ff:ac:bb:1a:e7:d8:a5: 08:01:8d:33:df:e2:63:65:96:14:69:44:fc:62:ef:b3:0b:f1: 24:f7:13:a2:41:18:4d:03:c0:f2:ef:ff:52:b1:f9:9d:98:96: 21:12:60:58:c8:ce:bb:b2:41:58:4f:04:32:7b:c6:76:e2:46: 39:56:39:33:ce:f8:76:e5:f4:97:6f:32:f1:6d:4a:4e:6e:81: 37:e9:12:32:74:d9:23:ff:2d:29:fe:5d:2a:37:3a:ef:ae:6d: 24:78:28:df:1c:af:b7:59:a0:95:71:ba:57:4b:06:e4:ae:e0: 9d:38:2e:eb:ff:10:48:f8:d7:e3:1a:eb:86:61:84:85:28:46: 11:b2:03:de:89:94:79:d8:f3:82:0f:e4:6c:b6:5e:2a:d6:87: 0f:49:50:d0:c8:d4:84:48:e4:4d:91:2b:fd:c6:ba:5c:19:87: b4:87:7a:42:6d:82:94:83:23:cf:23:e8:cb:5f:b2:30:1b:16: 0b:a3:41:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMDI0MTgzODEzWhcNMjUxMDMxMTgzODEzWjAYMRYwFAYD VQQDEw02OGZiYzc5Ni0xMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFRx7hyaLPuA7yyFfJejh+pMbGhOHynWomHYwCR3rVr7KsnYSn8K7CtzmAlL dBDtCl9f33O/woU3Ye9CoWkR0/n5ZY08gf8IHCLRGvy7pKFKGFGhWD0/JNSYzbVq 5p6DSKbC/68+Oo6WzFr+qCjO3wurstdV8eWhWV1+4x0sCk73xnAg3brENZo/TmHq yFc5j7+ILUdNc8p0xLl1+tWAv76T0/mu3m9HpCTeGzZggTYAEmc2OSoThhdWkfil smIkQvsmuGsb/FcHtT8rFfL1J73TepND4SlLciomip+3Fh1V1EdKX9rL4IHi8TrJ URQe1RxDAyxteDf5xtU46zlKfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeAJlLT TG4UKVDoeFbnOOkity0eMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAObLqUc1Jc+R5XE1fJEpndPPHMyb3r2+LB7CrorByZ6OGGAlYN0Pfg Wbn7CEr2Zf2i3CRxvvLiyFh2sSL8qJWK4f+suxrn2KUIAY0z3+JjZZYUaUT8Yu+z C/Ek9xOiQRhNA8Dy7/9SsfmdmJYhEmBYyM67skFYTwQye8Z24kY5Vjkzzvh25fSX bzLxbUpOboE36RIydNkj/y0p/l0qNzrvrm0keCjfHK+3WaCVcbpXSwbkruCdOC7r /xBI+NfjGuuGYYSFKEYRsgPeiZR52POCD+Rstl4q1ocPSVDQyNSESORNkSv9xrpc GYe0h3pCbYKUgyPPI+jLX7IwGxYLo0ES -----END CERTIFICATE-----Generated at Sat Oct 25 17:26:52 2025 by rpki-client