$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: DOIGInXi+CDvf9El6DHYItCrsZWbJOSC7E1zFmg+fxA= Subject key identifier: 13:79:5E:78:2C:B8:BA:E6:22:2D:F7:49:11:B2:A1:9F:08:61:7D:21 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 11EB Signing time: Sun 02 Nov 2025 17:11:08 +0000 Manifest this update: Sun 02 Nov 2025 17:11:07 +0000 Manifest next update: Sun 09 Nov 2025 17:11:07 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: QfKKw3PmP+GwdUaE+Th90+EUqrMccbYEW4q2ltHm9xs=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4595 (0x11f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Nov 2 17:11:07 2025 GMT Not After : Nov 9 17:11:07 2025 GMT Subject: CN=690790ab-6067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:ba:27:97:50:0d:10:ff:4c:39:7c:fe:63: 85:ca:fd:35:9f:cd:b4:98:49:8f:57:77:6e:80:3a: 9e:f5:9b:29:f2:e7:5b:06:69:11:c3:09:b0:ec:d3: 3f:b2:d4:a0:53:db:80:1a:69:11:9d:ea:9b:d3:87: 4b:85:d8:76:e5:52:75:24:26:9a:59:40:54:24:e5: 85:54:41:2c:90:a7:cb:92:54:d7:29:80:cf:9f:73: 6d:23:5e:a5:08:f1:9c:31:cb:f1:c3:bc:c3:84:e8: 74:b7:24:d0:07:ed:90:03:37:b1:a3:3a:1d:39:cf: b1:5a:43:7b:e9:2e:5d:72:7a:1d:81:04:c6:d8:30: 82:c0:db:9d:98:c9:f2:f0:77:0b:cc:ac:d0:ae:c9: e9:a7:c1:74:31:d6:c6:24:15:0c:32:c0:ed:79:b2: 1a:ff:07:cc:90:2e:27:5a:a3:0a:74:c3:99:3e:be: 02:ca:44:94:bd:b1:26:25:ec:db:9e:c8:d0:5d:a9: 3b:24:57:97:c6:fd:fb:03:45:b6:ab:c0:de:b1:3c: d8:7e:d5:2a:a7:e8:ae:3d:a2:43:b1:88:1c:c5:03: 50:2c:1d:1a:92:42:56:6f:5c:74:f7:d7:2d:7f:24: 98:ae:6a:b7:92:fe:c4:e4:5f:9d:f9:84:22:54:67: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:79:5E:78:2C:B8:BA:E6:22:2D:F7:49:11:B2:A1:9F:08:61:7D:21 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:90:f5:a7:45:62:2a:f9:2b:3a:d5:79:7c:f4:6c:44:da:02: 4f:f9:c0:85:b4:4f:af:54:86:92:82:bb:de:85:bd:bd:a0:14: 82:ad:dd:c8:7a:08:3d:7a:67:5f:39:fe:c7:d1:30:5c:e3:03: d7:ea:33:cc:38:c7:7d:a8:85:08:0a:c2:da:33:7a:bc:15:f3: 9b:7a:db:a0:2c:48:60:09:ba:e6:c1:91:6d:f3:a9:93:be:82: db:9c:cf:8e:4e:c0:83:0a:98:5a:a2:0f:29:59:62:36:9b:bc: 6e:7c:5f:47:c2:47:72:2a:4c:f9:f4:80:fd:f1:2a:bc:29:06: 46:5f:53:61:3e:f6:52:c7:08:a7:a9:3a:cd:b9:c5:4a:a8:20: c8:5d:2d:fc:61:2a:c3:5c:e1:eb:d5:08:54:16:cb:5f:8e:66: 3c:d5:bb:68:de:dc:7f:b8:30:f9:57:03:98:96:d7:76:a3:b1: 6c:0d:7c:46:ba:75:02:07:87:9f:17:ef:ee:fc:c0:e6:a2:4c: ac:a5:de:f4:5f:ae:9f:01:99:3b:f8:23:34:2a:85:0d:d5:e5: 3f:03:89:39:82:fb:b5:c5:c6:8b:e9:e2:c6:fc:4e:b3:61:c4: d2:91:26:89:3e:af:08:de:2d:ae:61:80:7d:85:95:e1:c6:43: cf:9d:f3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUxMTAyMTcxMTA3WhcNMjUxMTA5MTcxMTA3WjAYMRYwFAYD VQQDEw02OTA3OTBhYi02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniS6J5dQDRD/TDl8/mOFyv01n820mEmPV3dugDqe9Zsp8udbBmkRwwmw7NM/ stSgU9uAGmkRneqb04dLhdh25VJ1JCaaWUBUJOWFVEEskKfLklTXKYDPn3NtI16l CPGcMcvxw7zDhOh0tyTQB+2QAzexozodOc+xWkN76S5dcnodgQTG2DCCwNudmMny 8HcLzKzQrsnpp8F0MdbGJBUMMsDtebIa/wfMkC4nWqMKdMOZPr4CykSUvbEmJezb nsjQXak7JFeXxv37A0W2q8DesTzYftUqp+iuPaJDsYgcxQNQLB0akkJWb1x099ct fySYrmq3kv7E5F+d+YQiVGeC0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN5Xngs uLrmIi33SRGyoZ8IYX0hMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmkPWnRWIq+Ss61Xl89GxE2gJP+cCFtE+vVIaSgrvehb29oBSCrd3I egg9emdfOf7H0TBc4wPX6jPMOMd9qIUICsLaM3q8FfObetugLEhgCbrmwZFt86mT voLbnM+OTsCDCphaog8pWWI2m7xufF9HwkdyKkz59ID98Sq8KQZGX1NhPvZSxwin qTrNucVKqCDIXS38YSrDXOHr1QhUFstfjmY81bto3tx/uDD5VwOYltd2o7FsDXxG unUCB4efF+/u/MDmokyspd70X66fAZk7+CM0KoUN1eU/A4k5gvu1xcaL6eLG/E6z YcTSkSaJPq8I3i2uYYB9hZXhxkPPnfNK -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:32 2025 by rpki-client