$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json) Hash identifier: grmb/Tb2jCI6O+EIZlzRnn6wyEAiBtt0vxB+RoWaKog= Subject key identifier: B0:DB:35:DF:0B:EF:94:AA:41:C1:45:28:A9:BE:63:ED:05:5E:69:18 Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft Manifest number: 07D6 Signing time: Sun 02 Nov 2025 21:16:00 +0000 Manifest this update: Sun 02 Nov 2025 21:15:59 +0000 Manifest next update: Sun 09 Nov 2025 21:15:59 +0000 Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: OIa/4sdi2RHnzPgpz9ngYcsLx3LWDBv3/3OArsalR5k=) 2: 99551366132E11F0B588DB49C4F9AE02.roa (hash: OTyt0H9z91P3bWTg6OaaUT+jY+dAsFXcfj0LUHtNJzE=) 3: 98657342132E11F0B588DB49C4F9AE02.roa (hash: Fg/6h/dDbLolGq+Xi5TtVe0Kn2HcE86oCxXe7cAfHc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Nov 2 21:15:59 2025 GMT Not After : Nov 9 21:15:59 2025 GMT Subject: CN=6907ca0f-e65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:fc:32:56:17:64:fc:1f:d9:f7:bd:df:26: c5:8f:90:6d:c6:9b:4b:e5:59:b6:32:9a:d8:43:74: 35:5b:4b:1e:bc:23:6e:21:ef:53:cc:b1:be:da:88: 53:32:be:ae:05:77:e0:65:b3:9c:ae:f9:7d:61:c1: 48:c9:16:4c:cc:99:76:d0:eb:07:41:50:b3:61:a9: bc:f3:e6:05:59:87:45:38:2c:07:95:e5:50:2e:06: c4:8c:8c:d6:4a:13:8e:ae:e5:b1:b6:11:c8:b8:07: a2:58:5e:82:84:f8:82:29:11:22:63:6a:ae:6c:83: 7a:f9:21:18:be:05:bc:0c:94:9e:64:14:06:c6:62: c8:7d:6f:bc:ff:c4:9c:58:94:3e:68:d2:14:f9:b2: 90:e2:c6:a1:e3:f8:f0:90:02:0b:8e:d0:e0:03:55: ad:b8:46:dc:7f:ec:1e:29:7b:1b:68:40:e5:fb:8c: e9:7e:d7:a2:08:e9:4b:d6:e2:8f:05:80:e4:ba:a2: 30:79:a4:e0:c3:45:45:93:e8:91:b2:67:5e:49:b5: e9:b0:9a:91:cc:1f:5f:af:1f:fa:77:2f:49:54:12: 6f:96:a2:11:e1:a7:fb:37:94:da:65:a8:f3:b6:47: a0:2e:60:ab:b7:10:a0:8b:96:3a:b3:a7:87:5b:25: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:35:DF:0B:EF:94:AA:41:C1:45:28:A9:BE:63:ED:05:5E:69:18 X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:45:95:c2:d1:42:a1:9b:78:56:3a:c5:9c:e2:e0:86:06: d1:f2:f6:09:cc:bb:7a:63:54:7a:d8:e8:37:38:79:31:2d:3a: b9:34:06:d9:f6:00:d0:3e:ed:eb:87:e2:3f:42:9d:b6:83:2d: cc:7e:ad:60:6b:98:25:28:e8:01:ac:61:7b:66:73:e2:71:51: ef:8d:cb:02:87:0a:09:b9:57:0c:f9:c5:65:5f:dc:0c:5d:72: b6:47:0e:c0:d8:a1:be:c8:6c:5e:12:6c:92:56:75:59:f2:55: d0:a3:f0:42:8d:58:37:f2:7d:35:34:d5:3d:da:d3:09:6e:3c: 99:54:d0:56:c7:96:23:46:39:22:d1:15:ba:a2:8f:8b:a8:6e: f2:98:39:4c:3a:65:fd:c9:de:2f:7c:35:c2:6e:0a:84:33:6c: 07:1a:08:99:1a:23:0f:ce:1c:94:d5:fa:5f:e8:24:80:77:50: fc:34:ab:e5:0a:c2:6f:8b:f6:39:22:3b:02:45:61:9a:76:18: 3f:6d:2c:30:d9:5c:0f:3f:6d:9c:39:f2:72:cf:1d:4b:d5:3c: 3e:15:4e:af:2d:3b:4d:44:a7:4e:5a:4a:c8:1d:b7:45:0c:32: d7:85:d8:b6:f7:01:3c:0b:70:dd:52:fb:cd:b5:a2:ce:67:be: aa:b2:1d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjUxMTAyMjExNTU5WhcNMjUxMTA5MjExNTU5WjAYMRYwFAYD VQQDEw02OTA3Y2EwZi1lNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu878MlYXZPwf2fe93ybFj5BtxptL5Vm2MprYQ3Q1W0sevCNuIe9TzLG+2ohT Mr6uBXfgZbOcrvl9YcFIyRZMzJl20OsHQVCzYam88+YFWYdFOCwHleVQLgbEjIzW ShOOruWxthHIuAeiWF6ChPiCKREiY2qubIN6+SEYvgW8DJSeZBQGxmLIfW+8/8Sc WJQ+aNIU+bKQ4sah4/jwkAILjtDgA1WtuEbcf+weKXsbaEDl+4zpfteiCOlL1uKP BYDkuqIweaTgw0VFk+iRsmdeSbXpsJqRzB9frx/6dy9JVBJvlqIR4af7N5TaZajz tkegLmCrtxCgi5Y6s6eHWyXUGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDbNd8L 75SqQcFFKKm+Y+0FXmkYMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI RWpZMUJhQ21UZE8zTlhib28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBqkWVwtFCoZt4VjrFnOLghgbR8vYJzLt6Y1R62Og3OHkxLTq5NAbZ 9gDQPu3rh+I/Qp22gy3Mfq1ga5glKOgBrGF7ZnPicVHvjcsChwoJuVcM+cVlX9wM XXK2Rw7A2KG+yGxeEmySVnVZ8lXQo/BCjVg38n01NNU92tMJbjyZVNBWx5YjRjki 0RW6oo+LqG7ymDlMOmX9yd4vfDXCbgqEM2wHGgiZGiMPzhyU1fpf6CSAd1D8NKvl CsJvi/Y5IjsCRWGadhg/bSww2VwPP22cOfJyzx1L1Tw+FU6vLTtNRKdOWkrIHbdF DDLXhdi29wE8C3DdUvvNtaLOZ76qsh1k -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:42 2025 by rpki-client