$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: BvAXx2EfIhRPxwi2ufAXoWzxoaR3oKA1LxHy0XNjBRY= Subject key identifier: B8:59:D6:02:A5:3C:EF:D2:36:44:17:E4:5B:AF:27:93:93:FC:4E:18 Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 0361 Signing time: Mon 03 Nov 2025 00:54:45 +0000 Manifest this update: Mon 03 Nov 2025 00:54:45 +0000 Manifest next update: Mon 10 Nov 2025 00:54:45 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: bdzeNDjy+42Im4QdZAlWl0iJPqVPRvkdp2vqdphAE7A=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Nov 3 00:54:45 2025 GMT Not After : Nov 10 00:54:45 2025 GMT Subject: CN=6907fd55-af02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:d7:4b:5a:73:1f:62:e5:8d:8a:04:49:eb: 25:82:24:cc:ee:be:69:53:72:45:d7:0e:ed:bc:bb: 20:37:09:fb:63:96:0d:1b:22:c0:0d:8a:9b:53:cb: b0:41:bf:d1:5b:a5:76:65:a7:04:7b:4d:b8:29:47: 35:53:e3:36:66:92:c1:da:91:72:cd:8c:d9:78:27: 46:84:a6:02:8f:18:34:63:a2:3e:48:f2:10:04:26: b1:26:22:b6:86:a8:9e:fe:65:bb:2f:18:eb:4f:58: fb:d5:f0:f9:dc:38:c9:d5:29:b4:04:70:9c:00:6c: df:6a:d8:c4:80:46:01:ab:dd:7d:95:df:ec:70:ad: ab:20:b8:bb:88:83:46:f5:12:29:6c:d0:54:f0:75: 6b:13:56:97:df:7a:8c:82:82:11:d3:ab:0a:a7:b6: d4:60:8e:e7:a0:70:22:a9:c1:bf:cf:49:f4:6d:62: aa:f6:c4:46:de:73:93:48:0e:ec:65:b7:0e:18:f6: f2:cb:4e:d5:d5:f7:8a:18:b5:92:84:6c:c0:92:e9: 64:23:84:4b:08:a4:38:90:2e:2a:09:28:2d:fa:2b: 82:80:1d:b2:41:ff:1e:dc:57:bf:00:9d:d0:70:03: 49:1c:93:31:82:0e:54:51:fa:b9:55:53:8d:6b:12: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:59:D6:02:A5:3C:EF:D2:36:44:17:E4:5B:AF:27:93:93:FC:4E:18 X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8f:11:01:ae:89:a4:a8:18:f7:e7:70:74:b2:43:9f:0f:93: 33:42:3c:69:21:70:c7:d0:39:e1:25:c6:6f:91:4a:94:bd:c7: 57:5b:48:0e:d5:5d:e7:7c:b5:a6:31:b4:54:f5:80:eb:3b:f0: 8e:fa:34:8f:5d:ab:28:0f:d4:44:3a:f1:cb:b7:a5:32:98:10: b5:c6:94:b2:8e:27:70:9a:2c:e2:dd:ed:4d:a3:f3:54:36:f2: d7:8b:0c:bf:b5:c4:07:52:7f:41:53:10:a8:bf:f9:95:ff:71: cc:0c:6d:4a:c9:b0:13:52:54:e7:55:99:41:93:54:06:6d:a5: 12:e3:3a:f2:9a:2d:43:ad:83:36:98:03:02:2c:61:47:f4:68: 8b:78:fa:16:4d:af:f4:57:bc:b1:f9:7d:83:0b:69:e4:35:75: 79:f2:4d:8d:4c:b6:2e:80:03:fa:53:03:bf:03:80:8f:28:a1: 65:27:3c:cb:4a:88:8f:fd:69:42:4b:d5:ab:f7:72:7f:d8:d0: e3:20:7f:5a:1d:ff:96:1d:e3:68:74:0d:be:04:70:81:da:46: de:8c:0d:da:a7:a7:2d:2e:ed:5c:89:92:c0:72:df:da:6d:d3: 2b:1b:04:b8:c9:41:0f:24:8c:5a:ed:a0:82:30:17:91:0e:60: 2a:1b:67:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUxMTAzMDA1NDQ1WhcNMjUxMTEwMDA1NDQ1WjAYMRYwFAYD VQQDEw02OTA3ZmQ1NS1hZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/3XS1pzH2LljYoESeslgiTM7r5pU3JF1w7tvLsgNwn7Y5YNGyLADYqbU8uw Qb/RW6V2ZacEe024KUc1U+M2ZpLB2pFyzYzZeCdGhKYCjxg0Y6I+SPIQBCaxJiK2 hqie/mW7LxjrT1j71fD53DjJ1Sm0BHCcAGzfatjEgEYBq919ld/scK2rILi7iING 9RIpbNBU8HVrE1aX33qMgoIR06sKp7bUYI7noHAiqcG/z0n0bWKq9sRG3nOTSA7s ZbcOGPbyy07V1feKGLWShGzAkulkI4RLCKQ4kC4qCSgt+iuCgB2yQf8e3Fe/AJ3Q cANJHJMxgg5UUfq5VVONaxJ6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhZ1gKl PO/SNkQX5FuvJ5OT/E4YMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAujxEBromkqBj353B0skOfD5MzQjxpIXDH0DnhJcZvkUqUvcdXW0gO 1V3nfLWmMbRU9YDrO/CO+jSPXasoD9REOvHLt6UymBC1xpSyjidwmizi3e1No/NU NvLXiwy/tcQHUn9BUxCov/mV/3HMDG1KybATUlTnVZlBk1QGbaUS4zrymi1DrYM2 mAMCLGFH9GiLePoWTa/0V7yx+X2DC2nkNXV58k2NTLYugAP6UwO/A4CPKKFlJzzL SoiP/WlCS9Wr93J/2NDjIH9aHf+WHeNodA2+BHCB2kbejA3ap6ctLu1ciZLAct/a bdMrGwS4yUEPJIxa7aCCMBeRDmAqG2cR -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:11 2025 by rpki-client