$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: PU+Xk3zRmAk/TtQcvpXwLH/Mgyh8JnENGsYsxZ6S1Iw= Subject key identifier: CF:F5:61:57:46:FA:56:92:65:E8:50:07:0A:0C:43:7A:A8:65:F3:25 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: A1 Signing time: Sun 02 Nov 2025 22:48:52 +0000 Manifest this update: Sun 02 Nov 2025 22:48:52 +0000 Manifest next update: Sun 09 Nov 2025 22:48:52 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: KSjgJ+TXBAu2kildtVlUmIXJnsyMHtEtL1US87+TjlU=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: OViblnR/lHFk4KXUmFXJa3gycbDpdzSeFdas4fvP/W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Nov 2 22:48:52 2025 GMT Not After : Nov 9 22:48:52 2025 GMT Subject: CN=6907dfd4-083d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:7c:9f:42:97:f6:7a:d3:dc:a7:af:8f:f5: 36:fd:3e:f6:14:e1:cf:1e:9d:8a:78:b6:34:ef:b6: a2:ec:87:97:fe:19:d6:5f:b8:0d:a7:6d:b2:a8:80: 17:94:5a:4e:bd:f7:9d:ed:37:51:7f:1c:38:4a:6c: e1:0d:c9:ae:c6:6b:d1:db:6f:5e:e5:24:78:58:7d: 94:72:72:b9:94:e9:79:9d:3f:c8:56:f7:d8:d6:7d: 0e:bf:1a:af:b0:f9:5b:89:88:7a:07:4b:0d:5b:ef: b9:4e:26:87:89:de:bb:07:fa:52:f1:1a:de:fc:8f: be:1b:e3:2b:83:25:7d:d8:ff:3f:5e:30:55:1f:fb: 34:f4:e1:ed:9e:86:d4:a2:44:71:bf:b0:c4:15:a5: 05:a5:c2:d0:46:2f:5c:72:e2:89:17:67:6c:76:4e: 4b:ce:6a:18:94:f1:f4:5d:da:b5:50:b0:e2:c0:46: 39:ea:e9:58:44:c2:33:36:7c:65:b7:c7:90:7a:27: 29:3e:92:e9:c7:74:dd:46:40:59:e3:14:82:a5:fe: c6:8c:c4:0a:d9:8c:fa:ef:80:ca:2c:54:0f:e4:e1: 01:16:17:9a:16:cf:20:2c:21:8e:93:c7:8d:ef:a6: df:6c:03:d3:9f:46:c3:07:1b:f1:ce:f1:dd:45:32: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F5:61:57:46:FA:56:92:65:E8:50:07:0A:0C:43:7A:A8:65:F3:25 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7c:7b:5f:15:4a:35:c7:18:27:24:e8:e6:b1:c3:84:78:66: 6e:0b:c2:3b:cb:90:70:06:f4:7b:c9:03:0b:10:ea:02:95:99: 4d:d6:35:29:a5:b6:66:3f:9b:0e:a7:9c:29:cc:9d:04:ff:f8: 08:11:4a:7e:2a:46:3e:7b:ce:94:49:87:f9:06:ce:e1:ef:5a: c9:82:56:6b:a2:2d:f4:ff:ee:70:8f:fd:70:a6:04:0f:89:d2: 95:9b:56:39:f9:7c:05:85:1f:ba:69:19:52:13:5a:b4:8c:6c: 00:4d:16:b6:7f:86:dd:44:e6:fb:61:85:4e:62:64:9a:89:86: 2e:b1:53:ea:65:a6:f2:72:42:59:2b:c2:12:80:28:9e:96:32: 8c:b8:d8:57:41:0d:73:cb:81:de:6c:09:0b:01:18:a1:ba:4b: f1:bd:85:da:c3:3b:48:df:34:49:21:e4:85:f9:0c:9a:3e:94: 51:a4:48:0e:cb:23:e4:99:ae:04:d4:38:80:e1:33:c9:4e:46: dd:d4:90:97:13:8d:96:a6:65:0b:2a:95:ec:52:3f:7d:1e:61: 4a:49:98:a5:c4:a6:c4:a0:24:c6:10:f5:e3:24:ba:25:da:4b: 22:96:bd:74:29:02:c1:e2:6d:ea:1e:80:66:4b:78:1f:c7:4e: ad:ce:86:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx ODhBQTE1NkYwHhcNMjUxMTAyMjI0ODUyWhcNMjUxMTA5MjI0ODUyWjAYMRYwFAYD VQQDEw02OTA3ZGZkNC0wODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/V8n0KX9nrT3Kevj/U2/T72FOHPHp2KeLY077ai7IeX/hnWX7gNp22yqIAX lFpOvfed7TdRfxw4SmzhDcmuxmvR229e5SR4WH2UcnK5lOl5nT/IVvfY1n0Ovxqv sPlbiYh6B0sNW++5TiaHid67B/pS8Rre/I++G+MrgyV92P8/XjBVH/s09OHtnobU okRxv7DEFaUFpcLQRi9ccuKJF2dsdk5LzmoYlPH0Xdq1ULDiwEY56ulYRMIzNnxl t8eQeicpPpLpx3TdRkBZ4xSCpf7GjMQK2Yz674DKLFQP5OEBFheaFs8gLCGOk8eN 76bfbAPTn0bDBxvxzvHdRTImzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/1YVdG +laSZehQBwoMQ3qoZfMlMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhn TVc0T0pYYnlKc0lZaXFGVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUfHtfFUo1xxgnJOjmscOEeGZuC8I7y5BwBvR7yQMLEOoClZlN1jUp pbZmP5sOp5wpzJ0E//gIEUp+KkY+e86USYf5Bs7h71rJglZroi30/+5wj/1wpgQP idKVm1Y5+XwFhR+6aRlSE1q0jGwATRa2f4bdROb7YYVOYmSaiYYusVPqZabyckJZ K8ISgCieljKMuNhXQQ1zy4HebAkLARihukvxvYXawztI3zRJIeSF+QyaPpRRpEgO yyPkma4E1DiA4TPJTkbd1JCXE42WpmULKpXsUj99HmFKSZilxKbEoCTGEPXjJLol 2ksilr10KQLB4m3qHoBmS3gfx06tzobN -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:37 2025 by rpki-client