$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: /WvVmiz2dut/CeuNICyA9VPHLt54AsH+0q5JhxLYiwI= Subject key identifier: A3:E9:C3:65:64:DE:51:1D:F8:79:AA:F4:73:C1:AC:04:0E:3C:EB:17 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 0827 Signing time: Tue 04 Nov 2025 20:59:53 +0000 Manifest this update: Tue 04 Nov 2025 20:59:52 +0000 Manifest next update: Tue 11 Nov 2025 20:59:52 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: KW0lctHhezFzp4+GKyWRzHXJpFpiBVbpWyFI+p+oBKs=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 433DCsbHOeQOFPBNJfYwdTpevwJm9hk5VYfRWCXU3fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Nov 4 20:59:52 2025 GMT Not After : Nov 11 20:59:52 2025 GMT Subject: CN=690a6948-89ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:b3:cf:f4:af:77:af:1a:a5:5c:29:45:1c: be:39:4c:b1:1d:92:c3:3d:c2:35:df:0b:b4:ed:a4: 86:be:5e:d2:d1:7a:72:5a:8a:1a:99:1d:ea:8a:29: f6:20:60:c9:f2:a7:74:79:40:fa:ec:f9:6c:72:b6: 11:9c:af:34:d0:00:07:0f:93:d3:e1:e9:9b:10:fb: 0f:84:48:ac:5e:f5:e2:58:b3:45:db:fd:fc:f4:3f: 0c:70:b1:33:4f:73:e8:b1:23:c2:7d:81:dc:33:d1: 4e:8c:c6:46:d0:6a:cc:74:18:53:6b:a0:20:06:9a: 70:c8:97:25:1b:6a:32:83:91:b7:ea:1e:3e:32:4f: fb:38:41:a1:64:e1:c2:09:f9:d7:69:89:06:09:14: e2:0c:20:09:b5:43:5c:84:9e:ab:28:ae:84:f5:8c: 36:5a:fe:39:4c:fc:73:de:66:6b:0a:7a:4e:15:f3: a0:aa:5d:3f:17:b8:15:57:80:81:41:75:24:68:be: 47:4e:47:a9:9e:3e:a5:14:83:87:ed:6d:b8:f9:30: 3c:d5:0d:8d:25:25:b9:c7:87:1f:78:9b:0e:bb:36: ca:cd:44:f5:ed:cb:37:ed:17:6a:8d:74:d1:18:d5: 25:5c:12:18:7d:01:92:a3:d9:e6:7a:cf:84:f2:a3: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:C3:65:64:DE:51:1D:F8:79:AA:F4:73:C1:AC:04:0E:3C:EB:17 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6a:4f:1a:62:eb:10:3d:10:82:85:d3:61:20:a9:e4:5a:0b: 0c:1c:37:08:50:3d:c0:d6:6c:31:9e:09:84:7f:07:68:a1:a6: 73:dc:49:2a:43:fb:ac:6a:90:ce:52:82:3c:e9:17:8a:03:11: e5:03:b4:a9:73:d0:34:ee:76:6a:24:43:e7:00:e4:2a:7d:a4: 1f:d6:a4:aa:e0:81:64:22:73:51:d8:48:b1:01:c3:f3:16:b9: 1c:f6:c1:bd:ae:d3:da:e1:cb:d5:ce:6c:8a:25:25:e0:d3:a1: 06:c1:90:8d:6e:64:cd:5b:69:e1:65:ef:32:9f:26:05:e8:0c: 8d:4d:58:50:d2:34:12:eb:02:63:ea:d5:8d:2a:da:5f:28:d9: d4:6e:3a:b4:42:07:6b:cd:23:68:3a:85:41:d0:7d:e0:b6:23: c9:3b:87:c9:20:4f:3c:90:78:63:f3:f9:e2:52:af:f0:48:07: d3:41:52:a0:8c:a7:71:53:72:25:1c:85:45:40:94:a5:47:cd: e8:fb:20:ac:95:54:b4:a2:81:78:c0:ae:07:3c:ab:7f:7b:0f: 0b:32:a3:f1:78:81:e2:1d:5a:ac:b1:cc:f7:89:8e:1b:7d:9f: 58:90:76:22:21:ca:33:d2:d4:67:03:47:03:85:b2:dd:85:4e: df:b8:82:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjUxMTA0MjA1OTUyWhcNMjUxMTExMjA1OTUyWjAYMRYwFAYD VQQDEw02OTBhNjk0OC04OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvSzz/Svd68apVwpRRy+OUyxHZLDPcI13wu07aSGvl7S0XpyWooamR3qiin2 IGDJ8qd0eUD67PlscrYRnK800AAHD5PT4embEPsPhEisXvXiWLNF2/389D8McLEz T3PosSPCfYHcM9FOjMZG0GrMdBhTa6AgBppwyJclG2oyg5G36h4+Mk/7OEGhZOHC CfnXaYkGCRTiDCAJtUNchJ6rKK6E9Yw2Wv45TPxz3mZrCnpOFfOgql0/F7gVV4CB QXUkaL5HTkepnj6lFIOH7W24+TA81Q2NJSW5x4cfeJsOuzbKzUT17cs37RdqjXTR GNUlXBIYfQGSo9nmes+E8qP3CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPpw2Vk 3lEd+Hmq9HPBrAQOPOsXMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdak8aYusQPRCChdNhIKnkWgsMHDcIUD3A1mwxngmEfwdooaZz3Ekq Q/usapDOUoI86ReKAxHlA7Spc9A07nZqJEPnAOQqfaQf1qSq4IFkInNR2EixAcPz Frkc9sG9rtPa4cvVzmyKJSXg06EGwZCNbmTNW2nhZe8ynyYF6AyNTVhQ0jQS6wJj 6tWNKtpfKNnUbjq0QgdrzSNoOoVB0H3gtiPJO4fJIE88kHhj8/niUq/wSAfTQVKg jKdxU3IlHIVFQJSlR83o+yCslVS0ooF4wK4HPKt/ew8LMqPxeIHiHVqsscz3iY4b fZ9YkHYiIcoz0tRnA0cDhbLdhU7fuILz -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:16 2025 by rpki-client