$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: viJEfGBeGC5ZJSyj8JDd8IMZMjbS6LqGBW0oAv85UYA= Subject key identifier: 03:C6:9C:15:08:30:37:82:E4:CC:35:B8:D8:2E:22:78:46:EF:59:3C Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 048F Signing time: Wed 05 Nov 2025 00:08:27 +0000 Manifest this update: Wed 05 Nov 2025 00:08:26 +0000 Manifest next update: Wed 12 Nov 2025 00:08:26 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: +0eUxR0HjG9tg9vfh/Twj6Hyk59ZLwJxeZVCb0wQ2Ks=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 252kB+fX+BBhzn4gsCNSBIXgmIL37+s/mdPS5IK/AQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Nov 5 00:08:26 2025 GMT Not After : Nov 12 00:08:26 2025 GMT Subject: CN=690a957a-e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:de:8d:ec:33:28:3f:82:80:9f:9f:e1:22: d6:da:76:60:f9:3d:f3:16:38:47:ae:97:c6:fd:a1: 93:7c:87:d8:1d:89:30:1c:f2:09:81:d2:3c:e7:af: 08:45:ba:66:c7:80:76:37:da:f2:21:52:d0:ed:41: 53:c9:cb:ee:74:13:23:86:90:37:f9:b6:a3:0b:8d: 1c:b3:81:4d:ca:f0:3e:11:ad:8b:80:2a:2b:fa:19: a9:87:2a:89:65:17:35:8c:67:da:b1:8d:d1:9b:e8: 2b:59:a4:5d:00:fa:af:74:c5:7d:e2:e9:fe:f2:07: 87:ca:8e:15:a0:8b:fd:7d:0b:fc:d5:29:13:60:f4: 7c:fb:ae:f0:98:47:f4:65:ba:2d:0a:ec:ed:0c:1c: 11:35:cc:12:7e:3b:8f:6d:23:f5:4c:bf:23:c0:56: d7:d2:11:59:7b:3f:96:95:c1:bb:87:d6:ba:5b:d7: 90:77:fd:cc:19:d7:de:a8:d6:12:b4:fe:55:44:6b: be:8e:25:16:4d:58:ce:c7:2e:1c:80:4e:3d:5a:37: ef:cb:af:a4:4b:d6:b6:9b:9b:cb:5c:03:1e:ce:ab: 61:eb:49:ea:4b:eb:47:e0:ae:38:81:ec:29:7b:b7: 25:e2:2f:9d:29:be:55:f5:15:8e:12:8f:9d:db:fd: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:9C:15:08:30:37:82:E4:CC:35:B8:D8:2E:22:78:46:EF:59:3C X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8c:8f:65:40:9b:9a:ce:80:41:e3:c7:af:db:13:4f:eb:80: 7f:5f:28:74:f6:9c:79:32:5d:6b:f5:da:1b:21:65:a8:f2:2e: 63:d1:e7:c2:d8:8d:f8:f5:32:0f:8f:21:fc:e9:cf:89:d7:dc: fd:0b:b9:6e:cc:7e:b4:2a:95:e6:cc:62:f8:2e:3f:84:79:72: 0b:9c:c8:77:5c:e4:60:8a:80:05:fc:1f:60:52:b6:fa:01:c2: 9f:a2:de:3c:ff:60:9b:95:a9:8d:ef:49:86:f5:d7:28:a3:c8: ae:15:63:01:c1:f3:d2:25:52:a1:7f:cc:ce:3b:4d:cf:aa:db: 60:02:f7:e2:72:95:1d:c2:c9:5f:64:f0:3f:33:61:fe:f3:3b: d7:08:1e:f8:c6:1e:e8:41:c8:a2:dc:a6:02:37:77:4c:8f:d3: 90:f8:c4:a1:8f:ba:12:21:77:12:8d:e7:a7:d4:8a:11:0b:35: 0a:ff:05:c8:02:e9:7d:41:30:46:5f:b2:1d:21:54:51:e6:88: 55:ac:b4:77:9c:43:44:4a:36:4a:b5:58:7f:6b:e6:a7:b5:5e: 81:50:6b:8a:3c:5a:12:6d:d6:55:9c:3b:20:61:87:11:cf:bd: 49:28:bb:fa:1d:b7:29:5c:6c:a6:98:4a:ce:5c:3d:fc:4d:4e: 02:fe:4c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUxMTA1MDAwODI2WhcNMjUxMTEyMDAwODI2WjAYMRYwFAYD VQQDEw02OTBhOTU3YS1lNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rjejewzKD+CgJ+f4SLW2nZg+T3zFjhHrpfG/aGTfIfYHYkwHPIJgdI8568I Rbpmx4B2N9ryIVLQ7UFTycvudBMjhpA3+bajC40cs4FNyvA+Ea2LgCor+hmphyqJ ZRc1jGfasY3Rm+grWaRdAPqvdMV94un+8geHyo4VoIv9fQv81SkTYPR8+67wmEf0 ZbotCuztDBwRNcwSfjuPbSP1TL8jwFbX0hFZez+WlcG7h9a6W9eQd/3MGdfeqNYS tP5VRGu+jiUWTVjOxy4cgE49Wjfvy6+kS9a2m5vLXAMezqth60nqS+tH4K44gewp e7cl4i+dKb5V9RWOEo+d2/38OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPGnBUI MDeC5Mw1uNguInhG71k8MB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPjI9lQJuazoBB48ev2xNP64B/Xyh09px5Ml1r9dobIWWo8i5j0efC 2I349TIPjyH86c+J19z9C7luzH60KpXmzGL4Lj+EeXILnMh3XORgioAF/B9gUrb6 AcKfot48/2CblamN70mG9dcoo8iuFWMBwfPSJVKhf8zOO03PqttgAvficpUdwslf ZPA/M2H+8zvXCB74xh7oQcii3KYCN3dMj9OQ+MShj7oSIXcSjeen1IoRCzUK/wXI Aul9QTBGX7IdIVRR5ohVrLR3nENESjZKtVh/a+antV6BUGuKPFoSbdZVnDsgYYcR z71JKLv6HbcpXGymmErOXD38TU4C/kwL -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:16 2025 by rpki-client