$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: 2EqBpcgJUbQEv2febZzAG9cPbO3/1tGB6qlC1Vihbk0= Subject key identifier: B1:4D:A5:7F:3F:42:F6:CF:2F:6D:55:1E:0A:0B:43:71:FC:E7:3C:3F Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B7C Signing time: Tue 04 Nov 2025 19:09:01 +0000 Manifest this update: Tue 04 Nov 2025 19:09:00 +0000 Manifest next update: Tue 11 Nov 2025 19:09:00 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: 6OlkExR69wwxZM33OWpTDZcxaGKRlALrFx5zX9e/u6Y=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Nov 4 19:09:00 2025 GMT Not After : Nov 11 19:09:00 2025 GMT Subject: CN=690a4f4c-5826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:06:fc:12:f9:d3:14:fb:31:6e:fa:6f:8e: bf:26:fc:d1:01:75:87:82:45:f9:d0:58:8a:42:8f: cf:c1:65:2e:f2:de:c4:3c:42:d0:2c:f9:5f:f6:06: 05:85:1f:bd:98:4f:51:16:50:7c:f5:d0:2e:54:9c: 28:60:a5:c9:4c:1e:98:3e:35:42:c0:e2:6a:13:8d: fc:98:e8:81:d5:12:26:0b:af:cb:9c:43:c0:6e:51: 75:ef:9a:06:b4:c3:b2:b6:cf:8e:a6:ad:9c:cb:09: 68:2a:f4:82:10:6c:ba:c0:76:12:8b:7b:38:28:21: 15:35:0a:e8:b5:ef:f0:f9:80:d6:82:47:fd:a1:82: fc:1b:7f:de:89:a6:21:72:8b:3c:a2:22:be:eb:1b: 0c:8c:4e:f5:31:70:b2:7b:e9:7d:48:44:b7:fb:11: 41:0c:d2:09:c5:24:74:b6:fe:28:83:96:0a:5d:c5: 49:05:67:b5:4f:0f:86:ca:99:4e:a4:a7:2e:d0:db: cc:3e:66:59:2c:84:19:bd:a7:30:68:b3:00:8d:90: 58:43:d3:b8:7c:87:17:2a:1c:e7:68:5d:76:05:94: c6:81:c7:e3:fa:29:07:26:58:ec:c7:da:ea:7b:34: 07:0d:7d:c4:7b:fc:39:b1:99:f4:ba:5c:fb:8a:40: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:A5:7F:3F:42:F6:CF:2F:6D:55:1E:0A:0B:43:71:FC:E7:3C:3F X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:49:af:15:f4:f6:a4:a6:de:a7:d9:96:84:26:9c:fa:24:bd: fa:63:44:63:80:69:ad:85:51:c3:a0:02:f6:37:65:5c:2a:b1: be:ac:e8:93:fd:f2:96:c5:c7:51:4a:2e:ba:73:5f:fa:de:21: f3:72:94:80:27:f0:5c:0e:56:38:1f:7d:b4:fe:07:ea:6a:de: 11:dc:25:a5:38:de:35:26:5a:00:c0:7a:4b:65:40:d1:b7:80: 2b:4a:a7:78:5e:b7:36:24:ec:d5:59:80:6a:9e:04:ee:b0:97: 08:d3:47:72:be:84:33:ee:ac:ba:98:04:15:20:0e:20:54:1d: 51:62:3e:57:5c:3c:21:da:64:e8:5f:8f:6c:ea:2f:d5:5d:c5: 63:00:97:f7:8a:a6:7d:1d:f2:dc:b2:da:35:96:ae:02:fd:ab: 8d:31:ef:7e:62:53:1c:f1:1d:47:4e:d9:da:3a:94:12:55:6d: 5f:b0:f9:92:88:58:5b:e4:b0:36:59:65:73:be:e2:83:6f:b4: c6:cc:6e:c1:f5:28:76:5d:73:88:f7:08:ec:0e:58:db:a4:88: 36:10:50:47:a5:2a:66:41:7a:36:f2:59:fe:a1:ec:9d:3d:a7: 7d:19:bb:dc:3c:16:ba:07:ef:56:d5:c4:49:bd:7e:df:b8:44: 02:8d:f4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUxMTA0MTkwOTAwWhcNMjUxMTExMTkwOTAwWjAYMRYwFAYD VQQDEw02OTBhNGY0Yy01ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEcG/BL50xT7MW76b46/JvzRAXWHgkX50FiKQo/PwWUu8t7EPELQLPlf9gYF hR+9mE9RFlB89dAuVJwoYKXJTB6YPjVCwOJqE438mOiB1RImC6/LnEPAblF175oG tMOyts+Opq2cywloKvSCEGy6wHYSi3s4KCEVNQrote/w+YDWgkf9oYL8G3/eiaYh cos8oiK+6xsMjE71MXCye+l9SES3+xFBDNIJxSR0tv4og5YKXcVJBWe1Tw+GyplO pKcu0NvMPmZZLIQZvacwaLMAjZBYQ9O4fIcXKhznaF12BZTGgcfj+ikHJljsx9rq ezQHDX3Ee/w5sZn0ulz7ikDKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFNpX8/ QvbPL21VHgoLQ3H85zw/MB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgSa8V9Pakpt6n2ZaEJpz6JL36Y0RjgGmthVHDoAL2N2VcKrG+rOiT /fKWxcdRSi66c1/63iHzcpSAJ/BcDlY4H320/gfqat4R3CWlON41JloAwHpLZUDR t4ArSqd4Xrc2JOzVWYBqngTusJcI00dyvoQz7qy6mAQVIA4gVB1RYj5XXDwh2mTo X49s6i/VXcVjAJf3iqZ9HfLcsto1lq4C/auNMe9+YlMc8R1HTtnaOpQSVW1fsPmS iFhb5LA2WWVzvuKDb7TGzG7B9Sh2XXOI9wjsDljbpIg2EFBHpSpmQXo28ln+oeyd Pad9GbvcPBa6B+9W1cRJvX7fuEQCjfTR -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:59 2025 by rpki-client