$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: VNttPOSe4PRDLdLrO9AWQmuSNysHfSpOB1UM30sfogU= Subject key identifier: 00:91:EC:0A:FA:69:87:86:EB:C4:EC:A4:80:3C:99:A8:74:6C:C8:6A Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 2B Signing time: Mon 03 Nov 2025 07:40:31 +0000 Manifest this update: Mon 03 Nov 2025 07:40:31 +0000 Manifest next update: Mon 10 Nov 2025 07:40:31 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: 4lq6IskfPz8o/a+7CY8P/f2kwO6TD6m8GzIr7Vgv2/g=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Nov 3 07:40:31 2025 GMT Not After : Nov 10 07:40:31 2025 GMT Subject: CN=69085c6f-508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:24:43:3e:94:d7:e7:e9:6f:0a:53:0d:6e:2b: 82:ee:d2:af:7e:ae:66:dd:ba:74:02:0f:7b:9f:8a: 55:20:9e:1e:6b:c1:63:08:ac:a5:01:3b:be:f4:e1: 59:e8:5a:68:e7:1a:2a:3a:95:70:1b:52:3b:1f:b2: 9b:d1:56:bc:50:a4:49:e7:44:22:62:b9:99:c3:95: a5:e3:44:13:45:de:47:f4:5c:57:be:67:3d:9c:43: 4d:8b:1a:ba:c9:d5:61:43:91:23:a0:7d:22:4d:db: be:b1:d4:d3:80:60:42:3c:b9:90:95:d5:5d:d2:37: c8:88:67:b4:8d:3c:ac:f5:1d:58:be:86:fc:9a:9f: 50:2e:5d:5a:79:e2:b7:5b:87:d8:dd:82:99:a1:b2: ec:a1:36:24:78:ae:27:7a:22:4a:68:7e:30:63:55: b7:3c:cc:80:d3:82:63:0d:5e:fd:9a:6c:49:a0:4b: c6:99:40:5f:5b:1d:88:30:c3:15:c7:9d:8b:74:fb: f0:03:5a:b7:bb:ac:7a:1f:5d:45:c3:b7:d6:de:ab: cc:a7:a9:14:3f:ff:8c:24:ee:12:89:d3:61:3a:16: 5e:e1:0e:4a:dd:36:4d:12:fe:ff:d3:07:06:27:9d: a9:be:2c:71:9b:70:7f:79:16:5c:2f:09:29:97:67: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:91:EC:0A:FA:69:87:86:EB:C4:EC:A4:80:3C:99:A8:74:6C:C8:6A X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a9:d6:80:c9:5e:18:a9:69:ab:b2:72:69:b9:5f:fc:ac:a1: f1:1d:87:b1:b9:be:06:b4:8e:f8:a3:b8:04:0a:40:6a:79:84: e6:d5:68:a7:a1:17:5c:28:a6:09:13:40:ff:50:35:39:bf:09: ae:04:8c:6c:50:eb:51:14:7e:49:58:21:f4:e3:56:41:ca:92: 8e:d5:6e:0c:28:17:43:a8:59:a2:b2:36:84:05:23:19:65:47: 8c:10:34:6c:9a:c1:a0:28:b3:ee:df:aa:6e:7b:ad:4a:9d:c9: 58:66:ad:4c:54:30:54:67:75:70:2e:db:6b:d1:2a:c1:95:53: d9:14:9b:bc:03:37:10:ec:49:b7:47:d2:27:cb:1c:5c:43:58: bc:a8:33:9f:3b:1a:90:a9:31:4b:cd:8f:c3:b4:fd:e6:8f:5e: e7:04:d6:18:73:c1:6b:3b:de:80:e5:cf:3a:1e:7b:f6:6d:88: 52:ef:66:20:67:9f:3a:d5:9d:0c:d2:81:11:a4:af:94:9a:54: ce:47:4c:9f:51:a9:bb:09:b0:98:7f:67:2f:28:ec:48:8c:b2: a6:4c:60:32:27:a7:b3:35:e3:46:53:d6:bf:62:df:55:13:41: 20:ee:a9:99:34:e9:0e:ab:89:ab:b7:5c:1a:8e:3e:43:71:30: cd:84:6d:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNTExMDMwNzQwMzFaFw0yNTExMTAwNzQwMzFaMBgxFjAUBgNV BAMTDTY5MDg1YzZmLTUwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4JEM+lNfn6W8KUw1uK4Lu0q9+rmbdunQCD3ufilUgnh5rwWMIrKUBO7704Vno WmjnGio6lXAbUjsfspvRVrxQpEnnRCJiuZnDlaXjRBNF3kf0XFe+Zz2cQ02LGrrJ 1WFDkSOgfSJN276x1NOAYEI8uZCV1V3SN8iIZ7SNPKz1HVi+hvyan1AuXVp54rdb h9jdgpmhsuyhNiR4rid6IkpofjBjVbc8zIDTgmMNXv2abEmgS8aZQF9bHYgwwxXH nYt0+/ADWre7rHofXUXDt9beq8ynqRQ//4wk7hKJ02E6Fl7hDkrdNk0S/v/TBwYn nam+LHGbcH95FlwvCSmXZxtzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAJHsCvpp h4brxOykgDyZqHRsyGowHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmp1oDJXhipaauycmm5X/ysofEdh7G5vga0jvijuAQKQGp5hObVaKeh F1wopgkTQP9QNTm/Ca4EjGxQ61EUfklYIfTjVkHKko7VbgwoF0OoWaKyNoQFIxll R4wQNGyawaAos+7fqm57rUqdyVhmrUxUMFRndXAu22vRKsGVU9kUm7wDNxDsSbdH 0ifLHFxDWLyoM587GpCpMUvNj8O0/eaPXucE1hhzwWs73oDlzzoee/ZtiFLvZiBn nzrVnQzSgRGkr5SaVM5HTJ9RqbsJsJh/Zy8o7EiMsqZMYDInp7M140ZT1r9i31UT QSDuqZk06Q6riau3XBqOPkNxMM2EbXw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:50 2025 by rpki-client