$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: OqYneOJhNbdkMnCPPkrgSAplIe+BI0ustv1TzOfVT0s= Subject key identifier: A1:48:50:50:3A:7C:86:E1:BB:63:E4:77:96:25:16:9E:ED:46:37:72 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 40 Signing time: Mon 03 Nov 2025 07:26:16 +0000 Manifest this update: Mon 03 Nov 2025 07:26:16 +0000 Manifest next update: Mon 10 Nov 2025 07:26:16 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: ojAwT/kWH7h+kXmqKsAIo77Mre/s312I8O+PSJ2jijE=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: O8Z/SaLnBNWGRjL6AfyE+33fscQi14WCCS2K6DsHHDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Nov 3 07:26:16 2025 GMT Not After : Nov 10 07:26:16 2025 GMT Subject: CN=69085918-b26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:37:aa:a6:d5:10:d6:e1:69:87:23:ec:8a: 04:44:10:63:8e:30:5f:3d:60:74:f9:4e:65:99:ff: f7:61:96:a3:39:18:60:23:b4:9f:25:fc:ee:71:b9: c0:d0:56:e8:f7:51:f3:4a:33:66:55:a3:e4:03:1f: c0:d5:a2:fb:42:56:77:99:7c:a0:fd:04:b3:d8:b9: 9e:21:cb:92:0b:f9:ab:ef:79:8f:5f:48:a1:15:5a: f5:76:6e:5c:14:f7:59:2f:cc:61:13:d2:4a:ae:0d: 7d:b7:ff:0d:5d:1a:07:18:ee:75:2e:52:db:46:2d: d5:58:9b:4d:f8:a4:49:17:50:30:16:d5:64:53:45: be:fe:f6:dd:60:69:a6:a7:42:a3:ed:3e:87:9d:bd: ff:8a:f0:a7:cf:53:05:0d:c7:6e:96:03:a8:b8:ef: 3b:7c:9e:7f:11:3e:35:8b:6a:f8:48:23:fb:20:93: 50:9c:0e:27:2b:14:ef:34:52:8a:a3:b7:83:e7:f4: fb:04:a0:3b:c1:a1:ad:ad:2f:bf:cf:a6:35:6b:99: 59:46:31:a9:3a:06:24:f7:10:f3:fe:9b:e9:af:91: 61:4d:5b:8f:c4:0c:af:8f:cb:f1:20:c0:92:cc:f7: f7:32:54:86:42:4c:4b:02:1d:f8:36:4b:21:4c:38: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:48:50:50:3A:7C:86:E1:BB:63:E4:77:96:25:16:9E:ED:46:37:72 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:49:bb:6f:73:ec:ec:44:af:8c:43:4a:84:c4:d3:a9:dc: f7:a1:26:25:d8:44:f9:d8:f1:18:9c:0a:b5:b2:30:ac:41:c6: 70:6d:15:a6:4b:ab:0e:6c:1c:f6:ec:cc:0a:95:dd:38:12:19: 54:55:20:fb:f0:68:cb:df:66:08:be:72:d1:f3:6c:9a:22:91: e0:c7:a4:79:fd:d0:5e:d6:b1:75:0a:14:17:22:39:e8:ad:5a: 71:0e:26:d5:58:b4:44:76:f3:46:3c:17:b0:ad:66:a3:98:51: 9e:57:8b:db:53:a5:d2:89:e7:6c:1b:02:e1:f6:e6:33:68:c4: af:b8:31:e2:32:2b:31:2c:2b:cb:95:dd:d3:be:a6:17:84:10: 39:3c:3c:1f:2a:1c:09:f6:01:ed:d2:e6:2c:58:51:23:a0:46: 4d:d5:2f:d1:a8:11:98:e2:9d:db:0d:16:69:85:c8:bc:d7:4c: 6a:58:3d:e4:cd:a1:c0:79:93:bd:28:d6:95:25:e0:fc:fe:48: 26:45:6b:32:e6:8a:b9:9a:e0:91:1c:fa:ab:ec:97:f5:87:ce: 23:fa:ee:9b:06:d9:be:23:c1:2b:b6:96:45:34:80:0b:9b:fb: 69:d9:c4:f7:7d:d2:3f:d5:9f:7b:e8:7d:b5:c5:0f:19:34:09: ea:95:bf:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0QjFGN0Q5NzhF QzJBMzI4OTAeFw0yNTExMDMwNzI2MTZaFw0yNTExMTAwNzI2MTZaMBgxFjAUBgNV BAMTDTY5MDg1OTE4LWIyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy+jeqptUQ1uFphyPsigREEGOOMF89YHT5TmWZ//dhlqM5GGAjtJ8l/O5xucDQ Vuj3UfNKM2ZVo+QDH8DVovtCVneZfKD9BLPYuZ4hy5IL+avveY9fSKEVWvV2blwU 91kvzGET0kquDX23/w1dGgcY7nUuUttGLdVYm034pEkXUDAW1WRTRb7+9t1gaaan QqPtPoedvf+K8KfPUwUNx26WA6i47zt8nn8RPjWLavhII/sgk1CcDicrFO80Uoqj t4Pn9PsEoDvBoa2tL7/PpjVrmVlGMak6BiT3EPP+m+mvkWFNW4/EDK+Py/EgwJLM 9/cyVIZCTEsCHfg2SyFMOO/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoUhQUDp8 huG7Y+R3liUWnu1GN3IwHwYDVR0jBBgwFoAUMNcZ+cbTfirJ9NbUsffZeOwqMokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzREL0ZDMjA5MTM4NThE RDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1v ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTU5jWi1jYlRmaXJKOU5iVXNmZlplT3dxTW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmly SjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJr7Sbtvc+zsRK+MQ0qExNOp3PehJiXYRPnY8RicCrWyMKxBxnBtFaZL qw5sHPbszAqV3TgSGVRVIPvwaMvfZgi+ctHzbJoikeDHpHn90F7WsXUKFBciOeit WnEOJtVYtER280Y8F7CtZqOYUZ5Xi9tTpdKJ52wbAuH25jNoxK+4MeIyKzEsK8uV 3dO+pheEEDk8PB8qHAn2Ae3S5ixYUSOgRk3VL9GoEZjindsNFmmFyLzXTGpYPeTN ocB5k70o1pUl4Pz+SCZFazLmirma4JEc+qvsl/WHziP67psG2b4jwSu2lkU0gAub +2nZxPd90j/Vn3vofbXFDxk0CeqVv3Y= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:28 2025 by rpki-client