$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: Pe4Mzi0/1FF1Nqtsp9XTFJ489cqPPuVNO/mx0K/ivFc= Subject key identifier: 81:FE:A0:2E:5E:D2:55:F4:37:38:69:D4:E5:8D:A1:4A:B8:66:C3:CB Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 02DA Signing time: Mon 03 Nov 2025 01:16:13 +0000 Manifest this update: Mon 03 Nov 2025 01:16:12 +0000 Manifest next update: Mon 10 Nov 2025 01:16:12 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: ntHc5WO7oofx3DDluxoiACCdK3N0x6p1OyXNsh3YlBA=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Nov 3 01:16:12 2025 GMT Not After : Nov 10 01:16:12 2025 GMT Subject: CN=6908025d-49ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:ec:3d:3a:dd:72:62:b5:ae:e6:ab:6b:9f: 1a:bc:40:d1:8e:56:58:08:c3:94:7a:75:7c:b2:55: 57:3d:7b:12:ec:b4:02:5b:90:b4:23:2b:3f:2a:24: 3f:b1:bc:fd:e3:99:df:fa:ab:ac:d6:dc:5f:e2:c2: a1:98:98:7b:33:86:01:ee:17:bc:6b:96:4b:10:66: 7c:2b:49:00:84:8a:e3:e4:e2:96:fe:02:11:c8:e9: 2b:85:84:61:a6:cb:23:0f:13:17:78:16:26:b4:0b: 9c:a4:3c:67:b7:68:cd:be:bb:67:2a:1a:f4:82:55: 23:22:a7:f6:f0:99:15:7d:36:73:9f:37:71:c6:d6: 8a:14:0a:38:75:e7:41:25:46:92:18:5e:9d:1d:bc: ab:21:88:77:39:3b:10:b1:d5:6d:21:e7:bb:6b:43: 8b:a5:f8:83:4e:14:6c:7c:8b:95:33:b0:59:af:75: dd:a9:41:07:37:bc:28:49:a8:8b:cc:03:ca:bd:60: 0e:55:79:9e:5d:9b:24:41:bd:f1:e0:54:da:17:c5: de:37:38:15:d2:e5:30:85:dc:b2:69:0f:13:da:b7: e4:b7:4d:2f:d7:c5:56:cd:50:6b:15:2f:f3:23:45: 94:7f:c2:b8:19:4a:4c:64:6a:61:ba:2a:cc:bf:b7: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:A0:2E:5E:D2:55:F4:37:38:69:D4:E5:8D:A1:4A:B8:66:C3:CB X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:27:3f:f1:52:79:14:13:23:1b:e8:9a:0e:a3:b3:ca:f3: 25:c3:60:17:80:ba:49:aa:a5:97:fd:d1:83:08:e5:a1:0c:85: c9:24:b8:12:78:05:42:d9:40:c3:ea:92:60:18:d7:f4:3c:68: da:92:04:de:2d:0d:5a:d8:6d:f8:f8:1a:b9:1a:da:bd:c5:e6: ff:68:a9:ec:07:59:d1:09:60:4e:0b:d1:64:20:05:5e:13:84: fb:05:6d:15:9f:62:df:66:93:6c:4e:80:88:bc:cf:74:93:12: c6:54:a5:da:8e:9f:7a:dd:76:fb:d1:54:a0:38:10:e4:f7:12: eb:46:d0:f9:48:0f:21:2f:3d:dc:57:d7:ab:c7:8d:09:9c:99: 85:99:57:9e:e8:c4:63:f4:74:3f:16:9a:46:4d:f0:46:ae:e8: d7:90:7c:39:88:f4:4b:95:1c:a5:50:91:6d:25:c5:12:e3:87: 2f:15:e3:bb:a0:99:f1:5b:58:e6:d7:70:59:a5:e6:86:c1:5c: fb:eb:5e:38:06:d3:5a:12:be:0b:70:45:12:67:75:35:71:75: c0:8e:3c:ad:2f:d7:bd:59:4f:71:9a:c7:88:41:ef:c7:e0:15: 31:b5:aa:bd:b0:b1:70:93:be:1c:c7:65:3d:a5:c9:03:d0:99: e1:64:c1:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUxMTAzMDExNjEyWhcNMjUxMTEwMDExNjEyWjAYMRYwFAYD VQQDEw02OTA4MDI1ZC00OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqfsPTrdcmK1ruara58avEDRjlZYCMOUenV8slVXPXsS7LQCW5C0Iys/KiQ/ sbz945nf+qus1txf4sKhmJh7M4YB7he8a5ZLEGZ8K0kAhIrj5OKW/gIRyOkrhYRh pssjDxMXeBYmtAucpDxnt2jNvrtnKhr0glUjIqf28JkVfTZznzdxxtaKFAo4dedB JUaSGF6dHbyrIYh3OTsQsdVtIee7a0OLpfiDThRsfIuVM7BZr3XdqUEHN7woSaiL zAPKvWAOVXmeXZskQb3x4FTaF8XeNzgV0uUwhdyyaQ8T2rfkt00v18VWzVBrFS/z I0WUf8K4GUpMZGphuirMv7fQ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH+oC5e 0lX0Nzhp1OWNoUq4ZsPLMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk5Cc/8VJ5FBMjG+iaDqOzyvMlw2AXgLpJqqWX/dGDCOWhDIXJJLgS eAVC2UDD6pJgGNf0PGjakgTeLQ1a2G34+Bq5Gtq9xeb/aKnsB1nRCWBOC9FkIAVe E4T7BW0Vn2LfZpNsToCIvM90kxLGVKXajp963Xb70VSgOBDk9xLrRtD5SA8hLz3c V9erx40JnJmFmVee6MRj9HQ/FppGTfBGrujXkHw5iPRLlRylUJFtJcUS44cvFeO7 oJnxW1jm13BZpeaGwVz76144BtNaEr4LcEUSZ3U1cXXAjjytL9e9WU9xmseIQe/H 4BUxtaq9sLFwk74cx2U9pckD0JnhZMGm -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:06 2025 by rpki-client