$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: e/kx8QXvwZsW2SG4rJUTvErvRv7X++OE03817RmyNa0= Subject key identifier: E0:B1:CD:2F:2C:AC:2C:32:7D:01:66:32:7A:2F:95:A5:5F:D6:4C:9F Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03E3 Signing time: Wed 05 Nov 2025 00:38:50 +0000 Manifest this update: Wed 05 Nov 2025 00:38:49 +0000 Manifest next update: Wed 12 Nov 2025 00:38:49 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: oDZobLYN8/DFyOhbKLzXPJ7suW+3MNC6la6dAWJubm0=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Nov 5 00:38:49 2025 GMT Not After : Nov 12 00:38:49 2025 GMT Subject: CN=690a9c9a-f6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:f0:a4:fe:f7:16:ed:26:3d:00:b5:32:8f: 71:10:29:3d:98:b9:08:c6:f9:39:d2:23:80:a8:4a: 7e:6b:61:a8:79:f9:d2:71:a8:d6:3e:60:92:98:2d: 52:a5:55:75:12:d9:dd:02:f2:9a:a9:3a:fc:42:b2: de:1a:72:d4:c3:4d:fa:f6:38:76:ce:b9:84:41:cd: 4d:f7:a8:76:cc:50:6f:8c:df:a2:1a:da:97:60:b8: 4f:75:cd:ab:14:82:f1:8f:97:17:58:63:65:b2:d8: 4c:1b:a6:fc:32:9e:00:12:b0:85:49:30:70:d1:e6: db:c5:4d:9f:6e:6d:cd:fd:a6:ba:05:0f:74:6c:98: e6:9a:9a:d3:28:b9:a8:7c:2a:e2:1d:2b:7d:90:4f: 35:5c:6a:d7:2c:1d:ed:a2:39:42:e6:84:d9:c6:29: bd:b3:60:94:71:0a:84:5b:19:ab:07:16:b2:b9:05: 51:7b:fb:18:ba:5a:43:86:bc:19:ed:8b:25:f0:07: 69:00:2b:2f:37:37:68:31:eb:24:8a:0d:61:18:14: 10:b5:06:87:c9:51:89:62:ee:cb:26:28:b9:39:0f: e6:ef:b5:0e:45:8d:5e:47:16:3a:c8:9a:f0:23:30: 1b:40:eb:fb:b4:5b:df:ab:57:e7:41:d0:5c:ce:91: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:CD:2F:2C:AC:2C:32:7D:01:66:32:7A:2F:95:A5:5F:D6:4C:9F X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e6:4a:60:25:47:da:47:f0:f0:c2:28:de:39:07:61:79:9d: 94:c9:45:bc:8a:64:7a:94:9a:c6:b1:1b:34:dc:48:d6:64:69: 10:8e:93:e0:15:62:2b:17:3d:df:a1:92:2e:0b:32:39:e3:f9: 55:6c:6a:57:18:26:41:50:ff:1f:82:7e:89:30:d4:05:59:47: 80:60:6b:d2:9a:45:91:4e:36:3d:8b:d1:76:3b:0a:6d:6b:db: 46:11:5d:33:bb:e1:82:66:36:3a:bc:8c:91:af:ea:d4:85:68: ad:d3:15:59:53:4a:7f:90:8f:17:7f:0a:9c:86:a5:24:1e:78: 44:8f:79:a4:aa:1a:41:c2:3d:2a:7e:31:82:43:bc:95:c4:32: 3d:58:59:a9:c2:16:b5:42:90:2c:7e:91:01:af:d7:3a:72:b5: a1:f8:19:8b:dc:e3:69:14:94:3d:54:67:79:ee:0b:66:20:31: e5:83:f2:35:b7:71:78:7b:8d:82:1e:e4:e0:7a:64:c6:e9:f5: 36:f9:b0:61:13:c7:fc:ea:1f:84:c0:de:cf:0f:44:d3:a9:56: df:67:50:41:91:a6:7c:27:45:e2:e5:ed:5b:d2:1a:bb:84:93: e2:8b:04:9e:b0:22:db:28:b8:fe:7a:8a:b8:ce:e4:aa:6c:70: 2f:db:c5:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUxMTA1MDAzODQ5WhcNMjUxMTEyMDAzODQ5WjAYMRYwFAYD VQQDEw02OTBhOWM5YS1mNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdfwpP73Fu0mPQC1Mo9xECk9mLkIxvk50iOAqEp+a2GoefnScajWPmCSmC1S pVV1EtndAvKaqTr8QrLeGnLUw0369jh2zrmEQc1N96h2zFBvjN+iGtqXYLhPdc2r FILxj5cXWGNlsthMG6b8Mp4AErCFSTBw0ebbxU2fbm3N/aa6BQ90bJjmmprTKLmo fCriHSt9kE81XGrXLB3tojlC5oTZxim9s2CUcQqEWxmrBxayuQVRe/sYulpDhrwZ 7Ysl8AdpACsvNzdoMeskig1hGBQQtQaHyVGJYu7LJii5OQ/m77UORY1eRxY6yJrw IzAbQOv7tFvfq1fnQdBczpG9PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCxzS8s rCwyfQFmMnovlaVf1kyfMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH5kpgJUfaR/DwwijeOQdheZ2UyUW8imR6lJrGsRs03EjWZGkQjpPg FWIrFz3foZIuCzI54/lVbGpXGCZBUP8fgn6JMNQFWUeAYGvSmkWRTjY9i9F2Owpt a9tGEV0zu+GCZjY6vIyRr+rUhWit0xVZU0p/kI8XfwqchqUkHnhEj3mkqhpBwj0q fjGCQ7yVxDI9WFmpwha1QpAsfpEBr9c6crWh+BmL3ONpFJQ9VGd57gtmIDHlg/I1 t3F4e42CHuTgemTG6fU2+bBhE8f86h+EwN7PD0TTqVbfZ1BBkaZ8J0Xi5e1b0hq7 hJPiiwSesCLbKLj+eoq4zuSqbHAv28Uo -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:54 2025 by rpki-client