$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: isyX+XONaacpQe7bbSOGA9+zX4ZXhDgaAI73CVcGorQ= Subject key identifier: D3:E5:AC:1E:5B:BB:E9:79:9D:09:E7:B6:AE:F4:AB:35:3F:A6:77:85 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 0724 Signing time: Tue 04 Nov 2025 23:21:16 +0000 Manifest this update: Tue 04 Nov 2025 23:21:15 +0000 Manifest next update: Tue 11 Nov 2025 23:21:15 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: eOPtVzev0E44KigL2+fKEGRnWJHn1cfSx7UFP0/Vu70=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: hVEGhELX1A8z+OTyICUg8ehNwNYoGDS6osi29y06XSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Nov 4 23:21:15 2025 GMT Not After : Nov 11 23:21:15 2025 GMT Subject: CN=690a8a6b-3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:98:45:05:0b:d0:ab:97:c7:a5:3a:67:68: 97:01:8a:67:16:73:ae:4c:52:40:76:96:33:57:75: d3:15:8f:83:df:09:7b:84:3c:c3:ae:16:c7:50:7e: 8d:77:69:34:37:e9:17:34:47:d8:21:b8:67:04:2a: 96:53:59:35:d3:8a:53:0c:91:19:60:35:4d:01:a1: 5e:a9:99:84:a0:8a:53:ee:fa:6e:49:fb:e8:a5:be: 04:9f:b5:50:5d:4c:51:41:8a:78:a7:d1:e9:70:e3: 07:b5:2f:09:23:40:a2:ec:89:37:d7:f1:91:49:b4: 04:66:10:e4:63:bc:cf:41:9e:71:29:77:e0:df:6e: 2f:79:fe:4b:1a:09:df:aa:04:36:e1:65:89:d9:63: ca:1e:d6:eb:a8:26:a4:8d:b2:53:c3:b5:e6:31:3e: 19:ec:4b:a8:d3:9b:f1:49:cc:af:9d:c3:27:83:dc: fc:b2:25:95:cd:ad:4e:ae:42:54:01:40:98:0a:b7: 33:4f:17:b7:e9:81:ac:87:db:6a:17:c4:b7:55:14: fc:04:ec:fd:aa:94:76:ba:da:5d:ee:f6:aa:2e:02: 84:e5:49:23:f2:af:64:2f:13:e0:31:23:8d:83:89: 4a:01:3c:32:08:b4:09:92:2f:f8:fa:d7:58:12:83: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:AC:1E:5B:BB:E9:79:9D:09:E7:B6:AE:F4:AB:35:3F:A6:77:85 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cb:27:d7:fe:eb:9f:e2:c2:96:2b:73:36:95:6f:d6:17:db: b0:90:57:c9:cf:f5:94:0d:12:c8:f9:e9:23:0e:84:d9:fc:7b: d2:c1:1d:18:33:5c:d6:a8:3c:6f:88:f9:61:3f:e3:64:7a:5f: b9:07:4f:90:3e:c0:02:14:fa:de:98:87:07:c1:fc:de:15:ef: 15:86:48:b9:14:b6:68:ac:bf:ea:e3:14:05:59:23:a5:85:0d: dd:df:13:50:c5:d0:3d:42:d9:c8:13:a6:57:ca:b9:bc:99:da: 2a:b8:63:5c:20:52:64:d6:dc:0c:a5:81:73:74:c1:cb:0f:f2: 0b:8d:cc:79:96:e8:1b:a1:9b:6e:73:8c:eb:0b:3d:e7:18:6d: e7:fe:36:02:6a:26:b7:4e:af:dc:88:11:57:66:a9:65:1d:6e: fa:06:0c:bb:16:30:a2:65:5b:b4:8a:bf:59:5b:1f:e1:ba:6b: 65:4a:b5:d4:be:27:8b:1f:e0:bd:27:a3:74:f1:66:03:14:c5: b8:80:ad:92:fa:f8:32:9b:ba:6b:f1:bf:d8:30:ac:ac:68:2e: 65:36:3a:36:51:06:67:e9:90:58:4d:98:c6:f6:37:0c:b7:bd: 2d:9e:92:e1:a8:fc:cd:dc:a0:3b:e6:08:d2:8a:68:5e:da:a1: 8d:28:76:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUxMTA0MjMyMTE1WhcNMjUxMTExMjMyMTE1WjAYMRYwFAYD VQQDEw02OTBhOGE2Yi0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvKYRQUL0KuXx6U6Z2iXAYpnFnOuTFJAdpYzV3XTFY+D3wl7hDzDrhbHUH6N d2k0N+kXNEfYIbhnBCqWU1k104pTDJEZYDVNAaFeqZmEoIpT7vpuSfvopb4En7VQ XUxRQYp4p9HpcOMHtS8JI0Ci7Ik31/GRSbQEZhDkY7zPQZ5xKXfg324vef5LGgnf qgQ24WWJ2WPKHtbrqCakjbJTw7XmMT4Z7Euo05vxScyvncMng9z8siWVza1OrkJU AUCYCrczTxe36YGsh9tqF8S3VRT8BOz9qpR2utpd7vaqLgKE5Ukj8q9kLxPgMSON g4lKATwyCLQJki/4+tdYEoNaCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPlrB5b u+l5nQnntq70qzU/pneFMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeyyfX/uuf4sKWK3M2lW/WF9uwkFfJz/WUDRLI+ekjDoTZ/HvSwR0Y M1zWqDxviPlhP+Nkel+5B0+QPsACFPremIcHwfzeFe8Vhki5FLZorL/q4xQFWSOl hQ3d3xNQxdA9QtnIE6ZXyrm8mdoquGNcIFJk1twMpYFzdMHLD/ILjcx5lugboZtu c4zrCz3nGG3n/jYCaia3Tq/ciBFXZqllHW76Bgy7FjCiZVu0ir9ZWx/humtlSrXU vieLH+C9J6N08WYDFMW4gK2S+vgym7pr8b/YMKysaC5lNjo2UQZn6ZBYTZjG9jcM t70tnpLhqPzN3KA75gjSimhe2qGNKHax -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:23 2025 by rpki-client