$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: PHL7UoAJmGD+MZHbQACTlHJNsfSRsJqus5IwcKkg0U8= Subject key identifier: 6C:AD:98:73:B3:4C:11:97:3B:17:F8:D0:2C:BB:FD:4D:00:24:C6:5F Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0167 Signing time: Wed 05 Nov 2025 04:07:24 +0000 Manifest this update: Wed 05 Nov 2025 04:07:24 +0000 Manifest next update: Wed 12 Nov 2025 04:07:24 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: 3CH7Lx3It3poWspiR39KgSmZw2zsCWOCaNMlGmgfdLQ=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Nov 5 04:07:24 2025 GMT Not After : Nov 12 04:07:24 2025 GMT Subject: CN=690acd7c-66ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:d2:43:a3:f5:af:c1:b9:f2:db:b9:45:67: f7:6f:8a:fd:4f:9b:13:e8:18:c6:1d:1b:24:ab:5b: 4f:da:0a:df:b0:cb:10:23:85:40:e8:c2:bb:ff:11: b9:e4:80:8c:fd:6c:7a:94:f8:6b:21:cc:33:cc:5a: 4e:e1:02:50:e4:3f:76:24:38:ba:1f:58:11:f1:00: fd:89:c7:f9:7a:85:bd:bd:37:ca:f1:03:fc:bc:59: b1:b3:02:82:10:c4:f0:e6:49:f8:ae:d3:60:c8:a2: fb:1d:6e:ca:8d:58:f9:ae:46:7e:1b:11:8e:6c:42: f6:61:7c:cd:0d:f3:76:58:41:86:b7:88:9d:0b:22: f2:7c:b8:31:f0:47:4a:a2:30:f1:76:a2:99:60:dc: a3:98:c7:28:13:e3:02:44:00:db:0a:05:9b:39:27: 21:f0:76:e4:03:6a:09:12:f3:b9:3b:57:d1:a4:fb: b2:41:24:25:92:e5:50:e5:ab:b5:15:e1:ba:5d:a8: 08:0f:c0:2d:38:85:a9:ef:00:cd:74:7f:32:a2:b3: 0d:32:d3:83:38:04:c5:9e:82:fd:16:98:c0:14:35: db:9a:44:9d:97:1b:99:45:07:2e:a4:a2:f7:d8:be: 46:73:e9:b7:2f:09:f4:75:5e:b7:c1:fe:e1:be:81: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:98:73:B3:4C:11:97:3B:17:F8:D0:2C:BB:FD:4D:00:24:C6:5F X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:90:47:ff:d6:03:f7:54:11:23:c2:e7:b9:dd:e4:df:e1:32: 1f:1b:c9:c1:26:64:52:e3:01:cb:cd:c9:45:88:d9:a0:1a:a0: 32:a2:e7:b3:10:eb:d1:1b:9b:01:85:31:df:e2:b0:8d:df:66: c2:6d:a8:b3:89:a2:81:4b:3b:7b:41:1f:b9:11:25:9d:6e:83: f7:ba:b1:17:ed:c2:09:44:6d:8b:05:fd:2e:f3:b8:0a:99:b1: dd:a4:2e:68:b0:09:b8:21:74:07:25:78:09:fd:ee:0d:2c:4c: 06:62:4f:26:6c:a9:76:e7:97:cb:c7:e3:67:e8:11:3d:05:e1: fd:29:fa:0d:a1:e3:ed:3e:35:66:a5:43:49:4c:a1:25:f2:ba: b2:ac:12:2e:46:6f:b1:fd:0a:c5:e5:1a:bb:c9:44:57:d5:6b: 5c:e9:8b:76:45:7f:39:10:35:ef:ae:0c:91:81:c3:5c:fe:89: 68:fe:07:f0:74:ef:93:7a:2b:68:53:ed:81:f8:39:88:22:ec: 46:8d:d2:1d:fc:97:49:65:b1:91:6e:78:2b:ab:d1:28:53:6e: 85:f2:55:d7:7d:4b:4d:60:51:82:94:e2:5e:45:2a:2e:5a:4c: 75:76:7d:c4:13:b8:a2:ab:b5:64:a8:a2:5f:e1:c2:80:0f:3b: 57:ca:19:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUxMTA1MDQwNzI0WhcNMjUxMTEyMDQwNzI0WjAYMRYwFAYD VQQDEw02OTBhY2Q3Yy02NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzirSQ6P1r8G58tu5RWf3b4r9T5sT6BjGHRskq1tP2grfsMsQI4VA6MK7/xG5 5ICM/Wx6lPhrIcwzzFpO4QJQ5D92JDi6H1gR8QD9icf5eoW9vTfK8QP8vFmxswKC EMTw5kn4rtNgyKL7HW7KjVj5rkZ+GxGObEL2YXzNDfN2WEGGt4idCyLyfLgx8EdK ojDxdqKZYNyjmMcoE+MCRADbCgWbOSch8HbkA2oJEvO5O1fRpPuyQSQlkuVQ5au1 FeG6XagID8AtOIWp7wDNdH8yorMNMtODOATFnoL9FpjAFDXbmkSdlxuZRQcupKL3 2L5Gc+m3Lwn0dV63wf7hvoHYowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGytmHOz TBGXOxf40Cy7/U0AJMZfMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYkEf/1gP3VBEjwue53eTf4TIfG8nBJmRS4wHLzclFiNmgGqAyouez EOvRG5sBhTHf4rCN32bCbaiziaKBSzt7QR+5ESWdboP3urEX7cIJRG2LBf0u87gK mbHdpC5osAm4IXQHJXgJ/e4NLEwGYk8mbKl255fLx+Nn6BE9BeH9KfoNoePtPjVm pUNJTKEl8rqyrBIuRm+x/QrF5Rq7yURX1Wtc6Yt2RX85EDXvrgyRgcNc/olo/gfw dO+TeitoU+2B+DmIIuxGjdId/JdJZbGRbngrq9EoU26F8lXXfUtNYFGClOJeRSou Wkx1dn3EE7iiq7VkqKJf4cKADztXyhmY -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:43 2025 by rpki-client