$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: jNVJ7JZUIu9D8GJATEU97c8GLdrGKN5unPR5ych51K4= Subject key identifier: 31:89:D8:6D:07:DE:05:D4:EA:FF:0F:BD:B2:0D:CC:86:63:C7:16:C7 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 1149 Signing time: Tue 04 Nov 2025 17:20:44 +0000 Manifest this update: Tue 04 Nov 2025 17:20:43 +0000 Manifest next update: Tue 11 Nov 2025 17:20:43 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: mrWOn3mb6Ik/RBHLkkFjx1hSntns92j7ZTsHm0zAj70=) 2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) 4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 5: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4454 (0x1166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Nov 4 17:20:43 2025 GMT Not After : Nov 11 17:20:43 2025 GMT Subject: CN=690a35eb-9370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:3e:0f:9a:2d:1a:5b:8e:c0:8d:3b:e8:db: 53:ee:ef:cb:15:e8:d7:65:5a:2c:12:d9:4f:30:e3: e9:bf:ca:89:a1:e7:d3:75:3f:5d:3b:65:f2:a3:93: 9b:65:94:5d:2a:02:5b:7f:5a:10:1f:ae:b4:d5:97: 0c:a2:8d:1f:e2:94:96:9a:98:64:52:4b:5d:1a:e0: d2:43:db:31:3f:2c:38:ee:f6:e8:22:55:8f:76:4f: 5f:be:3e:d5:43:12:b4:76:8f:a4:6d:1c:92:01:b4: de:8c:1b:04:b8:9b:2d:17:46:4f:42:a0:c3:e2:9b: cc:37:5d:ba:14:08:af:23:f3:c3:bd:a7:5d:20:b6: d6:19:2e:53:a9:e4:fe:13:dd:b8:0e:74:54:54:6f: 0e:5f:38:b9:dc:d5:df:64:a4:0c:12:37:07:94:31: e2:b8:fd:14:43:11:45:86:1c:48:6e:70:b0:3a:fd: 87:70:8c:54:c3:77:39:d7:31:85:bf:28:3c:c6:02: 7a:76:b0:ac:6f:95:49:30:16:fc:75:20:85:64:06: 8a:97:89:61:96:9a:55:2e:1a:38:3a:d3:8d:70:35: f0:ef:d7:6c:6e:38:75:f5:a3:79:80:2e:1d:9b:92: 3c:cf:8a:bc:bd:13:0e:13:aa:39:d3:4a:46:db:74: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:89:D8:6D:07:DE:05:D4:EA:FF:0F:BD:B2:0D:CC:86:63:C7:16:C7 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c0:3c:64:86:b4:df:39:93:5f:61:18:3b:f6:b4:bc:ff:c3: 05:08:ea:bb:e8:84:ef:14:6b:98:04:b0:ed:fb:ed:f6:e5:ea: c6:70:aa:ba:81:81:c6:51:fb:de:81:43:79:ea:82:db:cc:a8: 6e:28:5c:c7:e7:bf:24:f3:d2:7e:d8:29:ec:09:3d:52:63:6a: cc:b9:19:e3:a0:d7:e3:d6:75:fb:95:b6:a6:fe:d2:8c:0a:6c: f8:58:56:30:54:68:72:de:44:fe:e9:e8:84:f4:d2:cc:66:a0: 5a:45:7c:22:a2:8d:e2:d2:71:93:23:2b:b8:6b:60:7d:82:ff: ab:91:9e:a0:e4:1e:af:4d:6f:e2:34:bf:34:2e:40:ee:51:58: 62:5c:e9:75:18:c7:71:23:8a:99:be:d4:63:aa:49:76:14:80: 0a:ca:a3:2c:78:3a:32:11:3d:6e:14:b7:4a:3a:ec:86:b1:3e: 58:2c:d1:55:d3:68:81:e1:0e:f3:70:7c:a2:5c:fa:12:fa:ad: 06:ae:ea:10:39:36:4d:b3:89:d8:2d:d2:cd:ad:87:a2:ff:a5: 47:06:30:aa:55:39:ac:85:a2:25:b9:ed:96:b5:00:1b:d9:50: e8:3e:4b:9f:d7:d5:74:c9:4f:42:09:d5:69:82:92:8d:3c:c2: 34:61:c1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUxMTA0MTcyMDQzWhcNMjUxMTExMTcyMDQzWjAYMRYwFAYD VQQDEw02OTBhMzVlYi05MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt10+D5otGluOwI076NtT7u/LFejXZVosEtlPMOPpv8qJoefTdT9dO2Xyo5Ob ZZRdKgJbf1oQH6601ZcMoo0f4pSWmphkUktdGuDSQ9sxPyw47vboIlWPdk9fvj7V QxK0do+kbRySAbTejBsEuJstF0ZPQqDD4pvMN126FAivI/PDvaddILbWGS5TqeT+ E924DnRUVG8OXzi53NXfZKQMEjcHlDHiuP0UQxFFhhxIbnCwOv2HcIxUw3c51zGF vyg8xgJ6drCsb5VJMBb8dSCFZAaKl4lhlppVLho4OtONcDXw79dsbjh19aN5gC4d m5I8z4q8vRMOE6o500pG23S/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGJ2G0H 3gXU6v8PvbINzIZjxxbHMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBowDxkhrTfOZNfYRg79rS8/8MFCOq76ITvFGuYBLDt++325erGcKq6 gYHGUfvegUN56oLbzKhuKFzH578k89J+2CnsCT1SY2rMuRnjoNfj1nX7lbam/tKM Cmz4WFYwVGhy3kT+6eiE9NLMZqBaRXwioo3i0nGTIyu4a2B9gv+rkZ6g5B6vTW/i NL80LkDuUVhiXOl1GMdxI4qZvtRjqkl2FIAKyqMseDoyET1uFLdKOuyGsT5YLNFV 02iB4Q7zcHyiXPoS+q0GruoQOTZNs4nYLdLNrYei/6VHBjCqVTmshaIlue2WtQAb 2VDoPkuf19V0yU9CCdVpgpKNPMI0YcH9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:29 2025 by rpki-client