$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json) Hash identifier: MhlwGy4O8xqAdERrcJPXQstWvu7miKw7SL0SYLCbUMI= Subject key identifier: 8A:4E:7F:E7:67:9E:00:DA:8F:47:60:B5:3B:E4:15:92:BC:3C:CF:C2 Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft Manifest number: 01C8 Signing time: Wed 05 Nov 2025 03:01:40 +0000 Manifest this update: Wed 05 Nov 2025 03:01:40 +0000 Manifest next update: Wed 12 Nov 2025 03:01:40 +0000 Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: CGQI3i180UuniKha4nDxSybEnvKIzpX3c8F8v+jLW1c=) 2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: RyO6brDZcon28lskHekrQI6icOmLyy8RHSVJF6PV6RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: Nov 5 03:01:40 2025 GMT Not After : Nov 12 03:01:40 2025 GMT Subject: CN=690abe14-df4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:99:d6:c0:9c:99:7a:17:02:74:6a:b2:31: 01:82:b4:ec:e6:dd:5a:89:04:4a:d6:32:96:1a:c7: 66:15:13:28:b9:06:ec:03:8e:7f:82:a6:e2:58:3f: f7:74:72:e7:69:73:40:a0:02:fa:71:52:c8:60:57: d2:77:78:7e:2d:a8:c4:ab:34:13:08:67:29:12:ca: 22:39:43:a6:f8:0c:fd:a0:1b:52:42:d4:ae:aa:11: ac:cc:ee:37:af:49:ff:35:2b:dd:92:60:f6:63:44: 3d:8e:b2:b9:75:74:77:2c:2c:b6:d2:09:d5:db:84: bc:fa:65:7d:de:ab:9d:5a:11:f2:5e:df:eb:11:5f: e9:7b:1a:b2:f2:c6:5a:24:28:7a:96:ae:45:b1:b3: 05:a8:40:84:f8:fc:94:bf:b3:10:0f:a3:39:cd:e1: a3:d1:ae:78:02:97:f8:bc:c9:2e:a0:b9:ca:82:6a: 81:ee:1d:42:63:29:e2:40:6c:1e:4c:14:6e:53:19: 82:4a:95:14:e2:d3:45:eb:66:f1:3b:c2:3d:ea:52: 20:b6:4b:63:a4:01:2e:e4:cc:4a:38:36:07:95:4b: 48:d6:5a:bc:e5:47:86:aa:3f:59:66:b3:cd:d0:60: 4b:bc:2e:e6:22:28:b8:a7:ad:ed:2a:aa:ec:b6:3b: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:7F:E7:67:9E:00:DA:8F:47:60:B5:3B:E4:15:92:BC:3C:CF:C2 X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c8:62:28:3d:d6:37:d1:e4:9f:74:21:fb:1e:e7:51:db:1a: 26:4c:32:7a:ef:04:d7:ec:df:a3:03:73:08:da:88:74:fd:07: ea:35:96:62:b8:c7:5b:79:4e:3b:e1:d1:d7:f3:71:a1:4f:96: 37:c4:52:9e:13:d7:8a:a3:b9:14:92:2e:a5:72:b8:3b:3a:17: 0a:79:cd:72:91:70:d7:db:0e:7d:36:1c:c5:4a:d2:6e:85:f4: 5e:04:4e:4b:93:6a:c1:3e:74:88:bb:54:ef:06:c2:cb:e9:14: 82:ba:a6:b2:9a:88:c6:cf:8a:44:35:a8:11:db:10:00:97:40: 13:0a:6e:a0:2c:67:8a:6e:99:cd:a0:12:f4:7f:7a:25:03:d6: d3:82:aa:c6:3e:53:5c:06:dc:7b:7d:17:00:c0:b3:fe:66:95: 2d:8e:dd:63:50:51:65:42:2e:87:ea:90:c5:f7:e4:62:da:d6: d0:80:27:24:2b:d1:9a:8e:fe:af:90:3d:63:11:59:9d:7a:c1: 3f:37:23:4a:6b:a4:ff:ad:06:bd:cf:2d:44:16:b5:17:1e:4c: c8:e0:f2:d1:1b:17:61:4f:ae:85:e5:d6:82:2a:0c:a5:7b:3f: 8a:aa:12:f8:55:b5:0f:95:db:5c:fb:10:07:7e:7a:cc:46:6b: f2:41:07:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjUxMTA1MDMwMTQwWhcNMjUxMTEyMDMwMTQwWjAYMRYwFAYD VQQDEw02OTBhYmUxNC1kZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeGZ1sCcmXoXAnRqsjEBgrTs5t1aiQRK1jKWGsdmFRMouQbsA45/gqbiWD/3 dHLnaXNAoAL6cVLIYFfSd3h+LajEqzQTCGcpEsoiOUOm+Az9oBtSQtSuqhGszO43 r0n/NSvdkmD2Y0Q9jrK5dXR3LCy20gnV24S8+mV93qudWhHyXt/rEV/pexqy8sZa JCh6lq5FsbMFqECE+PyUv7MQD6M5zeGj0a54Apf4vMkuoLnKgmqB7h1CYyniQGwe TBRuUxmCSpUU4tNF62bxO8I96lIgtktjpAEu5MxKODYHlUtI1lq85UeGqj9ZZrPN 0GBLvC7mIii4p63tKqrstjv1AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpOf+dn ngDaj0dgtTvkFZK8PM/CMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4 b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0yGIoPdY30eSfdCH7HudR2xomTDJ67wTX7N+jA3MI2oh0/QfqNZZi uMdbeU474dHX83GhT5Y3xFKeE9eKo7kUki6lcrg7OhcKec1ykXDX2w59NhzFStJu hfReBE5Lk2rBPnSIu1TvBsLL6RSCuqaymojGz4pENagR2xAAl0ATCm6gLGeKbpnN oBL0f3olA9bTgqrGPlNcBtx7fRcAwLP+ZpUtjt1jUFFlQi6H6pDF9+Ri2tbQgCck K9Gajv6vkD1jEVmdesE/NyNKa6T/rQa9zy1EFrUXHkzI4PLRGxdhT66F5daCKgyl ez+KqhL4VbUPldtc+xAHfnrMRmvyQQfg -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:33 2025 by rpki-client